Mutiny offers an optional Remote Support and Managed Service capability that allows our engineers to securely access your appliance when troubleshooting issues, applying updates, or carrying out proactive maintenance.

We use Tailscale, a zero-configuration VPN built on WireGuard®, to provide a secure and private connection between your Mutiny appliance and our support infrastructure.

How It Works

  • Remote access is enabled via the Mutiny Maintenance Interface.

  • When support is required, you request a Tailscale authentication key from the Mutiny Support team.

  • You paste this key into the Auth Token field within the Maintenance Interface.

  • Clicking Activate Support VPN establishes the secure connection.

  • Once active, our engineers can connect securely to your appliance for as long as the key remains valid.

This process ensures that you remain in full control of when Mutiny engineers can access your system.

Technical Requirements

For the Support VPN to function, your Mutiny appliance must be able to make outbound connections on the following ports:

  • UDP/41641 – WireGuard peer-to-peer traffic.

  • TCP/443 (HTTPS) – communication with Tailscale coordination/control servers.

  • UDP/3478 – NAT traversal (STUN) to establish peer-to-peer connections.

Where direct peer connections are blocked, Tailscale automatically falls back to using encrypted relays (DERP servers) over TCP/443.

Internet Access Summary

  • Outbound TCP 443 must be permitted.

  • Outbound UDP 3478 should be permitted.

  • Outbound UDP 41641 should be permitted.

  • No inbound ports need to be opened.

Security Notes

  • End-to-end encryption – All traffic is protected by WireGuard.

  • Identity-based access – Only authenticated Mutiny Support accounts can connect.

  • Customer-controlled access – You choose when to enable or disable the Support VPN.

Enabling and Disabling Remote Support

  1. Contact Mutiny Support to request a Tailscale authentication key.

  2. Log into the Mutiny Maintenance Interface.

  3. Paste the provided key into the Auth Token field.

  4. Click Activate Support VPN.

  5. Confirm the connection status shows as Active.

When support is no longer required, simply press the [Disconnect Support VPN] button in the Maintenance Interface to immediately disable the connection.

Next Steps

If you would like to enable the Remote Support and Managed Service, please raise a request with Mutiny Support. Our engineers will provide you with the appropriate key and assist with initial setup if required.