4 ms·

I am able to route traffic on my mobile device through my home network via the use of their "exit node" option. It allows one of my home devices to act as an ex

by gzer0 4y ago

I am able to route traffic on my mobile device through my home network via the use of their "exit node" option. It allows one of my home devices to act as an exit node for my entire personal tailscale network. This serves multiple benefits: the main one being that I receive pi-hole filtered ad-free traffic on my mobile device via a Wireguard VPN with my home IP 24/7/365

karlshea 4y ago
I can do that without Tailscale though by just using the WireGuard app. What is Tailscale adding to this?
- nickysielicki 4y ago
  NAT breaking, I can have a wireguard network with Tailscale where every device only has an RFC1918 address and a default route.
  - karlshea 4y ago
    Ahhh that is slick
  - anderspitman 4y ago
    For more background on just how much Tailscale is doing for you with respect to NAT: https://tailscale.com/blog/how-nat-traversal-works/ https://tailscale.com/blog/how-nat-traversal-works/
  - devman0 4y ago
    Is forwarding a single port that difficult in most circumstances? I do realize there are some instances where that is hard like CGNAT, but if I have easy access to wireguard in my network already what does tailscale buy me?
    - donaldihunter 4y ago
      I was running Wireguard exactly as you describe, but I'm now using Tailscale because convenience.
- rrix2 4y ago
  not having to generate, manage, and distribute wireguard secrets and configurations was good enough reason for me to switch. Tailscale also provides a "magic DNS" service which lets you resolve your Tailscale device names without setting up unbound etc, and which can relay other requests through to your pi-hole or unbound or whatever, which can then listen only on the tailscale IP address, so no need to run an open resolver or deal with source IP filtering. e: also, you can share devices between tailscale users without generating, managing, distributing wireguard secrets. You send your pal/partner/kid a link and they can access your fileserver or raspberry pi webserver or pihole server for themselves wherever they are.
- ReverseCold 4y ago
  > For a Linux user, you can already build such a system yourself quite trivially by getting an FTP account, mounting it locally with curlftpfs, and then using SVN or CVS on the mounted filesystem. From Windows or Mac, this FTP account could be accessed through built-in software.
- LoveGracePeace 4y ago
  I do the same, for multiple domains I own. Definitely not difficult.
deleted 4y ago
[deleted]
Sohcahtoa82 4y ago
What other benefits are there? I use a PiHole to block ads on my phone already, but I do it via a PiHole installed on an EC2 instance that I also use as an IRC bouncer and other things.
- pkulak 4y ago
  It means you can self host all kinds of things and never worry about opening a port on your router.
  - anderspitman 4y ago
    As long as you don't need to share any of your services with non-Tailscale users. Otherwise you'll need to set up some sort of public server.
    - vineyardmike 4y ago
      But you can also try to get them to be Tailscale users and effortlessly share the devices with access control features they built. I share my home servers and game servers with family/friends easily while still keeping everything off the public internet.
      - apitman 4y ago
        But now your friends and family are locked into a proprietary system, subject to whatever the future incentives of Tailscale end up being. How many people can you connect on the free plan?
        gzer0 4y ago
        Everything in Tailscale is Open Source, except the GUI clients for proprietary OS (Windows and macOS/iOS), and the control server. Headscale [1] allows one to implement a self-hosted, open source alternative to the Tailscale control server. [1] https://github.com/juanfont/headscale https://github.com/juanfont/headscale Almost all of tailscale is opensourced at this point besides the GUI.
antihero 4y ago
Ah, the exit node thing is really cool, always handy to have a residential IP to route through too :)
PinguTS 4y ago
So then, whats is the difference to run OpenConnect and then connecting to it via activating CiscoVPN on the phone/mobile device? I used that while I was in China as this allowed me to have my own personal VPN.

by gzer0 4y ago

karlshea 4y ago

I can do that without Tailscale though by just using the WireGuard app. What is Tailscale adding to this?

nickysielicki 4y ago
NAT breaking, I can have a wireguard network with Tailscale where every device only has an RFC1918 address and a default route.
- karlshea 4y ago
  Ahhh that is slick
- anderspitman 4y ago
  For more background on just how much Tailscale is doing for you with respect to NAT: https://tailscale.com/blog/how-nat-traversal-works/ https://tailscale.com/blog/how-nat-traversal-works/
- devman0 4y ago
  Is forwarding a single port that difficult in most circumstances? I do realize there are some instances where that is hard like CGNAT, but if I have easy access to wireguard in my network already what does tailscale buy me?
  - donaldihunter 4y ago
    I was running Wireguard exactly as you describe, but I'm now using Tailscale because convenience.
rrix2 4y ago
not having to generate, manage, and distribute wireguard secrets and configurations was good enough reason for me to switch. Tailscale also provides a "magic DNS" service which lets you resolve your Tailscale device names without setting up unbound etc, and which can relay other requests through to your pi-hole or unbound or whatever, which can then listen only on the tailscale IP address, so no need to run an open resolver or deal with source IP filtering. e: also, you can share devices between tailscale users without generating, managing, distributing wireguard secrets. You send your pal/partner/kid a link and they can access your fileserver or raspberry pi webserver or pihole server for themselves wherever they are.
ReverseCold 4y ago
> For a Linux user, you can already build such a system yourself quite trivially by getting an FTP account, mounting it locally with curlftpfs, and then using SVN or CVS on the mounted filesystem. From Windows or Mac, this FTP account could be accessed through built-in software.
LoveGracePeace 4y ago
I do the same, for multiple domains I own. Definitely not difficult.

deleted 4y ago

[deleted]

Sohcahtoa82 4y ago

What other benefits are there? I use a PiHole to block ads on my phone already, but I do it via a PiHole installed on an EC2 instance that I also use as an IRC bouncer and other things.

pkulak 4y ago
It means you can self host all kinds of things and never worry about opening a port on your router.
- anderspitman 4y ago
  As long as you don't need to share any of your services with non-Tailscale users. Otherwise you'll need to set up some sort of public server.
  - vineyardmike 4y ago
    But you can also try to get them to be Tailscale users and effortlessly share the devices with access control features they built. I share my home servers and game servers with family/friends easily while still keeping everything off the public internet.
    - apitman 4y ago
      But now your friends and family are locked into a proprietary system, subject to whatever the future incentives of Tailscale end up being. How many people can you connect on the free plan?
      - gzer0 4y ago
        Everything in Tailscale is Open Source, except the GUI clients for proprietary OS (Windows and macOS/iOS), and the control server. Headscale [1] allows one to implement a self-hosted, open source alternative to the Tailscale control server. [1] https://github.com/juanfont/headscale https://github.com/juanfont/headscale Almost all of tailscale is opensourced at this point besides the GUI.

antihero 4y ago

Ah, the exit node thing is really cool, always handy to have a residential IP to route through too :)

PinguTS 4y ago

So then, whats is the difference to run OpenConnect and then connecting to it via activating CiscoVPN on the phone/mobile device? I used that while I was in China as this allowed me to have my own personal VPN.