Possible to use wireguard client and Tailscale?

[Tzz]

Can I use Tailscale and WireGuard client together?

[hansome]

Yes, but not recommended to turn on “Custom Exit Nodes”, I don’t know what’s gonna happen.

That said, enabling both Tailscale and wireguard client make traffic complicated.
Before firmware 4.5, the underlying traffic of Tailscale(port 41641) goes via Non-VPN interface.
From 4.5, it will go via wireguard VPN interface, so you will find a public VPN IP at tailscale console - Machine Details page.

[ayylmao]

Basically this sounds like my problem right now. Tailscale on 4.5 is broken? GL.iNet GL-MT3000 (Beryl AX)

Can i change the behavior of Tailscale so that it acts like the previous version before 4.5?

[admon]

@ayylmao

Can i change the behavior of Tailscale so that it acts like the previous version before 4.5?

Yep, see this one:

Turning on both Tailscale and Wireguard Client on 4.5 is broken? GL.iNet GL-MT3000 (Beryl AX)

tailscale using the routers public WAN IP (not the VPN IP) will be more reasonable. We accidentally introduce this issue. I’ve seen a case where the s2s network overlays on OpenVPN client. That’s a similar situation we’re facing. The workaround to make tailscale traffic(port 41641 etc.) go through Non-VPN interface is to insert a IP rule, use the following command: uci set network.policy_default_rt_vpn_ts=rule uci set network.policy_default_rt_vpn_ts.lookup='main' uci set network.po…