Tailscale doesn't, but there's another opensource project which does provide control plane: https://github.com/juanfont/headscale https://github.com/juanfont/he

Tailscale doesn't, but there's another opensource project which does provide control plane: https://github.com/juanfont/headscale https://github.com/juanfont/headscale. Even with a on-prem control plane, you probably want logging setup to detect when unusual nodes get pushed to the accessible list of nodes on your clients.