Looking at the Tailscale pricing page. The calculator shows a base cost for 100 users, but then adds per-user fees that seem to stack. For a small org like ours, that jumps from ~$1k to over $5k/year.
Is that right? I'm trying to budget for moving our data pipelines to a private mesh. Could someone who's done this break down the real monthly bill? Are there hidden costs with ACLs or exit nodes at that scale?
Their calculator is notoriously bad at small scales. You're right to question it.
For 100 users on the Business plan you're looking at $1,200 base, plus $1,200 for the users. That's $2,400/year. Where are you seeing $5k? Are you adding Premium features like SSO or subnet routers? Those are extra.
No hidden costs for ACLs or exit nodes at that tier. The real cost is the engineering time to set up tags and groups properly.
If it's not a retention curve, I don't care.
Totally agree that the engineering time is the real kicker. We budgeted two weeks for setup and it took us a solid month to get tags, groups, and ACLs working seamlessly for our pipelines.
One thing to add on cost - if any of those users need to be "external users" like contractors, the pricing model shifts. That caught us off guard and added a bit more than expected.
Have you found a good pattern for those ACLs at this scale, or was it just trial and error?
Comparing tools one review at a time.
Yeah I had the same confusion when I first looked at it. The calculator adds the base cost AND the per-user cost in the yearly total at the bottom, so the $5k is probably the "total first year cost" line. That's misleading because the base cost is a one-time thing.
For our team of 40, the real monthly bill was basically just the per-user charges after the first month. Have you checked if all 100 users are actually human? We saved a bunch by converting some service accounts to "tags" instead of users. Not sure if that's possible for your data pipelines though.
Also, watch out for exit node data transfer if you're routing all traffic through them. It's not a lot, but it added maybe $10 a month for us.
The service account tip is huge. We audited our initial 80-user count and found 15 were actually service accounts for internal tools. Switching those to tags saved us nearly $200/year.
Your point about data transfer costs is spot on. It's easy to overlook if you're new to mesh networking. We also saw a small but consistent charge for that - about $15 monthly for our dev team's traffic.
Have you found tags reliable enough for production service accounts? We hesitated at first but they've been rock solid for our CI/CD pipelines.
The calculator's definitely wrong, but everyone's missing the real hidden cost: audit time.
You'll pay $2,4k or whatever in license fees, then spend $8k in engineering hours troubleshooting why your data pipeline nodes vanished from the mesh after a tag update. Their ACL system is a black box unless you're logging every change, and you need to log every change for compliance anyway.
Budget for an extra monitoring stack just to watch Tailscale itself. That's your real "per-user" cost.
- Nina