Resources

The T-Link Manual

Connecting the Fleet: Tailscale, Headscale, and Mesh Networking.

The Strategy

A Fleet is only as strong as its connections. Traditionally, connecting devices across different networks (home, office, mobile) required complex VPNs, port forwarding, and static IPs. T-Link simplifies this using a mesh network based on WireGuard. This guide explains how to connect your PCs, laptops, servers, and phones into a single private mesh.

We provide both the standard Tailscale option and the self-hosted Headscale option for those who want 100% control over their coordination server.

1. The T-Link Engine (WireGuard)

T-Link is built on WireGuard, the fastest and most secure VPN protocol in the world. It is a kernel-level module that provides encrypted P2P tunnels between all your devices.

  • P2P Mesh: Your devices connect directly to each other without a central bottleneck.
  • Encrypted: All traffic is encrypted using modern cryptography (ChaCha20).
  • Fast: WireGuard is significantly faster than OpenVPN or IPsec.

2. Tailscale (The Standard)

Tailscale is the easiest way to start your Fleet. It uses a hosted coordination server to handle the identity and NAT traversal for you. Tebian's "T-Link Menu" includes one-click installation and login.

  • MagicDNS: Access your devices by name (e.g., laptop, server).
  • NAT Traversal: Connect through firewalls and coffee shop WiFis without a public IP.
  • Identity: Use your existing Google, GitHub, or Microsoft account for login.

3. Headscale (The Mothership)

For those who want 100% sovereignty, Tebian includes a Headscale setup. It is a self-hosted implementation of the Tailscale coordination server. You can run it on your Tebian server (The Mothership) and own the entire network.

  • No Central Server: You don't need a Tailscale account. You are the provider.
  • Total Control: You manage the ACLs, the keys, and the device lists.
  • Free Forever: No device limits. No subscription fees.

4. Exit Nodes (The Travel Shield)

When you are on insecure public WiFi, you can use T-Link's Exit Node feature. It routes all your internet traffic through your Tebian "Mothership" at home, providing a secure tunnel and a familiar IP address.

  • Secure Browsing: Encrypt your coffee shop traffic.
  • Home IP: Access geo-locked content as if you were at home.
  • Always On: Keep your T-Link active for constant protection.

Why T-Link on Tebian?

By integrating mesh networking into the core of your OS, Tebian turns your machines into a single, unified workspace. Your files are always available. Your SSH sessions are always secure. Your "One Brain" lives on every "Body" in your Fleet. One ISO. One menu. One T-Link Mesh.