Mutiny offers an optional Remote Support and Managed Service capability that allows our engineers to securely access your appliance when troubleshooting issues, applying updates, or carrying out proactive maintenance.

We use Tailscale, a zero-configuration VPN built on WireGuard®, to provide a secure and private connection between your Mutiny appliance and our support infrastructure.

How It Works

  • Remote access is enabled via the Mutiny Maintenance Interface.

  • When support is required, you request a Tailscale authentication key from the Mutiny Support team.

  • You paste this key into the Auth Token field within the Maintenance Interface.

  • Clicking Activate Support VPN establishes the secure connection.

  • Once active, our engineers can connect securely to your appliance for as long as the key remains valid.

This process ensures that you remain in full control of when Mutiny engineers can access your system.

Technical Requirements

For the Support VPN to function, your Mutiny appliance must be able to make outbound connections on the following ports:

  • UDP/41641 – WireGuard peer-to-peer traffic.

  • TCP/443 (HTTPS) – communication with Tailscale coordination/control servers.

  • UDP/3478 – NAT traversal (STUN) to establish peer-to-peer connections.

Where direct peer connections are blocked, Tailscale automatically falls back to using encrypted relays (DERP servers) over TCP/443.

Internet Access Summary

  • Outbound TCP 443 must be permitted.

  • Outbound UDP 3478 should be permitted.

  • Outbound UDP 41641 should be permitted.

  • No inbound ports need to be opened.

Security Notes

  • End-to-end encryption – All traffic is protected by WireGuard.

  • Identity-based access – Only authenticated Mutiny Support accounts can connect.

  • Customer-controlled access – You choose when to enable or disable the Support VPN.

Enabling and Disabling Remote Support

  1. Contact Mutiny Support to request a Tailscale authentication key.

  2. Log into the Mutiny Maintenance Interface.

  3. Paste the provided key into the Auth Token field.

  4. Click Activate Support VPN.

  5. Confirm the connection status shows as Active.

When support is no longer required, simply press the [Disconnect Support VPN] button in the Maintenance Interface to immediately disable the connection.

Next Steps

If you would like to enable the Remote Support and Managed Service, please raise a request with Mutiny Support. Our engineers will provide you with the appropriate key and assist with initial setup if required.


Starting the Remote Support VPN

Mutiny Support may ask you to enable the Remote Support VPN to allow secure remote access to your system.

  1. Open the Maintenance Interface.
  2. Select the System Operations tab.
  3. Locate the Auth Key field.
  4. Enter the authentication key provided by Mutiny Support as part of your support ticket.
  5. Click Start Support VPN.

If the connection is successful, a green confirmation message will be displayed indicating that the Support VPN has started.

If the Support VPN fails to connect, first verify that your Mutiny system has internet access and that the required outbound ports are permitted, as described in the network port information above. Once connectivity has been confirmed, try starting the Support VPN again.