Pangolin

Trackaway is a privacy-first, high-performance VPN built on 100 Gbps infrastructure and modern WireGuard® tunnels. It delivers fast, low-latency, and predictable connectivity for everyday internet use, from browsing and streaming to working in secure network environments. The service is designed so that no user data is collected or stored. Trackaway operates without activity logs, third-party analytics, or tracking mechanisms, keeping the system simple, transparent, and privacy-focused by design. All core components are built to be auditable, with openly described infrastructure and engineer-operated support. Trackaway works with standard WireGuard clients and requires no proprietary applications, making setup straightforward across devices and platforms. A single account supports multiple simultaneous connections, offering flexibility for users who value performance, architectural privacy, and operational clarity.

Headscale is an open-source, self-hosted implementation of the control server used by the Tailscale network, enabling users to keep full ownership of their private tailnets while using Tailscale clients. It supports registering users and nodes, issuing pre-authentication keys, advertising subnet-routes and exit-node capabilities, enforcing access-control lists, and integrating with OIDC/SAML identity providers for user authentication. The server is deployable via Debian/Ubuntu packages or standalone binaries, configurable through a YAML file, and managed via its CLI or REST API. Headscale tracks each node, route, and user in its database, supports route approval workflows, and enables features such as subnet routing, exit node designation, and node-to-node mesh within the tailnet. Being self-hosted, it gives organizations and hobbyists full control over their private network endpoints, encryption keys, and traffic flows, rather than depending on a commercial control plane.