Teitunnel

Docs

Teitunnel vs Tailscale Funnel

Teitunnel and Tailscale Funnel compared — ports, custom domains, logins, inspection and bandwidth — and when each fits.

Tailscale Funnel makes a service on a Tailscale device reachable from the public internet at a ts.net name. It's part of Tailscale, so it's a natural choice when your devices are already on a tailnet. Teitunnel is an app for Cloudflare Tunnel, reachable at a random address or on your own domain.

TeitunnelTailscale Funnel
Pricefree, open sourceon every Tailscale plan
Namesrandom trycloudflare.com, or any name on your domain*.ts.net names in your tailnet only
Public ports443 (HTTPS); TCP services through Cloudflare443, 8443 and 10000
Bandwidthno cap on tunnel traffic"non-configurable bandwidth limits"
Set upthe app, or a Cloudflare account for your own domainTailscale 1.38.3+, MagicDNS, HTTPS certificates, a funnel attribute in the policy file
Logins for visitorsCloudflare Access, free up to 50 usersnone: Funnel is public; Tailscale Serve keeps it private to the tailnet
Inspect and replaythe inspectorno
Desktop appmacOS, Windows, LinuxTailscale's app; Funnel is set up from the CLI

Checked 2026-09-26

From Tailscale Funnel's documentation. Tailscale's pages are the final word.

When Funnel fits better

  • Your devices are on a tailnet already, and a ts.net name is fine.
  • You want one tool for private access (Serve) and the occasional public share (Funnel).

When Teitunnel fits better

  • You want your own domain, or several names for one computer.
  • Visitors should sign in, or machines should pass with a service token.
  • You want to see and replay requests, share a folder, or keep a static copy online while the computer is off.

Both can run on the same computer: a Funnel on one port and a Teitunnel route on another.

Edit on GitHub

Last updated on

On this page