VPS plan
ZAP Spark
- 4 GB RAM
- 2 CPU
- 60 GB NVMe
- 1 Gbit/s Uplink
You decide which services we may enable for analytics, personalization, and external content.
We use cookies and similar technologies on our website to personalize content, embed external media, and better understand how individual areas are used.
Necessary cookies
These entries support essential functions such as security, stability, and form processing.
Optional sections
Your data may be processed with your consent or on the basis of legitimate interests. In the cookie settings, you can reject or explicitly allow each optional category.
Some services process personal data in third countries. By consenting, you also agree to this transfer. You can find more information in our Privacy Policy.
You can reopen and change your selection at any time. · 1.0.2
Run an always-on node in your tailnet: exit node, subnet router or SSH without public ports, deployed in one click.
American ExpressTailscale on your own VPS
Tailscale connects your laptop, phone and servers into one private network, your tailnet, without opening ports on your router. Add a VPS as an always-on node and you can browse through it as an exit node, reach your homelab from anywhere or SSH into machines by name. At ZAP-Hosting, the Tailscale client deploys in one click from the VPS app marketplace via Coolify: you paste your Tailscale auth key and approve the node in your admin console.
Full root access means you are not limited to the one-click container: install Tailscale natively over SSH, enable IP forwarding, advertise subnet routes or switch on Tailscale SSH and close the public SSH port. You also decide where your exit node lives, in FFM/Eygelshoven, Ashburn, Dallas or Los Angeles, and can run more Coolify apps next to it that stay reachable only inside your tailnet.

What your node does
Route your traffic through the VPS, reach networks behind it and manage servers over your tailnet instead of public ports.
Every tailnet device reaches the servers and networks behind your VPS.
Browse from any device through your VPS and its public IP.
Send files from laptop or phone to the VPS without a public upload.
Connections stay fast: direct WireGuard paths first, relays only as fallback.
Only approved tailnet devices reach SSH and dashboards, governed by ACLs.
Tune routes, flags and firewall yourself with full root access.
Locations in Europe and America
4 data centers in Europe and America — choose the location closest to your users.
Inside Tailscale
Tailscale links your devices into one encrypted mesh network: approve machines, set access rules and give every device a short name with MagicDNS.
Every machine in your tailnet shows up in one list with its name, Tailscale IP and online status. New devices can require approval before they get network access, and you revoke a device's access in a moment.
Get started now
Tailscale Client on your VPS in minutes — no complicated setup.
Backups & snapshots
Snapshots let you roll back quickly. ZapX Pass unlocks Restore, manual Backups, and longer retention for daily Backups.
More control with ZapX Passextra storage, restore, Pass perks, and Lifetime VPS without activity checks
Reviews
Real feedback on support and setup.
FAQ
Answers to the most important questions before you start.
Order a VPS, open the app marketplace in the ZapX panel and deploy the Tailscale client in one click; Coolify runs the install. Enter an auth key from your Tailscale admin console and the node joins your tailnet. The VPS is online in 60 seconds; the app deploy takes a little longer. With full root access over SSH you can also install Tailscale natively with the official install script. One-click apps in the Help Center
VPS apps need at least 2 GB RAM, 2 CPU cores and 30 GB storage, the platform minimum for Coolify and apps. That is enough for a node that offers SSH access or a few subnet routes. Needs grow with the traffic you send through an exit node, the number of devices and any extra apps on the same VPS. You can upgrade the package later. Upgrading your VPS
Yes. Enable IP forwarding, advertise the VPS as an exit node, for example with tailscale up --advertise-exit-node, and approve it in the Tailscale admin console. Your devices can then send their internet traffic through the VPS, and websites see its public IP. The same root access lets you advertise subnet routes, so tailnet devices reach networks behind the VPS.
You get locations in Europe and America: FFM/Eygelshoven, Ashburn, Dallas and Los Angeles. Pick the one closest to your devices and users, or the place where you want your exit node's public IP to be. Many North American users start with Ashburn, Dallas or Los Angeles. Every location includes DDoS protection.
You need a Tailscale account to create your tailnet and auth keys. Which Tailscale plan fits, including its free personal plan, is between you and Tailscale, and Tailscale bills it separately from the VPS. ZAP-Hosting only bills your VPS package.
With your own exit node, traffic leaves through a VPS you control with root access, in the location you choose, and you pay a fixed price per package and term instead of usage- or user-based billing. A hosted VPN service operates and updates its servers for you; on your VPS you keep the Tailscale client and the system up to date yourself. Your devices connect through your own tailnet.
In the ZapX panel, check the installed app for updates and apply an available update with one click. As a manual alternative you can redeploy the instance yourself in Coolify. Before larger version jumps, read Tailscale's official changelog. The daily automatic Backup is included; with the ZapX Pass you create your own Backup before an update and restore it yourself.
The Tailscale client itself needs no domain. For web apps running alongside it, a subdomain is optional and managed by ZapX, on a platform domain or your own domain in your ZAP account whose DNS ZapX can manage. ZapX creates the DNS records during install and Coolify issues the HTTPS certificate via Let's Encrypt. Without a managed subdomain, an app is only reachable via http://<service>.<ip>.sslip.io over HTTP without a certificate.
Yes. Once the VPS is in your tailnet, connect over its Tailscale IP or enable Tailscale SSH, then block public SSH in the firewall. Your admin access stays private to your own devices. Keep the browser console in the ZapX panel as a fallback in case you lock yourself out. About the VPS console
Yes, cancel anytime in the ZapX panel. You choose a term of 3, 30, 90, 180 or 365 days, and a cancellation takes effect at the end of the current term. A longer term lowers the monthly price. How cancellation works
Any more questions?
Contact SupportZAPX Dashboard
Console, DDoS manager and live stats for your VPS in one place, right next to the Tailscale client you deployed.

VPS Server – Console
Console of the VPS server in the ZapX customer panel.
The ZapX AI Agent explains Tailscale setups, reads your server state and suggests next steps. On request it runs commands after you confirm in the chat.
The ZapX AI Agent is part of the ZapX Pass.
Discover ZapX PassZapX AI Agent
panel.zap-hosting.com
Measured performance
Measured CPU, storage and network values show how much headroom your VPS has to encrypt exit-node traffic for several devices while other apps run alongside.
High-performance VPS, CPU model depends on the location
Typical VPS plans without a published host CPU
confirmed 2026-07-01
Use cases
From a private exit node on the road to homelab access and locked-down admin tools: one always-on node covers all of it.
Ready for your tailnet?
Add an always-on node to your tailnet.
ZapX appComing soon
Check the status of your VPS and restart it from the ZapX app, wherever you are.
Also available
WireGuard, Coolify, monitoring, and more — one-click setup on your VPS.
Private Cloud
NextCloud is a self-hosted, open-source platform that provides file storage, collaboration, and communication tools for seamless data management.
Automatic setup
automation
n8n is an extendable workflow automation tool.
Ready in ~2 min
vpn
The easiest way to run WireGuard VPN + Web-based Admin UI.
Ready in ~2 min
media
Plex organizes video, music and photos from personal media libraries and streams them to smart TVs, streaming boxes and mobile devices.
Ready in ~2 min
Password Security
Vaultwarden is a password manager that allows you to securely store and manage your passwords.
No manual configuration
cms
WordPress is open source software you can use to create a beautiful website, blog, or app.
Ready in ~2 min
Also available
WireGuard, Coolify, monitoring, and more — one-click setup on your VPS.
755
Available apps
Benefit
The app marketplace is included with your VPS — no extra charge per installation.
Choose your apps in the configurator and get started in minutes.
Pick a package, deploy the Tailscale client in one click and approve the node in your Tailscale admin console.
No setup. No risk. Online in 60 seconds.
© 2026 ZAP-Hosting GmbH