Tailscale

viajeros · 2021-06-14T00:53:40.435Z

How I set up Tailscale on my WiFi router

First published September 18, 2020; Upgrading OpenWRT added January 4, 2021. Why? I wanted to get to my WiFi router from the Internet, but didn’t want it serving the Internet. Putting it on a…

rp201rp · 2021-06-14T16:52:41.322Z

started reading about it. I was wondering if tailscale for openwrt is a client connecting to google&microsoft tailscale accounts or stand alone client and server all in one.

jpayne · 2021-06-14T18:17:53.691Z

@alzhao It is indeed based on wireguard but it creates a flexable network with selectable end points. it is realy simple and really good! vpn for dummies! and changeable on the fly.
@viajeros yes thankyou! that is what i used to setup the shadow but no joy on my mifi complains of no space so i have tried an sd card and mounted it as an overlay but no joy.

jpayne · 2021-06-14T18:18:34.630Z

you setup an account, that account is verified by Microsoft login or google login or by email verification. your space on their server creates the routs, out going coms so no port forwarding needed.

ovizii · 2021-07-16T11:05:51.998Z

can you give some detailed instruction s please? I think we need to add the right repository to openwrt and then install the package, right?

jpayne · 2021-07-16T11:47:44.668Z

Well i downloaded the ipk file from the repository (mips) and installed it as no repository was available.

Tailscale via OpenWrt package (or not)? Technical Support for Routers

Has anyone been able to get Tailscale running via the OpenWrt packages? (Or via anything, really?) It was added to OpenWrt recently via PR #15539 and pre-built binaries seem to exist for the appropriate architectures (e.g. https://downloads.openwrt.org/snapshots/packages/mips_24kc/packages/t ailscale_1.8.1-1_mips_24kc.ipk). However, I can’t figure out how to actually install it. Do I need GL.iNet specific packages or something? Is it possible to build myself? One thing I tried: $ opkg insta…

ovizii · 2021-07-16T13:20:27.121Z

Thanks, I now went the same route and uploaded the ipk files ia LuCi and configured tailscale ia command line.

Looks, ok-ish but I don’t see the tailscale interface in Luci, not sure if everything is firewalled, etc.

I guess there’s way more work to do

jpayne · 2021-07-16T13:35:00.613Z

yes no luci on this! just ssh in and run tailscale enable and tailscale up and you will get a link.
older gl devices have an older repository with no tailscale ! you have a newer on so no issue! i think there is a command plugin if you dont want to ssh in.

ovizii · 2021-07-16T14:44:40.205Z

thanks I got it running. Can I ask a few follow-up questions, maybe somebody can help.

It looks like I need to add the tailscale interface to a LuCi interface so somehow create a firewall traffic rule to allow ssh in from my other tailscale devices?
I don’t want to allow ssh in except via the tailscale interface.

I usually know my way around firewalls I’ve just never “looked behind the scenes” on a gli router. (I have a 750s if it helps).

Could someone share what else they did with the taislcale interface where they have added / bridged it to and what rules/routes/forwards you have in place to properly use it?

I’d laos like to be able to access the gli and/or LuCi interface via tailscale and not expose it to the wan.

jpayne · 2021-07-16T15:07:58.954Z

have you created an account at tailscale? coms are out going to the tailsale server so normally no firewall magic is nessasery. you need to be in a shell and issue the cmd tailscale up, you will then get a link to follow and you add the device to your account

Cyberwlf · 2021-08-27T12:52:05.998Z

Has there been any developments with this being supported by the UI? I’d still like this officially supported.

jpayne · 2021-08-27T17:25:07.148Z

no but have a look at this install guide for the mango

bitsnbobs.kertho.me – 4 Aug 21

Running Tailscale on a Mango* Router

Instructions on how to get Tailscale working on a GLiNet Mango router

Cyberwlf · 2021-08-27T19:19:03.229Z

Thanks for that link. Think I may have seen it before. Correct me if i’m wrong, but doesn’t that guide require effectively reformatting the device to only have Tailscale set-up on? e.g. LuCi and normal GL iNet interface, related controls, etc would then be gone i’m guessing?

If so, then it’d be far better to have official support for this, so that isn’t necessary (and a user can still take advantage of everything else GL iNet routers offer).

David · 2021-08-28T14:35:45.744Z

Thank you.
I’m going to test it. Here in my country I have some difficulties to keep VPN or some encrypted tunnels running for a long time.

martinderm · 2023-01-17T12:10:02.681Z

there really should be an official package…

jpayne · 2023-01-17T18:46:11.937Z

There is an official package now! These messages are old and we have moved on. So if there is enough memory available you can install

martinderm · 2023-01-18T16:27:10.689Z

Yes but what I meant is an integration to the GL.inet Admin menu. Tailscale lives from simplicity so that’s where it needs to be,

jpayne · 2023-01-18T17:22:28.344Z

indeed that would be nice, but there is the authentication process that would complicate that

scargill · 2023-01-18T18:36:56.813Z

On my FLINT device with firmware 4.1 - I installed TailScale via UCI and used TAILSCALE UP. IF I now look at the router in UCI (i.e.TAILSCALE STATUS - all my tailscale devices and their tailscale Ip addresses show up including the FLINT. If I go to my Android phone on mobile and hit TailScale - I see all my devices including FLINT…but on my phone browser - same conditions it can see my Node-Red interface on my Raspberry Pi (for remote access obviously) (xx.xx.xx.xx:1880/ui) but if I point the browser to the Tailscale IP address of FLINT with port left blank i.e. port 80 - I get nothing - surely I should get the GL-iNET front panel…??

PeterE · 2023-06-10T09:50:53.469Z

Hi, Has anybody managed to install tailscale on a Mango router, and managed to use an exit node? I am unable to. I managed toinstall it, but not using an exit node. Instructions would be appreciated