Glossary
Short definitions of nixscale and Tailscale terms, and what they're called in the panel.
For:MemberAdminOwnerUpdated September 16, 2026
Short definitions of the terms used in the nixscale panel and in this guide. Follow the links for details.
nixscale terms
| Term | Meaning |
|---|---|
| Organization | The top layer representing your company; the plan, people and subscription live here. Details |
| Network | The isolated environment where your devices meet, with its own control server and address block. Details |
| Control server | A network's brain at <network-id>.hs.nixscale.com: it distributes device records and rules |
| Network ID | A network's 4-character short id (like k7mp); it appears in addresses and in the connection command |
| Device | A computer or server on the network; either a personal computer or a machine. Details |
| Personal computer | A device with an owner; its access comes from people groups |
| Machine | A device with no owner (server, gateway); its access comes from a label |
| Label | A machine's identity; used as the source or destination of rules. Details |
| People group | A list of people on a network; covers their personal computers. Details |
| Rule | A single permission: source → destination → protocol/port. Details |
| Policy | All the rules compiled together; applied to the control server and versioned |
| Key | The single-use code, valid for 24 hours, that enrolls a device |
| Invite | An invitation to join an organization; email plus role, valid for 14 days. Details |
| Seat | A person's spot in the plan; members and pending invites both count |
| Shared network (route) | A local network behind a gateway that becomes reachable once approved. Details |
| Suspension | A network or organization being paused temporarily; data is kept |
Tailscale and networking terms
| Term | Meaning |
|---|---|
| Tailscale client | The open-source app installed on devices that makes the connection. Details |
| WireGuard | The protocol that encrypts traffic between devices |
| Profile | The client's session for one network; several networks mean several profiles. Details |
| Direct connection | Traffic flowing device to device without passing through a relay |
| Relay | A server that forwards traffic when no direct connection is possible; it can't see the content |
| MagicDNS | The name resolution that lets you reach devices by name. Details |
| Subnet router / gateway | A device that brings the local network behind it onto the network |
| Exit node | Routing internet traffic through another device; not available in nixscale |
| CGNAT range | The 100.64.0.0/10 range device addresses come from |
Roles
| Term | Meaning |
|---|---|
| Owner | The organization's owner; can do everything and grants the owner role |
| Admin | Organization admin: an admin on every network, invites people, creates networks |
| Member | Only sees the networks they're assigned to |
| Network admin | Someone assigned to a network as an admin; manages that network's devices, labels, groups and rules |
| Implicit admin | Someone who counts as an admin without being assigned, because they're an organization owner or admin |
| Founder | The person who created the organization; can't be removed from it |