// Compare
ingressd vs Tailscale Funnel.
Tailscale Funnel publishes a service from a device on your tailnet through Tailscale’s relays, under your tailnet’s ts.net name. ingressd publishes on your own domain, on any port, over TCP and UDP, with sign-in and a WAF in front of web apps.
// Which to choose
Both are good at different things.
Pick the one that matches where you want your traffic to run.
Choose Tailscale Funnel if
- You already use Tailscale and want to share one service quickly.
- A ts.net name and ports 443, 8443 or 10000 are enough.
- You do not need sign-in or filtering in front of the service.
Choose ingressd if
- You want your own domain and any port.
- You publish game servers or other UDP services.
- You want access policies, a WAF and rate limits per app.
// Side by side
The differences that matter.
Taken from the full comparison of ingressd with the alternatives.
| Feature | ingressd | Tailscale Funnel |
|---|---|---|
| Public edge runs on | Your own VPS nodes | Tailscale’s relays |
| TLS for web apps ends at | Your node | Your device |
| Open source | Node, edge and connector: Apache-2.0. The hosted panel is optional and proprietary. | Client: BSD-3-Clause. Relays and control plane are proprietary. |
| No inbound ports at the origin | Yes | Yes |
| HTTP and HTTPS apps | Yes | Yes, on ports 443, 8443 and 10000 |
| Public TCP | Yes | TLS connections only |
| Public UDP (game servers, VoIP) | Yes | No |
| Your own domain | Yes | No, *.ts.net names only |
| Failover across several edges | Yes: failover DNS across your nodes | Not documented |
| Sign-in in front of apps | Email code, Google, Microsoft, Discord, Steam or passkey | No; Funnel is public |
| Web application firewall | Coraza with the OWASP Core Rule Set, per app | No |
| Managed from | A free hosted panel, or one config file and the CLI | Tailscale CLI and admin console |
| Cost | Free and open source; you pay for your VPS | Included in Tailscale plans; bandwidth limits are not configurable |
Checked against each product’s own docs in November 2026. Plans and features change; if something here is out of date, tell us on GitHub. Sources: Tailscale Funnel docs.