Does GL-A1300 (Slate Plus) run as an exit node for Tailscale

[vin321]

Hi all,

So I was planing to travel for a bit and use a portable router to be able to use the hotspot for multiple devices, and also be able to connect to my home devices through a Tailscale tunnel. Will that be possible to do with a GL-A1300 (Slate Plus)?

Thanks
Vin

[bring.fringe18]

Not without a touch of work:

Tailscale settings lost on reboot

Yeah I see that now after you posted that dir list. The more I look at this the more it seems all so familar: This is untested code to enable exit nodes I never got feedback on from someone else but here: sed '/param="$param --exit-node-allow-lan-access --exit-node=$exit_node_ip"/a\ param=“$param --advertise-exit-node --allow-exit-node --allow-routes”' /usr/bin/gl_tailscale >> \ /usr/bin/gl_tailscale.new && mv /usr/bin/gl_tailscale /usr/bin/gl_tailscale.stock \ && mv /u…

[vin321]

Hi @bring.fringe18 - That’s fine with me, I’m cool with making any changes. I just don’t have a context for how to first authenticate with tailscale and then run the gl.inet router as the exit node. Does it have to be through GUI first? Is there a documentation page available for all that?

[bring.fringe18]

IDK; I don’t use TS. I only know that method is reported to work per the results of others. I assume you’re already set up your tailnet & are just looking to get the GL device to act as a exit node.

[vin321]

Hi @bring.fringe18 - Yeah I already have tailscale up and running. I just want to use the GL-A1300 as an exit node.

[bring.fringe18]

Then if that method I posted still works it should just be a matter of tweaking a script. Don’t forget to add that modified .sh to be including in your backups:

HOW-TO: Script: List My OPKGs (to a file for backup)

Keywords: backup, opkg, plugins, list, howto, script, shell, luci, restore, ipk, tarball, conf Description List user’s (your) installed packages, writing them to a text file that can be used to reinstall the binaries of what a user manually installed. The resulting .list file will be use to opkg install to pull from the feeds. That is done with two commands in one execution. The GL GUI doesn’t feature a backup function. Creating & restoring a backup achieve (.tar.gz, aka tarball) of all your…

[vin321]

Sure thing, I’ll buy the device soon and will post the results of setting up tailscale here in this thread.

[vin321]

Right so I was able to set up tailscale with persistent connection as an exit nde. Here’s the steps.

1. Enable tailscale in Applications and authenticate your machine.

2. Ensure the router is the exit node and also disable the expiry of the authentication key.
   <Can’t insert more than 1 image>

3. Edit the file /usr/bin/gl_tailscale.sh and add the highlighted parameter to the line 159 after the --reset parameter. The line should look like:
   /usr/sbin/tailscale up --reset --advertise-exit-node --accept-routes $param --timeout 3s > /dev/null

<Can’t insert more than 1 image>

4. Restart the router and test if it works once it’s back up and running.

Thanks you @tragicshadow for the solution from here.

[bring.fringe18]

Heh; @tragicshadow 's method is just a reimplementation of mine updated for the Flint v2 (GL-MT6000) differences in firmware filenames. It’s not quite as clean but hey! As long as it works.

@vin321 … so you’re welcome.

(Don’t forget to mark ‘solution’ to let others know when they search the forum. Have a good one!)

[seasonshu]

I like the sed approach BUT tailscale.settings.exit_node_ip is not set on my server (as it should only be set on the client..). There doesn't seem to be a tailscale.settings that could be used for this purpose so just added a line just before the tailscale up command. This is the combination of the above two solutions:

sed '/timeout 10 \/usr\/sbin\/tailscale up/i\        # Custom param: add --advertise-exit-node on server\n        param="$param --advertise-exit-node"\n' /usr/bin/gl_tailscale >> \
 /usr/bin/gl_tailscale.new && mv /usr/bin/gl_tailscale /usr/bin/gl_tailscale.stock \
&& mv /usr/bin/gl_tailscale.new /usr/bin/gl_tailscale && chmod +x /usr/bin/gl_tailscale

[vin321]

@vin321

/usr/bin/gl_tailscale.sh

yo the file to edit is /usr/bin/gl_tailscale - I can't seem to be able to update it where my solution is. So here it is:

Edit the file /usr/bin/gl_tailscale and add --advertise-exit-node right after the --reset parameter to wherever you find this line:

/usr/sbin/tailscale up --reset --advertise-exit-node --accept-routes $param --timeout 3s > /dev/null

I'll post the sed command a bit later.

[marinegundoc]

This worked perfectly vin321. Thanks.
I went into the apps panel and installed the nano text editor (I used nano_full since my MT6000 has plenty of space). Then ssh'd into the router (you have to enable it first).
nano /usr/bin/gl_tailscale
that'll open the file in nano, then the line vin321 mentioned is nearly at the end of the file for me.
add the option, save (write out), reboot, profit.

[danpeig]

An alternative way of enabling the exit node mode without editing the start script or running frequent cron commands.

1. Go to Lucy then System->Startup->Local startup
2. Enter above the exit 0 line:

( sleep 60; tailscale set --advertise-exit-node ) &

This will allow the router to start all processes, including Tailscale connection and, after 60s, will set the flag --advertise-exit-node.

This solution persists after the router updates.