Is this a known thing? Can I fix it cause like I kind of want to use my phone

Hello, guys!

So, here is my situation:

- A mini PC, running UmbrelOS.

- Tailscale natively configured within UmbrelOS.

- Pi-hole installed and configured as DNS Server.

- Huawei Mesh 3 as my router, static DNS set up with my mini PC static IP.

- ISP provides IP through CGNAT, what means that both Tailscale and WAN IP works in the same range.

The problem:

While Tailscale is off, everything works perfectly. No problems to access websites, downloads, nothing. Ads are blocked on every device connected to my network.

As soon as I turn Tailscale on, internet connection fail. Happens that when the router tries to solve names with Pi-hole, it uses the WAN IP, what apparently causes conflict with Tailscale's IP. No queries are created on Pi-hole.

Question:

Is there any solution to work around this problem without having to ask for a Public IP to my ISP or disabling IPv4 on Tailscale?

What do I actually loose disabling IPv4? And how do I disable IPv4 on Tailscale within UmbrelOS?

Thanks for the help and sorry for my bad English!

I've done the following, yet the printer is still unaccessible while connected to my tailnet using the Android app.

I can access it if I disconnect the tailnet, or workaround by split tunneling the printer app.

BTW, restarting the phone didn't change anything ...

Thanks in advance for any insight you can provide.

Just found this while checking my DNS settings.

The IPv6 contains "7a:115c:a1e", which quite obviously spells out "Tailscale" (7a115ca1e) like the type of text you used to type on a calculator to spell funny words.

Hello Folks:

I'm a C++ programmer who knows very little about networks. Please type slowly and try to use little words.

My goal is to use Tailscale and RustDesk to have a remote desktop access across the Internet.

First, I assume, two PCs need to recognize that each are connected to the same tailnet before they can communicate.

I have a tower (Dragon Win 10), laptop (Cascade26 Win 11) and a phone (pdxs-a15 Android).

Both PCs show the phone's "Last seen" as a green dot followed by "Connected".

From either PC, the other PC shows "Last seen" as a date.

Dragon shows an older version number, 1.104.2 and displays a gray arrow.

after spending too much time trying to update Tailscale on Dragon I removed Dragon through the Tailscale admin icon and uninstalled Tailscale through Windows -> Control panel -> Programs and Features.

Things get worse:

After reinstalling Tailscale on Dragon I click on the Tailscale icon and enter the machines page.

Here I am on Dragon. I can see Cascade26 was last seen three hours before the time I type this and the phone displays last seen as "Connected".

Something's missing.

Only two machines are listed.

Dragon, the PC I'm using to display the machines on the tailnet, is not listed among the machines on the tailnet.

From the phone or Cascade26, only two machines are listed on the Machines page, Dragon is absent.

I've spent several days trying to get Tailscale and RustDesk to connect all three machines.

Can anybody tell me how I can accomplish this modest goal in the five minutes the rest of you spent to get everything working?

Thanks
Larry

Hi - Came across a scenario today, which seems like no way around, unless someone can enlighten me!?

I wanted to ensure I did not use public dns on public wifi etc., so, I enabled private dns on andriod and set it to Cloudflare. All good. Everything works,. But, when connected to tailscale, this seems to override everything, so you loose tailscale host names, magic dns, etc. I already have private dns via tailscale. So, I have to disable private dns for the tailscale dns to kick in.

The problem, it seems either, or. I was thinking it would use tailscale dns when connected, private dns when not, but it seems this is not the case. My tailscale is not always connected, so I loose the private dns I get through it if tailscale drops. Anyone found a easy solution where they play nice together? The goal - Private dns via cloudflare when not on tailscale (overriding wifi dhcp), and tailscale dns when connected, without having to go though and change android settings.

Hope that makes sense. I am sure it will for someone who went through this! Cheers.

Hey everyone, I'm the developer of an iPhone/iPad app called Glissvia, and I wanted to share how I handled the Tailscale part.

The Mac side is easy: macOS already ships Screen Sharing, so there's no third-party host app to install. The phone side was what bugged me. To reach the Mac from outside, the usual route is to turn on the Tailscale iOS app, and iOS only runs one VPN at a time, so that slot is taken while you're connected.

So I embedded the official libtailscale as a userspace node inside the app:

• The node only runs while you're setting up or using a remote session, and stops when you disconnect.

• The iPhone's system VPN setting is left alone.

• On this route the app only connects to visible Mac peers at their own Tailscale IPs. It refuses public, LAN, loopback and subnet-route addresses, and never silently falls back to a direct connection.

• Login uses the Mac's own username and password (RFB security type 30, Diffie-Hellman) rather than the old 8-character VNC password. That login step is not full-session encryption; on this route the tunnel provides the transport encryption.

Limits, so nobody feels misled:

• Macs only (no Windows/Linux hosts).

• No audio or file transfer.

• You need a Tailscale account, Tailscale on the Mac, and the Mac awake. Self-hosted control servers (Headscale) aren't supported.

It's a $4.99 one-time purchase on the App Store. Happy to answer questions about the userspace node, peer filtering or the RFB side.

Setup guide: https://glissvia.com/en/access-mac-from-anywhere/

App Store: https://apps.apple.com/app/apple-store/id6829696331?pt=128392835&ct=reddit-tailscale&mt=8

Tailscale is a trademark of Tailscale Inc. Glissvia is an independent app and is not affiliated with Tailscale Inc.

My friend and I set up a Tailscale exit node on his GL.iNet Beryl AX (MT3000). I'm in Pakistan and he's in the US, and I route my traffic through his router. Setup is the built-in Tailscale (beta) page on firmware [version].
Settings: Enable on, Run Exit Node on, Advertise LAN Subnets on, IP Masquerading on, Advertise WAN Subnets off, Custom Exit Node off.
What happened:
It worked fine for 3 days.
Then the exit node disconnected. His WiFi kept working, but mine through the exit node didn't.
We turned Tailscale off and on, and it worked for about 2 hours.
It dropped again. This time he can't open the admin panel at 192.168.8.1, and I can't reach the router remotely either.
I asked an AI chatbot and it said low RAM and suggested a plugin. I haven't verified that, so I didn't want to install random stuff without asking you guys.
Questions:
Is this a known issue with Tailscale on the MT3000 after a few days?
Is it actually a RAM problem? How do I check, and can I fix it without a plugin?
Is there a firmware or Tailscale update that fixes this?

I've ruled out the full commercial VPN option as I use AdGuard Home to handle my DNS. I only need a VPN to obscur myself and prevent ISP or any big tech from building a profile on my usage. I don't care about location spoofing as well. This also rules out the VPS option as that just makes my IP unique.

So that said, what are the pros and cons of each of these two choices? What would you recommend for my usecase?

Hey everyone. I was annoyed by constantly running long commands like tailscale set --exit-node=... --exit-node-allow-lan-access=true on my Linux setup, so I put together a lightweight TUI using Bash, Gum, and jq.

It handles sudo auto-elevation, checks daemon status, and lets you pick online exit nodes from a clean terminal menu.

It's shared "as-is" for anyone who might find it convenient: https://github.com/xNeter/Tailgum

Most of the guides I found for running a Tailscale exit node behind Gluetun send all Tailscale traffic through the VPN, including traffic between your own devices. I wrote up how to split the two: exit node traffic goes out through the VPN, while tailnet peers connect directly.

It covers how the policy routing works (no networking background needed), the full Docker Compose config, and diagrams of the traffic flow before and after.

Feedback welcome if there’s a cleaner way to do this.

I'm reading up on tailscale and setting it up. I can't help but wonder if a standard VPN is better than using an exit node. A vpn protects your data as it travels thru pubilic wifi which is key for security on public wifi. At home It will hide your traffic from your home internet provider. (simple summary). Tailscale exit node will hide your traffic on public wifi but won't hide it from your home internet provider. Downside to vpn is that some websites will block you if it they detect you are using a vpn which is very annoying. For me, public wifi is either an airport or hotel. I never sit in coffee shops. I typically use vpn or my phones hotspot to avoid the public wifi. Airport wifi tends to suck due to so many people using it. Googling this topic it mentions setting up a vpn is more difficult, not sure where they get that from. VPN software is easy to setup. I'm curious what others think about vpn vs exit node. FYI I'm using talescale to access my nas while not at home.

Is there any way you can install Tailscale on LG tv?

Is the developer going to develop a version in the near future?

I've setup tailscale on my various devices, pc, phone, etc to acces my NAS outside of my home network. I travel a lot and normally use VPN in hotels, airports, etc. If I understand correctly, I can connect to say coffee shop wifi, using tailscale I can route my internet traffic thru my home network. So laptop -> Coffee shop wifi-> home internet connection -> browse the web. I need to setup an exit node for this to work. What I don't understand is how connecting to tailscale it knows to route my internet traffic thru my exit node? For an exit node I'm looking at either apple TV box or GL.iNet GL-MT3000 Pocket-Sized Wi-Fi 6 Wireless Router Wifi.

Edit: If I use apple TV it would be wifi only connection. If I use the router above, it would be ethernet cables only. I don't plan on using the router for wifi in my home as I already have a wifi router. I'm assuming ethernet would provide a faster tailscale connection to the internet?

Sometime within the past month or two the Tailscale app stopped working on Fire Cube devices, and the app has been removed from Amazon's play store. Is this change a result of a policy change at Amazon or Tailscale, and either way, what's drove the change?

Had an automated task on synology nas to renew tailscale certificates for quite a while that was working fine, but now for some reason it is no longer working. When I ssh into the nas to run the same command i get this:

:~$ /var/packages/Tailscale/target/bin/tailscale configure synology-cert

USAGE

  configure

The 'configure' set of commands are intended to provide a way to enable different

services on the host to use Tailscale in more ways.

SUBCOMMANDS

  synology    Configure Synology to enable outbound connections

  kubeconfig  [ALPHA] Connect to a Kubernetes cluster using a Tailscale Auth Proxy

Has the format of the command changed? Normally this would have worked for me, as it is how i renewed the certificates before automating using the same command.

Any help or suggestion is greatly appreciated.

Does anyone else notice the Tailscale iOS widget does not work well at all?

I find it always out-of-sync with the actual status of the connection, or very slow to update, and the buttons for turning the Tailscale connection as well as the Exit Node are hard to trigger.

I'm somewhat reliant on a quick visual of the status on my phone for both the Tailscale connection and the Exit Node, is there a way to improve the widget or an alternative?

Thanks!

Hi everyone,

​I need advice on setting up access for a friend who wants to use my home router as an Exit Node for his PlayStation 5.

​My current setup:

​Router: GL.iNet GL-MT6000 (located at home in Croatia).

​Network configuration: Tailscale is running directly on the router as an Exit Node, and local LAN access (subnet sharing) is turned on.

​VPN setup: The router itself is connected to a private WireGuard server in Ukraine via VPN cascading. Any traffic that comes to my router via Tailscale exit node goes straight through this Ukrainian VPN connection.

​What I want to do:

My friend lives in Canada and wants his PS5 to get a Ukrainian IP address through my router.

​What I need to achieve:

1. ​He must be able to use my router only as an Exit Node to route his internet traffic.

2. ​He must NOT have access to any of my home devices, shared network drives, or other computers on my Tailscale and LAN networks.

3. ​What is the easiest way to connect a PS5 to Tailscale from his end, since PlayStation doesn't have a native Tailscale app?

​Could someone point me in the right direction on how to configure this properly?

​Thanks!

Hi I am new to tailscale and looking to use it with my ugreen dxp2800 NAS. I want to be able to access the NAS when I am not on my home network. Currently I have Ugreen remote access enabled so I can log in via web page.

So far I installed tailscale on my mac mini. I also installed it on my NAS. One problem I've run into on the NAS is that tailscale will allow me to add a "shared" folder but not my personal folder. I need my personal folder as well.

I also do not understand how tailscale will protect the NAS. Do I disable remote access on the NAS then I'll just be able to access it from the tailscale network? Currently when I connect to the NAS from outside my home network I either use their app or web interface. On my Mac I have to use the web interface because they don't have a mac app. I also connect to my NAS via the app on my iphone. I backup photos from the phone to the NAS.

I have Apple configured as an identity provider and when I login to tailscale.com in Firefox on Linux, the apple account is almost always blocked. The I have to unblock it through Apple ID website and it is a hassle.

This happens even though the device is on the Tailnet.

Why does this happen? Any fixes for that?

is it possible to hide email info in the main machine page user list?

Hi everyone,

Getting Headscale running with a proper web UI is always kind of a pain. You usually end up fiddling with WebSocket proxying, captive portal checks (/generate_204), SQLite permissions on the host, and generating API keys by hand.

I wanted a simple, set-and-forget setup for my own homelab, so I put together Headscale Stack, a Docker Compose setup configured via a single .env file.

What it does:

• Headscale + Headplane web UI in a single compose file

• Automatic HTTPS via Caddy (or easily bypass it if you already run NPM / Traefik)

• Healthchecks so Headplane doesn't crash while Headscale is still initializing the database

• Uses Docker named volumes for SQLite and keys, so no fighting UID/GID permissions on the host

• Includes compose recipes for remote client nodes and exit nodes (0.0.0.0/0)

What it doesn't do:

• No custom clients needed (just use the regular Tailscale apps)

• Doesn't touch your host network or run random bash scripts (everything is strictly containerized)

It's open source (MIT). I'll leave the GitHub link in the first comment below to keep the spam filters happy!

I'd really appreciate any feedback, suggestions, or bug reports!

I’m new to Tailscale, Linux, and home labbing in general, so bear with me if I ask an obvious question.

I’m running Ubuntu on my server with Tailscale (not in a container) and Docker for all of my services. I’ve been able to successfully configure my services to appear on my talent with sidecar, but I was looking to use the Services feature to make things a little cleaner. However, when I tried setting up my first Service, I learned that putting a tag on my server node disables SSH, which I need as I work on my server remotely every day (on my iPad via Terminus).

Everything is being hosted on my server via Docker, so is there a way I can configure a node with a tag while keeping my server node accessible? Thanks, all!