Tunnelless

What it does

Most apps reach a private network by asking the operating system for a VPN tunnel. Tunnelless doesn't. It runs a Tailscale node in its own process, so joining your tailnet installs no VPN profile, changes no system routing, and affects no other app on the device.

• Browse the devices on your tailnet, with connection details for each
• Reach services on your own machines through a local SOCKS5 proxy
• Sign in with your existing Tailscale account — on Tailscale's own site
• Demo mode to look around with sample data, no account required

Why it's built this way

A VPN profile is a device-wide change: it needs elevated permission, it can conflict with other VPN software, and it routes traffic for everything, not just the app that asked. Running the node in-process keeps the blast radius to a single app. Nothing outside Tunnelless is touched.

Privacy

Tunnelless collects nothing. There is no analytics, no crash reporter, no advertising identifier, and no account system of our own — and Indiagram operates no server the app talks to. Your account, your devices and your traffic are between you and Tailscale. See the Privacy Policy.

Open source

Tunnelless is also a reference implementation: the source is public, including the release engineering and the upstream fixes it produced along the way. github.com/indiagrams/tunnelless

Requirements

macOS 14 or later. A Tailscale account is needed to connect; Demo mode is not.

Support