Addresses and DNS

Every device that joins a network gets an address specific to nixscale and reaches other devices by that address or by name. These addresses are only valid inside your network; they're not exposed to the internet.

Addresses

Every network uses its own block from these ranges; blocks never overlap between networks. The IPv4 block's size depends on the plan (a narrow block on the smallest plan, a wider one on larger plans); the IPv6 block is the same on every plan. In practice what caps your device count is your plan's device limit, not the block size: Plans and limits.

These addresses come from ranges reserved for private use that aren't routed on the internet, so they don't affect your device's normal internet connection. (100.64.0.0/10 is also used by some internet providers on the subscriber side, which is why shared local networks overlapping that range are rejected at approval.)

Reaching devices by name

Instead of memorizing addresses, use the device name: ssh user@office-gateway or https://app-server. You can see the names in the tailscale status output.

Name resolution happens through your network's domain: <network-id>.net.nixscale.com. The form that always works is the full name, <device>.<network-id>.net.nixscale.com; whether the short name works depends on your operating system applying the search domain. Device names come from the device's own computer name at enrollment.

Your device's DNS isn't taken over

nixscale only resolves names that belong to your network; your internal DNS, internet addresses and everything else keep using the device's normal DNS settings.

That's deliberate: a VPN that takes DNS over completely can cut off a device's entire internet access on a network where its DNS servers aren't reachable (a locked-down hotel network, say). nixscale doesn't take that risk.

When does an address change?

Details: Plans and limits.

Shared local networks

Local networks shared by a gateway device (say 192.168.10.0/24) sit outside this addressing plan: those are your own local addresses, and they only become reachable after approval. Details: Share a local network.