5 ms·

Has someone a recommendation for a travel router where I could 1/ setup a WG VPN to encapsulate all my traffic 2/ connect to a Tailscale network?

abound 2y ago
One of the GL.iNet travel routers [1] would probably work for you. They run OpenWRT (or a thin veneer around it), so you can SSH in and install packages and whatnot. They explicitly advertise Wireguard-based VPN support. I don't have one of their travel routers, but I have a Flint 2. [1] https://store.gl-inet.com/collections/travel-ac-router https://store.gl-inet.com/collections/travel-ac-router
- EQYV 2y ago
  I haven’t managed to get the built in tailscale route-through-exit-node functionality working on my router. Have you / others had success?
  - abound 2y ago
    Ah I have not. I run a Headscale instance, but my router knows nothing about my Tailnet
tarruda 2y ago
I recommend installing tailscale client on your devices instead of carrying an additional device/router
- ssl-3 2y ago
  I'll go ahead and install Tailscale on my PS5, then. Thanks!
  - throw4950sh06 2y ago
    Why would you need it there? Serious question, would love the use case inspiration.
    - homebrewer 2y ago
      PlayStation store is not available in many regions, mine included. Not that I personally care, it doesn't make sense to support businesses that treat you like a lesser being.
    - planetafro 2y ago
      Also remote play is amazing!
      - sweeter 2y ago
        Chiaki for the SteamDeck is amazing. I love playing Bloodborne on the go.
amatecha 2y ago
Yeah, GL.iNet GL-AR300M16-Ext is perfect for this purpose, very affordable and compact. You can configure the wireguard client, and then "Block non-VPN traffic" so it allows ONLY connecting through the VPN. Very handy! GL-SFT1200 should be a great option as well, currently the cheapest GL.iNet markets for their "travel AP" line, and you can run Tailscale on it[0]. I'm not sure about the AR300M16. ("Ext" means it comes with external antennas, version without that suffix has internal antenna if you want it to be even more compact) [0] https://forum.gl-inet.com/t/tutorial-tailscale-on-gl-sf1200-gl-sft1200-opal/31376 https://forum.gl-inet.com/t/tutorial-tailscale-on-gl-sf1200-...
- fragmede 2y ago
  Damn that one looks pretty good. Are there any with usb-c so I can hook my laptop to it via a usb-c cable and get a usb Ethernet gadget device, and can then carry one fewer cat-5 cable?
sandreas 2y ago
I'd go for a NanoPI R6S[1]. This thing is a 4 Core beast with USB-C Power Supply support. OpenWRT Support via snapshot, see ToH[2]. If this is too expensive, you could also go for a NanoPi R4S[3], but I wouldn't. The N6S is worth the additional cost. If you need wifi, there is the R5C[4]. 1: https://www.friendlyelec.com/index.php?route=product/product&product_id=289 https://www.friendlyelec.com/index.php?route=product/product... 2: https://openwrt.org/toh/views/toh_available_16128 https://openwrt.org/toh/views/toh_available_16128 3: https://www.friendlyelec.com/index.php?route=product/product&product_id=284 https://www.friendlyelec.com/index.php?route=product/product... 4: https://www.friendlyelec.com/index.php?route=product/product&product_id=290 https://www.friendlyelec.com/index.php?route=product/product...
- microtonal 2y ago
  The Rockchip in the R6S is very powerful, though depending on what you want to do there may be better options. The R6S doesn't have hardware offloading in OpenWrt. Many Mediatek Filogic SoCs do, so they can do NAT, routing, PPPoE, etc. while the CPU is almost idle. Banana Pi R3/R4 are good options or if you want something that is more of a ready-to-use product and doesn't requite SFP modules, the GL.iNet MT-6000 is really cool: https://www.gl-inet.com/products/gl-mt6000/ https://www.gl-inet.com/products/gl-mt6000/ Runs their fork of OpenWrt with a user-friendly interface (though LuCi is also available) and you can also flash vanilla OpenWrt. They also have smaller travel models. Of course if you use stuff that needs to run on the CPU (like Cake), then the R6S will be faster.
  - sandreas 2y ago
    I personally own a Banana Pi R3 as my main router and it's awesome. Unfortunately, it is pricey and pretty big for a travel router (besides the fact that it must be assembled). The MT6000 is even bigger. And you have to carry an extra power supply. For traveling I use a Gl.inet Beryl (GL-MT1300), which is nice, but not very powerful. Nowadays I would probably go for a GL-MT3000[1], if there wasn't the NanoPi R5C, which is small, powerful, supports OpenWRT and has Wifi. As a note: I thought about having Wifi via USB, but the stability and performance of USB-Wifi is nowhere near the integrated / miniPCIe stuff. So if wifi is a requirement, this might be important. 1:
xyst 2y ago
Is the idea of a travel router for the purpose of making sure there are no leaks while using a VPN on a publicly accessible AP? Client devices -> “travel router” with WG -> public AP My preferred way is to enable WG on-demand for devices and immediately detect if WiFi or Ethernet is not my home internet. Client devices (phone, laptop) with WG -> public AP Or is there some other purpose?
- ssl-3 2y ago
  One advantage of a travel router, to me, is convenience. It's pretty great to have my own (portable!) LAN while out and about. I just show up at the hotel and get my router online. After configuring that singular device, my other stuff all works together: My Chromecast, my laptop, my smart speaker, whatever gaming system I may have, some ESP32 project or other that I've been tinkering with, or whatever -- I just turn stuff on and it simply works. With a travel router that additionally uses VPN to tie my travel LAN to my home LAN, then: Whatever other network services I have at home are also available to me on the road. It can be very transparent. And that all conspires to mean that I can spend more time doing whatever it is that I feel like doing instead of futzing around with networking.
spr-alex 2y ago
We (https://supernetworks.org/ https://supernetworks.org/) have a Tailscale integration https://github.com/spr-networks/spr-tailscale https://github.com/spr-networks/spr-tailscale and support Site destinations for devices. For our hardware products one thing we do need is to source a good carrying case for travel.
mech422 2y ago
Gotta plug my fav's - odroid h2/3/4's ... Low power, fairly cheap, x86 based, onboard NIC (sometime 2), NVME/Sata and large memory support for lots of containers/etc. Also, low power draw! :-) I've been loving my H2+'s and I got some H4s in I need to find time to play with... 1.) https://ameridroid.com/products/odroid-h4-h4-h4-ultra https://ameridroid.com/products/odroid-h4-h4-h4-ultra 2.) https://ameridroid.com/products/odroid-h3 https://ameridroid.com/products/odroid-h3 (dual nic)
neurostimulant 2y ago
Asuswrt-merlin custom firmware can be installed on some asus routers and supports wireguard, among other things.

abound 2y ago

One of the GL.iNet travel routers [1] would probably work for you. They run OpenWRT (or a thin veneer around it), so you can SSH in and install packages and whatnot. They explicitly advertise Wireguard-based VPN support. I don't have one of their travel routers, but I have a Flint 2. [1] https://store.gl-inet.com/collections/travel-ac-router https://store.gl-inet.com/collections/travel-ac-router

EQYV 2y ago
I haven’t managed to get the built in tailscale route-through-exit-node functionality working on my router. Have you / others had success?
- abound 2y ago
  Ah I have not. I run a Headscale instance, but my router knows nothing about my Tailnet

tarruda 2y ago

I recommend installing tailscale client on your devices instead of carrying an additional device/router

ssl-3 2y ago
I'll go ahead and install Tailscale on my PS5, then. Thanks!
- throw4950sh06 2y ago
  Why would you need it there? Serious question, would love the use case inspiration.
  - homebrewer 2y ago
    PlayStation store is not available in many regions, mine included. Not that I personally care, it doesn't make sense to support businesses that treat you like a lesser being.
  - planetafro 2y ago
    Also remote play is amazing!
    - sweeter 2y ago
      Chiaki for the SteamDeck is amazing. I love playing Bloodborne on the go.

amatecha 2y ago

Yeah, GL.iNet GL-AR300M16-Ext is perfect for this purpose, very affordable and compact. You can configure the wireguard client, and then "Block non-VPN traffic" so it allows ONLY connecting through the VPN. Very handy! GL-SFT1200 should be a great option as well, currently the cheapest GL.iNet markets for their "travel AP" line, and you can run Tailscale on it[0]. I'm not sure about the AR300M16. ("Ext" means it comes with external antennas, version without that suffix has internal antenna if you want it to be even more compact) [0] https://forum.gl-inet.com/t/tutorial-tailscale-on-gl-sf1200-gl-sft1200-opal/31376 https://forum.gl-inet.com/t/tutorial-tailscale-on-gl-sf1200-...

fragmede 2y ago
Damn that one looks pretty good. Are there any with usb-c so I can hook my laptop to it via a usb-c cable and get a usb Ethernet gadget device, and can then carry one fewer cat-5 cable?

sandreas 2y ago

I'd go for a NanoPI R6S[1]. This thing is a 4 Core beast with USB-C Power Supply support. OpenWRT Support via snapshot, see ToH[2]. If this is too expensive, you could also go for a NanoPi R4S[3], but I wouldn't. The N6S is worth the additional cost. If you need wifi, there is the R5C[4]. 1: https://www.friendlyelec.com/index.php?route=product/product&product_id=289 https://www.friendlyelec.com/index.php?route=product/product... 2: https://openwrt.org/toh/views/toh_available_16128 https://openwrt.org/toh/views/toh_available_16128 3: https://www.friendlyelec.com/index.php?route=product/product&product_id=284 https://www.friendlyelec.com/index.php?route=product/product... 4: https://www.friendlyelec.com/index.php?route=product/product&product_id=290 https://www.friendlyelec.com/index.php?route=product/product...

microtonal 2y ago
The Rockchip in the R6S is very powerful, though depending on what you want to do there may be better options. The R6S doesn't have hardware offloading in OpenWrt. Many Mediatek Filogic SoCs do, so they can do NAT, routing, PPPoE, etc. while the CPU is almost idle. Banana Pi R3/R4 are good options or if you want something that is more of a ready-to-use product and doesn't requite SFP modules, the GL.iNet MT-6000 is really cool: https://www.gl-inet.com/products/gl-mt6000/ https://www.gl-inet.com/products/gl-mt6000/ Runs their fork of OpenWrt with a user-friendly interface (though LuCi is also available) and you can also flash vanilla OpenWrt. They also have smaller travel models. Of course if you use stuff that needs to run on the CPU (like Cake), then the R6S will be faster.
- sandreas 2y ago
  I personally own a Banana Pi R3 as my main router and it's awesome. Unfortunately, it is pricey and pretty big for a travel router (besides the fact that it must be assembled). The MT6000 is even bigger. And you have to carry an extra power supply. For traveling I use a Gl.inet Beryl (GL-MT1300), which is nice, but not very powerful. Nowadays I would probably go for a GL-MT3000[1], if there wasn't the NanoPi R5C, which is small, powerful, supports OpenWRT and has Wifi. As a note: I thought about having Wifi via USB, but the stability and performance of USB-Wifi is nowhere near the integrated / miniPCIe stuff. So if wifi is a requirement, this might be important. 1:

xyst 2y ago

Is the idea of a travel router for the purpose of making sure there are no leaks while using a VPN on a publicly accessible AP? Client devices -> “travel router” with WG -> public AP My preferred way is to enable WG on-demand for devices and immediately detect if WiFi or Ethernet is not my home internet. Client devices (phone, laptop) with WG -> public AP Or is there some other purpose?

ssl-3 2y ago
One advantage of a travel router, to me, is convenience. It's pretty great to have my own (portable!) LAN while out and about. I just show up at the hotel and get my router online. After configuring that singular device, my other stuff all works together: My Chromecast, my laptop, my smart speaker, whatever gaming system I may have, some ESP32 project or other that I've been tinkering with, or whatever -- I just turn stuff on and it simply works. With a travel router that additionally uses VPN to tie my travel LAN to my home LAN, then: Whatever other network services I have at home are also available to me on the road. It can be very transparent. And that all conspires to mean that I can spend more time doing whatever it is that I feel like doing instead of futzing around with networking.

spr-alex 2y ago

We (https://supernetworks.org/ https://supernetworks.org/) have a Tailscale integration https://github.com/spr-networks/spr-tailscale https://github.com/spr-networks/spr-tailscale and support Site destinations for devices. For our hardware products one thing we do need is to source a good carrying case for travel.

mech422 2y ago

Gotta plug my fav's - odroid h2/3/4's ... Low power, fairly cheap, x86 based, onboard NIC (sometime 2), NVME/Sata and large memory support for lots of containers/etc. Also, low power draw! :-) I've been loving my H2+'s and I got some H4s in I need to find time to play with... 1.) https://ameridroid.com/products/odroid-h4-h4-h4-ultra https://ameridroid.com/products/odroid-h4-h4-h4-ultra 2.) https://ameridroid.com/products/odroid-h3 https://ameridroid.com/products/odroid-h3 (dual nic)

neurostimulant 2y ago

Asuswrt-merlin custom firmware can be installed on some asus routers and supports wireguard, among other things.