---
title: Install DERP Server for Tailscale on Linux | Snap Store
description: Get the latest version of DERP Server for Tailscale for Linux - DERP
  Server for Tailscale
url: https://snapcraft.io/derper
---

# DERP Server for Tailscale (derper)

[Canonical](https://snapcraft.io/publisher/canonical "View all snaps from Canonical")

* [Canonical](https://snapcraft.io/publisher/canonical "View all snaps from Canonical")
* [Utilities](https://snapcraft.io/search?categories=utilities)

latest/stable 1.82.0

Install latest/stable of DERP Server for Tailscale

---

**Install using the command line**

```
sudo snap install derper
```

Don't have snapd? [Get set up for snaps](https://snapcraft.io/docs/installing-snapd).

---

### Package name

* derper

---

### License

* BSD-3-Clause

---

### Last updated

* 9 September 2026 - latest/stable
* 9 September 2026 - latest/candidate

---

### Websites

* [tailscale.com](https://tailscale.com/kb/1118/custom-derp-servers "https://tailscale.com/kb/1118/custom-derp-servers")

---

### Contact

* [solutions-engineering@lists.canonical.com](mailto:solutions-engineering@lists.canonical.com "mailto:solutions-engineering@lists.canonical.com")

---

### Source code

* [github.com/canonical/derper-snap](https://github.com/canonical/derper-snap "https://github.com/canonical/derper-snap")

---

### Report a bug

* [github.com/canonical/derper-snap/issues](https://github.com/canonical/derper-snap/issues "https://github.com/canonical/derper-snap/issues")

---

##### Report a Snap Store violation

* [Report this Snap](https://snapcraft.io/derper#report-snap-modal)

---

* [Description](https://snapcraft.io/derper#tab-description)
* [Security](https://snapcraft.io/derper#tab-security)

#### DERP Server for Tailscale

Derper is a self hosted DERP (Designated Encrypted Relay for Packets) server, designed to be used with Tailscale.
This snap provides a simple and secure way to run your own DERP servers to route your tailscale traffic through your own relay servers.

Please refer to the upstream documentation for more information:

* <https://tailscale.com/kb/1118/custom-derp-servers>
* <https://tailscale.com/kb/1232/derp-servers>
* <https://github.com/tailscale/tailscale/blob/main/cmd/derper/README.md>

**Usage**

Install the snap:

```
sudo snap install derper
```

This installs the DERP server and starts it automatically.
You will likely need to configure the service:

**Configuration**

You can modify configuration options with `sudo snap set`. The following configuration options are currently supported:

* `hostname`: LetsEncrypt host name, if addr's (`a`) port is :443. (default if unset: "derp.tailscale.com")
* `a`: server HTTP/HTTPS listen address, in form ":port", "ip:port", or for IPv6 "[ip]:port". If the IP is omitted, it defaults to all interfaces. Serves HTTPS if the port is 443 and/or certmode is manual (default certmode is "letsencrypt"), otherwise HTTP. (default if unset: ":443")
* `stun-port`: The UDP port on which to serve STUN. The listener is bound to the same IP (if any) as specified in the `a` option. (default if unset: "3478")
* `verify-clients`: Verify clients to this DERP server through a local tailscaled instance. Must be "true" or "false". (default if unset: "false")

The config options correspond to the similarly named command line flags for `derper`.

Options that don't have support to be configured through the snap will be left on their default.
See the `derper` command source code at <https://github.com/tailscale/tailscale/tree/main/cmd/derper> for more technical information on options.

Example of setting an option:

```
sudo snap set derper hostname=myderper.mydomain.com
```

To view the available config options and their current values:

```
$ sudo snap get derper
Key             Value
hostname
a               127.0.0.1:443
verify-clients  false
...
```

Derper must be restarted manually for the changed config to take affect:

```
sudo snap restart derper
```

To run in `verify-clients` mode, the tailscale snap must also be installed,
and the two snaps connected over the custom content interface so the control socket is shared:

```
sudo snap install derper
sudo snap install tailscale
sudo snap connect derper:tailscale-socket tailscale:socket
sudo snap set derper verify-clients=true
sudo snap restart derper
```

**Security**

See <https://github.com/canonical/derper-snap/blob/main/docs/security-reference.md>
for security and hardening documentation.

This snap is maintained by Canonical, and is not necessarily endorsed or officially maintained by the upstream developers.

---

## Install DERP Server for Tailscale on your Linux distribution

Choose your Linux distribution to get detailed installation instructions. If yours is not shown, get more details on the [installing snapd documentation](https://snapcraft.io/docs/installing-snapd).

[### Arch Linux](https://snapcraft.io/install/derper/arch)

[### CentOS](https://snapcraft.io/install/derper/centos)

[### Debian](https://snapcraft.io/install/derper/debian)

[### elementary OS](https://snapcraft.io/install/derper/elementary)

[### Fedora](https://snapcraft.io/install/derper/fedora)

[### KDE Neon](https://snapcraft.io/install/derper/kde-neon)

[### Kubuntu](https://snapcraft.io/install/derper/kubuntu)

[### Manjaro](https://snapcraft.io/install/derper/manjaro)

[### Pop!\_OS](https://snapcraft.io/install/derper/pop)

[### openSUSE](https://snapcraft.io/install/derper/opensuse)

[### Red Hat Enterprise Linux](https://snapcraft.io/install/derper/rhel)

[### Ubuntu](https://snapcraft.io/install/derper/ubuntu)

[### Raspberry Pi](https://snapcraft.io/install/derper/raspbian)
