Route Tailscale Through VPN Connection

[will.qiu]

Hi

I assume you already know how to configure GL.iNet as an exit node.
If you need assistance on this side, please refer to the following thread for configuration.

Tailscale settings lost on reboot

Yeah I see that now after you posted that dir list. The more I look at this the more it seems all so familar: This is untested code to enable exit nodes I never got feedback on from someone else but here: sed '/param="$param --exit-node-allow-lan-access --exit-node=$exit_node_ip"/a\ param=“$param --advertise-exit-node --allow-exit-node --allow-routes”' /usr/bin/gl_tailscale >> \ /usr/bin/gl_tailscale.new && mv /usr/bin/gl_tailscale /usr/bin/gl_tailscale.stock \ && mv /u…

Here are the steps to further adjust the configuration to make with Tailscale exit node work with WireGuard VPN:

1. In Luci - Network - Firewall - Zones, configure tailscale0 to allow forwarding to wgclient1.
   

   

2. In Luci - Network - Routing - IPv4 rules, add the following two rules:
   2.1 Forward outbound traffic from the Tailscale network into the VPN tunnel.
   

   
   
   2.2 Prevent form Tailscale to local LAN traffic that matches