Questions tagged [tailscale]
The tailscale tag has no summary.
16 questions
0 votes
1 answer
250 views
Reverse proxy multiple services over HTTPS using Caddy + Tailscale
I want to reverse proxy multiple services on the same machine (bare metal macOS), over HTTPS and Tailscale, without a custom domain (i.e. just using machine.tailnet.ts.net). I don't care if the ...
0 votes
1 answer
95 views
Using uwf to limit access to Proxmox via Tailscale breaks SDN NAT network for VMs
Yeah, so this one is going to be a journey. Let me outline things and then get to the problem. I have a Proxmox VE server (ver. 9) installed on my server. I have an SDN setup for a NAT network for ...
0 votes
0 answers
61 views
Static Routes Not Connecting
Attempting to get static routes to cross from one router to another. There are two PFSense routers in a stub network called tailscale. Each of the two routers has a physical Proxmox server. I have ...
0 votes
1 answer
451 views
Forward Docker port in firewalld only for specific interface
I'm trying to secure a VPS running Docker containers so that their exposed ports are only accessible through a VPN interface (in my case it's Tailscale). In order to do that, I read about firewalld ...
0 votes
1 answer
476 views
Prevent Tailscale DNS resolution inside Podman container
For context: I am using (rootful) Podman containers on my host, which is also connected to a Tailscale VPN. The host's DNS is configured via systemd-resolved. Since yesterday I have been struggling ...
0 votes
0 answers
206 views
How to setup traefik with tailscale on docker compose but only gate some services behind tailscale?
I currently have a homelab where everything is a docker container, described in a docker compose file. I use cloudlfare for DNS and SSL certs, and have it configured so that I just need to add labels ...
0 votes
0 answers
308 views
How can I have clients route to advertised Tailscale subnets first instead of the local network?
I have a Tailscale network. One of the devices advertises a subnet router for 10.1.2.0/24, therefore allowing me to remotely access parts of my network that don't have, and are not compatible with, ...
0 votes
0 answers
159 views
How can I access a GitLab Container Registry through Tailscale from AWS ECS Fargate via an EC2 Bastion?
I'm working on setting up AWS ECS Fargate to pull Docker images from a GitLab Container Registry hosted on my local machine. The registry is only accessible via a Tailscale network, and I have an EC2 ...
2 votes
1 answer
2k views
"unmatched host" error when connecting to NFS share
I am getting an "unmatched host" error after configuring an NFS share using a hostname. Whitelisting using IP address works fine. On a server called "server1", I have this line in ...
-1 votes
1 answer
2k views
Docker macvlan container has no internet access while running tailscale on host
I have the need for a Docker container that is visible in the host network with its own ip, mac and hostname advertised via avahi. (I want to use wire-pod without changing hostnames and stuff on my ...
0 votes
0 answers
2k views
Tailscale speed on LAN much slower than the LAN connection
I asked this on Stackoverflow, and I was directed to ask here instead: I am using Tailscale to connect a couple of my computers, and I noticed that the speed is very slow when I measured with iPerf, ...
0 votes
0 answers
295 views
cannot ping 8.8.8.8 with tailscale started
We have been using tailscale for several years now without too many issues. I have a user whose device cannot ping 8.8.8.8 when tailscale is started. There are no tailscale exit nodes involved and the ...
0 votes
0 answers
243 views
With iptables, is it possible to route only certain domains?
I'm routing specific devices through a separate gateway device that connects to a Tailscale VPN exit node. I'm using this command so my device can act as NAT router to Tailscale: sudo iptables -t nat -...
2 votes
0 answers
620 views
How to make Wireguard and Tasilscale coexist on the same machine?
Seems that restarting the wg service always creates a routing table with higher priority than Tailsales which results in the inability to. connect to the machine via Tailscale until both services are ...
0 votes
1 answer
6k views
How to NAT-route network to Tailscale?
EDIT: I already spent 3 days going through different possible ways of handling this and settled on iptables. This is like the biggest-kept secret to me. No matter how much I read, I feel like I'm ...
0 votes
1 answer
899 views
Establishing network connections across GCP regions
I have a staging environment in GCP as a separate project. Inside the project, I have a test VM where I can deploy components for testing against our internal services. Most of our services are ...