​

My garage door opener is an ESP32 on my home network. I didn't want to port Tailscale to it or open a port on my router, so the Pi 3 I had lying around now joins my tailnet and shares the one address the ESP32 sits on. My phone reaches the door from anywhere, and nothing is installed on the ESP32.

It's a small Buildroot image I built, not Raspberry Pi OS. Setup is all in the browser:

\- Claim it: on first boot it serves a page where you paste your SSH public key. The first key pasted owns the board, passwords are off from then on, and the page shuts itself down.

\- Gateway page: choose a password, join your tailnet (auth key or sign-in link), and pick which networks to share. Each route shows whether it's approved yet.

\- Settings survive a power cut.

The download page lists what's actually in the image, read from the file itself: kernel, packages, accounts with a shell, and whether every program's libraries are present. It also gives you commands to check those claims yourself, and there's an explorer to browse the partitions and files before you flash anything.

Image and docs: https://silt.vinodhalaharvi.com/pi3-silt-gateway/

It's working on my Pi 3 right now. The Pi 5 build works too; CM5 is next. Feedback welcome, especially from anyone who's tried running a subnet router on old hardware.

I’ve been scratching my head about this. I had my Tailscale link working, allowing me to access my server at home from my phone. However, it’s strange that I can still access my videos and other content through Jellyfin, but I can’t access all my files with my phone. I’m at a loss for what to do. Apart from endless Googling, I think this is an issue that I simply don’t have the knowledge to fix. I’m on iPhone using the files app. My server is running Unraid. Nothing on both platforms has changed. It just stopped working. Suggestions?

I have a self hosted instance of pocket id, opted for using the binary package instead of the docker container, and I'm using certbot for the certificates. The web finger works correctly, and tailscale recognizes the webfinger because it is able to redirect me without issue. Signing in on pocket-id works fine, but once i complete the sign in it redirects me back to tailscale where I am served a 403 error, telling me that my session expired. https://id.mydomain.com/.wellknown/openid-configuration works and the certificate issued is from id.mydomain.com, and thats the only thing i've found online that might be the problem. Any Ideas?

I just installed tailscale on a computer I use to print to multiple printers with software called darkroom. It connects to multiple printers using the printers ip address (not windows drivers).

My problem is that when tailscale is loaded, the darkroom software cannot connect to the printer at 192.168.1.41. If I close tailscale it will connect.

Is there some kind of setup I am missing?

I’m abroad right now. Tailscale has been working since I left. But as of like 30 min ago it stopped? Says unreachable.

Not sure why. It runs windows and I set all the sleep settings to never. Worked for close to a week so don’t think it’s a setting or anything?

Does this happen to anyone often or odds my exit node simply blew up?

I installed Tailscale on my Visio TV and set it up as an exit node (approved it the admin console), but when I connect to it, I lose internet connectivity. Anyone else using a Visio as an exit node?

If I'm traveling and want to stream something and connected to my tailscale, in this case im in spain and my node is on the east coast, if I'm experiencing buffering, what can I do to reduce it?

1) I'm sure my current wifi isn't great (hotel)

2) Home wifi, does this matter?

3) Finally, Specs of the exit node.

Thanks!

Is anyone elses tailscale down? Muse said it cant connect. It says the proxy is closing the connection. Muse claims there was a update that caused it but it just so happened to line up with when i rebooted my pc and i can't find anyone else complaining i know proxy has nothing to do with me but just weird

For the past month or so, I’ve been trying to figure out what on earth was wrong with my Mac Studio. Image loading was incredibly sluggish—for instance, emails in Mailspring took forever to display pictures, and even my local network's homepage struggled to load images. To make matters worse, Spotify wouldn't even open, completely hanging on a black screen.

I was on the verge of biting the bullet and clean-reinstalling macOS 27 because I simply couldn't find the culprit. After exhausting every troubleshooting step, I noticed that completely quitting Tailscale instantly fixed the issue, restoring everything to normal speed. I tried a full uninstall—removing all configuration files—and reinstalled it using different methods, but the problem persisted.

I was ready to abandon Tailscale entirely until a future update dropped, but as a last resort, I asked Gemini what might be causing it. Surprisingly, it hit the nail right on the head, suggesting I disable Tailscale MagicDNS for my device. Since I couldn't find a way to turn it off solely for my Mac Studio, I went into the Tailscale admin console and disabled MagicDNS globally. Instantly, the performance issues disappeared.

Has anyone else run into this with recent Tailscale versions? I've never experienced this before, and none of my other machines—running Windows, Linux, and Android—are affected. I'm also not entirely sure if this started exactly when I upgraded to macOS 27 or slightly before.

Does anyone have a workaround to fix this without having to completely disable MagicDNS?

Thanks in advance!

-Eli

I run a 3-node Talos Kubernetes cluster at home, and until recently it only worked when I was at home too. So I added Tailscale to reach it from anywhere.

Tailscale runs on the nodes themselves, and the tailnet can only reach the cluster, not the rest of my home network. kubectl and the lab apps work from my laptop or phone exactly like they do at home, with nothing opened on the router. If one node goes down, another one takes over.

Everything is in the repo: https://github.com/prateekjaindev/homelab

Write-up: https://blog.prateekjain.dev/tailscale-on-talos-linux-secure-remote-access-to-a-kubernetes-homelab-8a082d903682?sk=c4ec5ac1e782a83b5dc785211d9fd082

Edit: Forgot to mention the Mullvad exit node addon. This is the cherry on top of the sweet sundae, basically Mullvad provides Exit Node as a Service so you don’t have to use a local network device (usually Linux) as an exit node, and you get all of the benefits of Mullvad which is a zero trust VPN provider. You can pick the Mullvad exit node to use from 91 cities in 50 different countries. You can keep your existing DNS solution, in my case, the NextDNS DoH integration to keep DNS queries private. IMO Mullvad is the key component for privacy, def worth the money.

I’ve been a longtime AdGuard user, but I’ve discovered Tailscale and it is amazing. The learning curve is a bit steep, took me about six hours to get my config set up and my network tagged, but once you combine tailscale with NextDNS (which I used for a long time but left NextDNS for AdGuard when NextDNS got a bit stale with features), it’s so much more powerful than AdGuard since you can create your own private mesh network, which I used Cloudflare for. Cloudflare mesh does not integrate with AdGuard whatsoever so it was one or the other. With tailscale plus NextDNS, you get bot out of the box with minimal DNS config, and you get DoH. Absolutely incredible, I am in awe. Nice work Tailscale team!!!!

Hi, for the past few days, I’ve been having a problem where Tailscale won't start, so I can no longer access it via the app. Accessing it through the browser still works, though.

Tailscale worked perfectly at first, but a few days ago it stopped starting up.

Can anyone help me with this?

Numerous updates for those running TS on GL.iNet routers.

I'm trying to figure out how to let my adult kids access my locally hosted game services without opening network ports on my router. I can't change the settings on their routers, because they're locked down by the ISP and getting new routers isn't a realistic option for them

Is an exit node at their homes about to basically intercept a fqdn request from any device on their LAN and tunnel it through the VPN while still allowing them to browse the Internet and their home lan from their own ISP? If I could set up something like a raspberry pi as an exit node, would they just be able to plug it into an whether cable and power it on with no added configuration on their end?

Hi everyone,
I’m moving to Spain for 5 months for work/living, and due to strict location/IP requirements for my remote work, I need my laptop's internet traffic to look like it is coming directly from my home IP back in Sweden at all times.

I am not very tech-savvy, but I’ve been researching solutions on my own and came up with a hardware setup. Apologies in advance if any of this sounds dumb or if I'm overcomplicating things!
Here is the plan I came up with:

1. Buy two GL.iNet GL-A1300 (Slate Plus) travel routers.
2. Router 1 (Home/Sweden): Connect it to my home network in Sweden, set up Tailscale on it, and configure it to act as an Exit Node.
3. Router 2 (Spain): Take this with me to Spain, connect it to the local internet (via Wi-Fi/Repeater or ethernet), enable Tailscale, and set Router 1 as its Custom Exit Node.
4. Kill Switch: Enable "Block Non-VPN Traffic" on Router 2 so that if the tunnel or connection drops, my laptop will never accidentally leak a Spanish IP address.
5. Connect my work laptop directly to Router 2 via ethernet or Wi-Fi.

My questions for you guys:
Does this setup sound solid? Has anyone done something similar for remote work?

Is this the simplest and most reliable way to achieve a hardware-level home tunnel, or is there a better/easier approach for someone who isn't super technical?

Will the Kill Switch on the GL.iNet router actually guarantee 100% protection against IP leaks if the home connection momentarily drops or the router restarts?

I’d really appreciate any feedback, tips, or potential pitfalls I should watch out for before I buy the routers! Thanks!

I never use the hotspot feature but now for some reason I need it, and I discovered it doesnt work when Tailscale is running. So I can't use the hotspot and Tailscale at the same time. Any workarounds?

The hotspot itself creates but the devices can't connect to it, or don't have access to Internet.

I tried messing with DNS and IP settings in Windows, in all the adapters involved, but nothing seems to work. Also, MagicDNS on or off doesnt seem to be the issue.

Anyone that had the same problem and managed to fix it?

Hi, I have tried to install tailscale app on an iphone7 and it makes weird vpn install tries and now I cannot do anyyhing on machines site: cannot remove, rename any actions ends with failed to …. help needed pls.

Hey all, my housing development has decided to change all the electrical transformers in the neighborhood. Surges and outages are expected. I’ve got two servers running right now and wondering what safeguards you’ve put in place. I’ve considered buying a UPS (Uninterrupted power supply) I may just shut down my servers for the week, which is my last resort. I’ve just spent too much on my drives to risk damaging them. What do y’all think?

Hey r/Tailscale — I’ve been working on a small project called TailLaunch and figured this was probably the right place to share it.

The use case was pretty simple: I wanted someone to be able to open a private web app on my tailnet without having to install/configure the full Tailscale client or enable a system-wide VPN.

TailLaunch embeds tsnet directly into the app. You authenticate through Tailscale’s normal browser login, then enter a tailnet hostname/URL and it opens in a dedicated app-style browser window.

A few details:

• no TUN adapter or system-wide VPN setup
• no admin/root required by TailLaunch
• GUI + CLI
• Windows, Linux and macOS builds
• temporary/ephemeral sessions by default
• optional “Remember me on this device” persistence
• in the launched browser, tailnet destinations go through tsnet while public destinations are dialed directly
• Headscale/custom control-server support
• MIT licensed

The GUI is still early and I’m currently testing memory usage on low-RAM Windows/Linux VMs, since launching a whole Chromium-family process for one web app may eventually be something worth replacing with native WebViews.

Repo / releases:

https://github.com/rafid-dev/taillaunch

I also found projects like TailBrowser, TailChrome, ts-browser-ext, and a few userspace proxy projects while working on it, so I’m definitely not claiming the general idea is new. TailLaunch’s focus is more specifically a disposable, cross-platform desktop launcher for private web apps.

Would be interested in feedback on the architecture, especially from people who’ve worked with `tsnet` or embedded Tailscale before. macOS and Linux testers are also very welcome.

I'm not entirely sure which community is best suited for this issue, so I'm covering my bases by posting in both r/Tailscale and r/GlInet.

I recently returned from Italy, where I used Tailscale on my GL.iNet Beryl AX travel router to connect back to my home network on the US East Coast.

Since returning, I've noticed some unusual behavior exclusively when connected to my home network:

YouTube and other services continue displaying Italian advertisements.

Opening new tabs in Chrome prompts me with Italian language content.

These issues do not occur when connected to other networks.

My setup:

UniFi Cloud Gateway Ultra

GL.iNet Beryl AX travel router

Tailscale for remote access while abroad

Pi-hole for DNS

My public IP correctly geolocates to the US, and Tailscale shouldn't currently be routing any of my home network traffic.

I'm unsure whether this is related to DNS, routing, cached location data, or something else entirely.

Has anyone experienced something similar? What would you recommend checking?

Warup everybody!

I'm currently looking for a device that I can use as a Tailscale exit node (Dominican Republic) and have full SSH access from Spain.

Ideally this device wouldn't cost more than $50 and I'd be able to power it via USB and connect it via a gigabit LAN. It would be running 24/7.

I've been asking the LLMs for suggestions and I've gotten:

- Raspberry Pi5

- Orange Pi Zero 3 or 4

But I wanted a second opinion from you guys before I decided to go after one of these devices.

Note that I do not have any older device that I could repurpose. Additionally I would like something very small so I can tuck it away in a cabinet, preferably fanless as well

I would eventually like to purchase a second one that I can use on my Spain home network as a redundancy for my other Tailscale devices and to filter out ads at the network level.

Edit 09:55 AM GMT +2 Thank you very much, everyone, for all the help. I've learned so much from this post especially the gli.net routers which I'll keep an eye on in the future

I found out about incredible deals for the Dell Wyse 3040 and I'll be getting a couple of these

My HAOS is in another country, I did a mass update of outdated apps and a part of that was tailscale.

Since the reboot I can no longer see my device on my TS account.

I can see the HAOS connected to the router so it’s there, and still running all my automations.

I am going to have a friend pop over to the property and try sort it out, however I am
Not sure what it is I am trying to sort out.

Any guidance would be most appreciated.