# Tailscale Browser-Router

> Selectively routes browser traffic through a Tailscale userspace SOCKS5 tunnel. Fail-closed, leak guard, no system-wide VPN.

Canonical page: [https://chrome-stats.com/d/tailscale-browser-router](https://chrome-stats.com/d/tailscale-browser-router)

## Overview

- **ID:** `tailscale-browser-router`
- **Platform:** Firefox
- **Type:** Firefox add-on
- **Status:** Available
- **Publisher:** Nope-im-not-pro
- **Category:** privacy-security
- **Daily users:** 2
- **Weekly downloads:** 15
- **Version:** 0.3.0
- **Last updated:** 2026-08-30
- **First published:** 2026-07-16
- **Size:** 48 KB
- **Data as of:** 2026-09-14
- **Store listing:** [Firefox Add-ons Store](https://addons.mozilla.org/firefox/addon/tailscale-browser-router/)
- **Website:** [https://github.com/Nope-im-not-pro](https://github.com/Nope-im-not-pro)

## Description

Tailscale Browser-Router is a proxy switch for Firefox. The extension does not create a tunnel of its own; it decides per request whether that request goes through the local SOCKS5 port of a userspace tailscaled or straight out to the internet.

WHAT IT DOES
Every request is switched between tunnel and direct connection based on the rule set and the active mode. Only browser traffic is affected; the rest of the system is untouched.

MODES
- Off: everything direct.
- Global: everything through the tunnel.
- Allowlist: only matching domains through the tunnel.
- Blocklist: everything through the tunnel except matching domains.
- Per-tab: tunnel state per browser tab.

FAIL-CLOSED AND LEAK GUARD
A tunnel decision always returns SOCKS. If the tunnel is dead, the connection fails visibly - there is no silent fallback to a direct connection. The leak guard sets WebRTC to disable_non_proxied_udp and turns off prefetch/network predictor; DNS is resolved through the tunnel (proxyDNS) and IPv6 follows the routing decision. The status light turns green only when the full set is confirmed.

REQUIREMENTS
The extension requires a separately running Tailscale client in userspace mode:
tailscaled --tun=userspace-networking --socks5-server=localhost:1055
Optionally, a native messaging host (Python 3, source in the project repository) controls that daemon directly from the user interface. Without the host the extension runs in degraded mode: the switch works, but the tunnel must be started manually. Firefox 140 or newer.

WHAT IT DOES NOT DO
No system-wide VPN. No Tailscale client of its own and no replacement for one. No data collection, no telemetry, no developer-operated servers - rule set and mode live in local browser storage only.

Source code and documentation: <a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/76be1506d43f773b78709a29b8f816e84992ad593d4b875ab0c93f11c624ec4e/https%3A//github.com/Nope-im-not-pro/TailScale-Browser-Extension" rel="nofollow">https://github.com/Nope-im-not-pro/TailScale-Browser-Extension</a>
License: GPL-3.0-or-later. Tailscale is a trademark of Tailscale Inc.; this project is not affiliated with Tailscale Inc.

## Rankings

- #68,739 — Overall
- #123 — tunneling

## Permissions and access

### Permissions

- `proxy`
- `storage`
- `privacy`
- `tabs`
- `nativeMessaging`

### Host permissions

- `<all_urls>`

## Safety

- **Risk impact:** High risk impact
- **Risk likelihood:** High risk likelihood

### Analysis details

- Grants access to browser tabs, which can be used to track user browsing habits and history, presenting a privacy concern.
- This extension was recently updated in the past month. New updates may not be stable or safe.

> Some risk analysis details are omitted from this free response. [Upgrade to view the full analysis](https://chrome-stats.com/pricing).

## Similar extensions and apps

- [Tab Tunnel](https://chrome-stats.com/d/tab-tunnel) — 12 users
- [SplitScale](https://chrome-stats.com/d/splitscale) — 61 users
- [Proxy Router (SOCKS5 & HTTP)](https://chrome-stats.com/d/proxy-router-socks5-http) — 248 users, 5.00 / 5
- [Tailchrome](https://chrome-stats.com/d/tailchrome) — 144 users
- [Proxy Toolbar Toggle](https://chrome-stats.com/d/proxy-toolbar-toggle) — 6 users, 5.00 / 5
- [Proxy Router (SOCKS5 & HTTP)](https://chrome-stats.com/d/proxy-router-socks5) — 248 users, 5.00 / 5
- [ProxyTab - Proxy Manage & Switcher](https://chrome-stats.com/d/proxytab-proxy-manage-switcher) — 1 users
- [SuperTunnel](https://chrome-stats.com/d/supertunnel)
- [SOCKS5 Switcher](https://chrome-stats.com/d/socks5-switcher) — 70 users
- [WireGuard Browser Tunnel](https://chrome-stats.com/d/wg-browser-tunnel) — 7 users
- [moleProxy](https://chrome-stats.com/d/moleproxy)
- [Proxy Switcher](https://chrome-stats.com/d/set-proxy-switcher) — 21 users, 5.00 / 5

---

Source: [Chrome-Stats](https://chrome-stats.com/d/tailscale-browser-router)