Tailscale + SIMSY
Put every SIMSY SIM on your Tailscale network and reach your devices from anywhere, over cellular, with no software on the device and no public IPs anywhere in the path.
SIMs on your tailnet
Every SIMSY SIM becomes a Tailscale node without installing anything on the device.
No public IPs
Devices stay inside the private cellular core. Access is via tailnet, authenticated by Tailscale.
Self-hosted or managed
Run the bridge container on your own Linux host, or let SIMSY run it for you.
Works with any device
Routers, sensors, Raspberry Pis, cameras — anything that takes a SIM joins the tailnet.
A mesh VPN without the ceremony
Tailscale is a WireGuard-based mesh network that connects devices directly to each other instead of routing through a central server. Access control is defined in a readable policy file; identity comes from your existing SSO. Developers reach for it because it works without a VPN concentrator, static IPs or firewall holes.
Cellular devices, same tailnet
A cellular device normally sits behind carrier NAT with no inbound reachability. The SIMSY Bridge for Tailscale makes every SIM a node on your tailnet, so a device with a SIMSY SIM is as reachable from your laptop as any other machine on your Tailscale network — with none of the device-side agent installs, firmware changes or public-IP exposure that a traditional remote-access setup would require.
One container, one YAML
The SIMSY Bridge is a container you run on any Linux host (self-hosted) or that SIMSY runs for you (managed). It uses a Tailscale OAuth client to enrol SIMs as devices on your tailnet, labelled with tags you define. Access policy lives in your existing policy.hujson; no custom code required.
Where this fits
Field engineering access
SSH into a remote industrial router or edge box the moment it comes online — no VPN config on the device, no port forwarding, no leaked public IP.
Headless Linux fleets
Raspberry Pi and NVIDIA Jetson deployments where you own the device but not the site. Add the SIM, scan the ACL in Tailscale, done.
Secure web interfaces
Reach a device's on-board web UI (router admin, camera viewer, dashboard) from your tailnet — no public exposure, Tailscale ACLs decide who sees what.
Try it on a Launch SIM
One SIM, one container, one tailnet. The whole flow is testable in under an hour.