Server Fault
Server Fault

Questions tagged [tailscale]

14 questions
2
votes
0 answers

How to make Wireguard and Tasilscale coexist on the same machine?

Seems that restarting the wg service always creates a routing table with higher priority than Tailsales which results in the inability to. connect to the machine via Tailscale until both services are stopped, firewall rules are flushed and services…
dzhi
  • 840
  • 3
  • 13
  • 28
1
vote
1 answer

"unmatched host" error when connecting to NFS share

I am getting an "unmatched host" error after configuring an NFS share using a hostname. Whitelisting using IP address works fine. On a server called "server1", I have this line in the /etc/exports listing both values server2 and it's FQDN,…
oldhomemovie
  • 241
  • 3
  • 6
0
votes
0 answers

Static Routes Not Connecting

Attempting to get static routes to cross from one router to another. There are two PFSense routers in a stub network called tailscale. Each of the two routers has a physical Proxmox server. I have provided a network diagram with my routes. All the…
daniellooartist
  • 33
0
votes
1 answer

Forward Docker port in firewalld only for specific interface

I'm trying to secure a VPS running Docker containers so that their exposed ports are only accessible through a VPN interface (in my case it's Tailscale). In order to do that, I read about firewalld and came up with the following rules: sudo…
Scentle5S
  • 103
0
votes
1 answer

Prevent Tailscale DNS resolution inside Podman container

For context: I am using (rootful) Podman containers on my host, which is also connected to a Tailscale VPN. The host's DNS is configured via systemd-resolved. Since yesterday I have been struggling with my Roundcube (web mail client) container being…
wolfsblu
  • 101
0
votes
0 answers

How to setup traefik with tailscale on docker compose but only gate some services behind tailscale?

I currently have a homelab where everything is a docker container, described in a docker compose file. I use cloudlfare for DNS and SSL certs, and have it configured so that I just need to add labels to containers to give them a URL. E.g. …
ROODAY
  • 235
0
votes
0 answers

How can I have clients route to advertised Tailscale subnets first instead of the local network?

I have a Tailscale network. One of the devices advertises a subnet router for 10.1.2.0/24, therefore allowing me to remotely access parts of my network that don't have, and are not compatible with, Tailscale clients. When I connect to the Tailnet on…
user3466413
  • 99
0
votes
0 answers

How can I access a GitLab Container Registry through Tailscale from AWS ECS Fargate via an EC2 Bastion?

I'm working on setting up AWS ECS Fargate to pull Docker images from a GitLab Container Registry hosted on my local machine. The registry is only accessible via a Tailscale network, and I have an EC2 instance configured as a bastion within the same…
user27740869
  • 1
0
votes
0 answers

Tailscale speed on LAN much slower than the LAN connection

I asked this on Stackoverflow, and I was directed to ask here instead: I am using Tailscale to connect a couple of my computers, and I noticed that the speed is very slow when I measured with iPerf, even between computers on the same LAN. I was…
Steven
  • 1
0
votes
0 answers

cannot ping 8.8.8.8 with tailscale started

We have been using tailscale for several years now without too many issues. I have a user whose device cannot ping 8.8.8.8 when tailscale is started. There are no tailscale exit nodes involved and the tailscale client configuration appears identical…
jonseymour
  • 255
0
votes
0 answers

With iptables, is it possible to route only certain domains?

I'm routing specific devices through a separate gateway device that connects to a Tailscale VPN exit node. I'm using this command so my device can act as NAT router to Tailscale: sudo iptables -t nat -A POSTROUTING -o tailscale0 -j MASQUERADE But…
Sawtaytoes
  • 143
0
votes
1 answer

How to NAT-route network to Tailscale?

EDIT: I already spent 3 days going through different possible ways of handling this and settled on iptables. This is like the biggest-kept secret to me. No matter how much I read, I feel like I'm missing some critical information to doing something…
Sawtaytoes
  • 143
0
votes
1 answer

Establishing network connections across GCP regions

I have a staging environment in GCP as a separate project. Inside the project, I have a test VM where I can deploy components for testing against our internal services. Most of our services are deployed in northamerica-northeast1, but because I am…
djc
  • 344
-1
votes
1 answer

Docker macvlan container has no internet access while running tailscale on host

I have the need for a Docker container that is visible in the host network with its own ip, mac and hostname advertised via avahi. (I want to use wire-pod without changing hostnames and stuff on my host computer) I created a Docker network for this…
thirstyturtle
  • 1