Tailscale DERP Relay on a Mac
Self-hosted derper relay + this Mac's relay paths (open-source) · VPN
DERP is the relay Tailscale (and Headscale) falls back to when two devices can't connect directly; its servers also answer STUN so devices learn their public address. Run your own with derper (go install tailscale.com/cmd/derper@latest) on a server with a public address; TCP 80 and 443, UDP 3478, nothing in front of it; for lower latency, data residency, or as Headscale's relay. This pane monitors your relays without credentials (HTTPS /derp/probe, the DERP handler, certificate expiry and a real STUN binding → Alerts), generates the tailnet-policy derpMap or Headscale DERP-map snippet for each, and shows this Mac's view from tailscale netcheck: UDP, hard NAT, home region, latency per region, and which peers are relayed through DERP right now.
Run Tailscale DERP Relay with FrontierStack
Install or connect Tailscale DERP Relay; then check its status, ports and certificate from FrontierStack. The same screen links to firewall checks, Malware Audit and backups where they apply.
Run it from your Mac.
FrontierStack installs, monitors and secures services on this Mac and on linked servers; and keeps your passwords and keys out of any AI's sight.
Download FrontierStackApple notarized · Safe & secure · macOS 13 Ventura+