Feedback on Tailscale implementation, v4.2 firmware

danger86 · 2023-04-05T03:26:20.941Z

@jdub I tried disabling mwan3 - this lead me to no changes…
I read on on one of the threads here that tailscale process keeps restarting and this is what I experience as well. Even going back to GL.Inet GUI I can see Tailscale Connecting (yellow) … Connected (green) … Connecting … Connected.
I think when the next firmware arrives I’ll try to wipe all tailscale leftovers and try again,

When trying to manually add firewall rules via a Tailscale interface, something causes a tailscale down/tailscale up loop

This is my experience now. I like the idea of not touching GL.Inet UI (until they work on it) and doing it all in luci/SSH. I will try it in the next few days.
From what I’ve gathered so far --advertise-routes 192.168.8.1 is necessary not only for inbound (from tailnet to router) but also for outbound: Clients → Router with TS → tailnet.
Disabling mwan3 is critical for the exit node functionality, which I am currently not too concerned but nice to have working

jdub · 2023-04-05T10:22:00.003Z

Oh… Yeah, I also edited the service file to delete the line they added that does the service start/restart based on the gui. Essentially it “works” if you remove all the Gl.iNet stuff

Eliam · 2023-04-06T07:47:01.160Z

do you know how to change control server ?

jdub · 2023-04-06T09:41:25.693Z

In CLI: tailscale up --login-server URL

PatG · 2023-04-08T04:35:36.092Z

Hi, I was just wondering if anybody is having this issue… I got connected to my Tail-scale network with an AXT-1800 (I have used all the current stable and beta software)… I would be downloading a file and all of a sudden after 5 or 6 minutes the file stops downloading (or receiving anything) also at this point all my access to the internet is dead and also connections to my other devices on the network is not accessible after this incident, although I was able to access everything before the sudden stoppage of the download…any help be great…thanks

hansome · 2023-04-08T09:32:35.621Z

Does the system reboot when this happened?

PatG · 2023-04-09T01:51:18.769Z

No… the system never rebooted itself…but the internet does come back when i shut down Tailscale on the web GUI …Also, FYI…I was able in the beginning after I updated the firmware to stream video also with Tailscale running (this is to one of my Tailscale subnet sites) in addition to my file uploading and downloading…then this issue came about…like I mentioned I tried with all the different versions of the firmware with Tailscale enabled but all end up with the same issue

lextar · 2023-04-26T22:16:54.349Z

Hi there,
I have the Brume GL-MT2500 router and I have issues connecting to Tailscale.
I followed all the instruction here, but still not working

things I done:

setup tailscale using GL inet GUI
Added the tailscale0 interface, firewall and NAT rules in LUCI UI
tried to launch the sudo tailscale up --advertise-routes=192.168.1.0/24 --accept-routes command from ssh, but I still can’t reach any tailscale device with its IP

Firmware: 4.2.1 updated today
Any idea?

Undie · 2023-04-29T00:07:35.166Z

Hi, I’ve manage to get Tailscale somewhat function after tinkering with many setting, but the service seems to constantly disconnect and reconnect on my A1300. Is there something I can do to fix this. I bought the router specifically to use with Tailscale.

ss4pcRFradio · 2023-05-07T08:17:50.704Z

My case:

Router: GL-AXT1800
OpenWRT version: OpenWrt 21.02-SNAPSHOT r16399+159-c67509efd7
Kernel Version: 4.4.60

Tailscale installed, added tailscale0 interface, firewall and NAT rules in LUCI
I have the same issue that has @lextar but I solved using this CLI command

tailscale set --advertise-routes=xx.xx.xx.xx/24
tailscale set --accept-routes
tailscale up

Then I can reach any other tailscale device.
But, If I reboot the router I loss the config and I need to make again the sames changes.

HarvsG · 2023-08-21T15:31:21.515Z

On my non-standard install of tailscale on the MT1300 beryl How to get Tailscale working on the Beryl MT-1300! I cant get much more than about 1-2 MB/s aka 8-16Mbs. CPU usage on the beryl jumps around at about 40-60% during those speeds. On wireguard I got much faster speeds

4.3.6 RC 1
iperf3 -s Test 1 is direct tailscale connections, test 2 is direct wireguard

image971×953 25.3 KB

Currently glinet is running version tailscale version 1.32.3-1 (OpenWrt)
However in version 1.40 tailscale claim to be faster than native wireguard.

Tailscale

Surpassing 10Gb/s over Tailscale

Hi, it’s us again. You might remember us from when we made significant performance-related changes to wireguard-go, the userspace WireGuard® implementation that Tailscale uses. We’re releasing a set of changes that further improves client throughput...

Edit: I manually upgraded to tailscale 1.44 and unfortunately throughput was only slightly faster. 20Mbs or so.

danielg · 2024-03-16T09:44:19.432Z

Is this still the status quo, that it is better to use the plain OpenWRT firmware with LuCi than GL’s, to get Tailscale working on the AR300M?

danielg · 2024-03-16T11:05:14.252Z

Has anybody managed to get all GL router client traffic routed to a Tailscale exit node on any model router / firmware combination?

It seems that would be the key Tailscale functionality on travel routers in particular.

card · 2024-03-16T12:30:07.062Z

the AR300M doesn’t have enough RAM to effectively run a Tailscale exit node. You can do it, but to avoid having tailscale die from wireguard-go going OOM you need to make some non-trivial changes to the source code and rebuild it yourself.
on the AR300M you really should stick with standard wireguard. wireguard-go is just not being tuned for low memory use.

card · 2024-03-16T12:31:22.433Z

Many, many people run tailscale exit nodes on many models and firmwares.

danielg · 2024-03-16T13:30:53.307Z

I meant GL routers actually. How do you get custom exit nodes to show up in the dropdown menu under Gl firmware > Applications > Tailscale > Custom exit node?

cafebug · 2024-03-16T15:37:00.546Z

Once you have a device acts as an exit node listed in Tailscale admin console, your router should list it in that pull down list by clicking the refresh link beside.

danielg · 2024-03-16T16:11:05.693Z

Perfect. I got it to work. Thanks!

When choosing a GL router as an exit node which is itself running WG in client mode, is there any way to have the domain/IP exceptions configured in the GL firmware be respected for tailscale-connected clients?

cafebug · 2024-03-16T17:04:29.970Z

Read this first: Tailscale - GL.iNet Router Docs 4 (the Note part)

danielg · 2024-03-16T19:44:28.320Z

card:

the AR300M doesn’t have enough RAM to effectively run a Tailscale exit node

Does it have enough RAM to make other, less traffic intense Tailscale functionality useful, such as accessing printers or the admin interfaces of other tailscale clients or is it really not worth it to use tailscale on any of the less powerful GL routers?