Tailscale & ZeroTier Remote Access for XProxy
Reach your XProxy dashboard and your proxies from anywhere with Tailscale or ZeroTier, without opening a port on your router. Pick a service in General Settings → System Setting → Network, log in, and the box joins your private network.
You need: the Basic plan or higher (Pricing), a Tailscale or ZeroTier account, and a box with internet.
In short
The box gets a private address that only your own devices can reach. No port forwarding, no public address.
Tailscale: approve the box with a link, or use an auth key. ZeroTier: type your network ID.
You can let devices on your Tailscale network skip the dashboard login, and the proxy login too.
How do I set up Tailscale or ZeroTier on XProxy?
Step 1 of 3
Open General Settings → System Setting and click the Network tab. In VPN tunnel setting, pick Tailscale Service under VPN services 1.
Click Login 3. The VPN status 2 says Needs Authorization until you approve the box.
What happens when I log in and log out?
- Tailscale login: if Tailscale is not on the box, it is installed. The service starts. The box keeps its own DNS (the panel turns Tailscale's DNS takeover off), and Tailscale's own updater is switched on.
- ZeroTier login: if ZeroTier is not on the box, it is installed, started and joined to your network ID.
- Log Out: Tailscale signs out, and its service stops and stays off. ZeroTier leaves the network and its service stops.
- OpenVPN Service: the list has a third choice. You upload a
.ovpnfile and log in, and the box restarts.
The panel keeps one VPN service at a time: the one you pick in VPN services.
Tailscale, NAT forwarding or VPS forwarding?
All three make the box reachable from outside. They fit different jobs.
| Tailscale or ZeroTier | NAT forwarding | VPS forwarding | |
|---|---|---|---|
| Who can connect | Devices in your private network, and people you share the box with. | Anyone who has the address and the proxy login. | Anyone who has the address and the proxy login. |
| Router changes | None. | Yes, open ports on your router. | None. |
| Extra server | No. | No. | Yes, a VPS. |
| Plan | Basic or higher. | Free. | Premium or higher. |
| Best for | Your own access to the dashboard and the proxies. | Customers, when you can change the router. | Customers, when you cannot change the router. |
Something not working?
| You see | What to do |
|---|---|
| Status Not Installed | Click Login. The box installs Tailscale. It needs internet. |
| Status Needs Authorization | Click Authorize Tailscale Now and approve the box, or use Login with Auth Key. |
| The authorization window says Waiting for authorization completion | Finish the sign-in in the browser tab. The panel checks every few seconds. |
| Need upgrade to use this function! | The VPN tunnel needs the Basic plan or higher. See Manage your subscription. |
| A Tailscale device still asks for the dashboard login | Check that Tailscale is on in the Security tab and saved. Visits that come in through VPS Forwarding always need the login. |
| Cannot open the dashboard on the Tailscale IP | Add the port if you changed it, for example http://100.101.102.103:8080. See Secure the dashboard. |
FAQ
How do I open my XProxy dashboard from outside my home with Tailscale?
Connect the box to Tailscale, install Tailscale on your phone or computer and sign in to the same account. Then open the Tailscale IP of the box in a browser. You do not need a router port.
Do I need to open ports on my router?
No. Tailscale and ZeroTier make the connection from inside, so your router stays as it is.
How do I share the box with another email?
Connect Tailscale, click Share Device to another Email, then use Share… in the Tailscale admin console and send the invite. The steps are above.
Can devices on my Tailscale network skip the passwords?
Yes, if you want that. The Tailscale switch in the Security tab skips the dashboard login, and the same option in Proxy Settings skips the proxy username and password. Both only work for Tailscale addresses.
Can I use Tailscale and ZeroTier together?
The panel keeps one service at a time. Pick the one you want in VPN services.
What next?
Protect the dashboard, or publish your proxies to customers.