TAILMON TAILMON v1.0.20 -July 27, 2024- WireGuard-based Tailscale Installer, Configurator and Monitor (THREAD #1 CLOSED)

[Rajjco]

I’m hoping to set and forget the vpn on for example iOS devices for convenience.

Given iOS only allows one active vpn connection at any time hence I’ll have to enable tailscale if looking to access devices on the mesh and disable it + enable NordVPN to remain anonymous on the internet - will be super if there is a way to achieve both at the same time.

You can add a Raspberrypi or any other device to vpn director and then run Tailscale on It then add It to Tailnet then finally set it as an exit node.

You would then have access to a vpn from any device by just simply using Tailscale.

 

[Ventola]

You can add a Raspberrypi or any other device to vpn director and then run Tailscale on It then add It to Tailnet then finally set it as an exit node.

You would then have access to a vpn from any device by just simply using Tailscale.

Yep but I’m thinking if using the router is the most efficient way in this case given it’s on 24/7 and already has access to both VPNs.

 

[Rajjco]

Yep but I’m thinking if using the router is the most efficient way in this case given it’s on 24/7 and already has access to both VPNs.

Yep adding interface support is a much simpler and cleaner solution.

 

[ColinTaylor]

Thanks for this, Viktor, great stuff as always.

Just wondering if it’s possible (and if it makes sense) to setup the router as an exit node and have traffic hitting NordVPN before reaching the internet in this case for anonymity?

e.g. Device (on tailnet)->Router (acting as tailnet exit node)->NordVPN->Internet

If you're asking whether it's technically possible, then yes it is. If your router is already sending all traffic out though NordVPN then tailscale traffic will be no different. Whether it makes sense to do so probably depends on each specific use case.

 

[Viktor Jaep]

I’m hoping to set and forget the vpn on for example iOS devices for convenience.

Given iOS only allows one active vpn connection at any time hence I’ll have to enable tailscale if looking to access devices on the mesh and disable it + enable NordVPN to remain anonymous on the internet - will be super if there is a way to achieve both at the same time.

I've been trying to figure out a workaround on this... I see your point. Reading up here could make for a simple solution:

https://www.reddit.com/r/Tailscale/comments/18p9on4/how_to_combine_tailscale_with_a_traditional_vpn

The idea here would just to make an internal client (workstation/server/laptop) on your end that is already participating on your local network where the NordVPN tunnel is being used for all outbound traffic, and designate it as a Tailscale exit node.

Totally theoretical, but sounds logical.

 

[Viktor Jaep]

Yep adding interface support is a much simpler and cleaner solution.

And I'm not seeing where it's added yet... sounds like it's only been requested thusfar.

 

[Rajjco]

That's a great question... We'll have to look into seeing if it's possible to specify a specific interface for inbound/outbound traffic.

And I'm not seeing where it's added yet... sounds like it's only been requested thusfar.

My bad thought It you figured It out.

 

[Tadas]

Great that it worked out for you.

At the risk of veering slightly OT into Tailscale settings (and there are many) rather than Tailmon usage, would you be able to elaborate on your use-case and the actual custom commands you amended or added; could be useful for others here.

Or was it literally just defining your own server(s), typing a comma-delimited IP list?

Thanks.

did --accept-routes and game over

 

[RandomUser777]

Just another shoutout to @Viktor Jaep and everyone else on how great this is.

I took the plunge and did a factory reset and built everything from the ground up. This script made installation of Tailscale almost seamless in comparison to the manual method!

 

[Viktor Jaep]

Just another shoutout to @Viktor Jaep and everyone else on how great this is.

I took the plunge and did a factory reset and built everything from the ground up. This script made installation of Tailscale almost seamless in comparison to the manual method!

Glad everything's working out good for you, @RandomUser777!

 

[JGrana]

@Viktor Jaep - one suggestion. I believe a site-2-site option would be useful. I think all you would need to do is append “—accept-routes” after the “—advertise-routes” on the command lines.

 

[Viktor Jaep]

@Viktor Jaep - one suggestion. I believe a site-2-site option would be useful. I think all you would need to do is append “—accept-routes” after the “—advertise-routes” on the command lines.

While I would normally agree with you on this one, @JGrana ... as a group when testing this, it was decided to leave this setting off as it's off by default. The only downside I've seen so far is that it produces a "health warning" stating that "some peers are advertising routes but accept-routes is false". According to the docs:

--accept-routes Accept subnet routes that other nodes advertise. Linux devices default to not accepting routes.

You can use "Custom" operating mode, and add that switch in if you want to run it... as a workaround.

 

[phneeley]

So what are the chances TAILMON will be incorporated as an option in amtm in the near term, @thelonelycoder ?

 

[thelonelycoder]

So what are the chances TAILMON will be incorporated as an option in amtm in the near term, @thelonelycoder ?

Slim. @Viktor Jaep has a family name I cannot pronounce.

 

[Viktor Jaep]

Slim. @Viktor Jaep has a family name I cannot pronounce.

I thought we were all family around here! Lol

 

[thelonelycoder]

I thought we were all family around here! Lol

JAEP HAUGHTON Pronunciation

How to say JAEP HAUGHTON in English? Pronunciation of JAEP HAUGHTON with 1 audio pronunciation and more for JAEP HAUGHTON.

www.howtopronounce.com

 

[Ellenswamy]

I have switched from Custom to Kernel and removed the custom flag `--accept-dns=false`. I briefly see this error:

Error: changing settings via 'tailscale up' requires mentioning all
non-default flags. To proceed, either re-run your command with --reset or
use the command below to explicitly mention the current value of
all non-default settings:

    tailscale up --advertise-exit-node --advertise-routes=192.168.1.0/24 --accept-dns=false

I can fix this using `tailscale up --reset` on the command line, but how does TAILMON handle this?

you have to mention all previous flags when making a change. If you try to change or add just one you will get this message

 

[Viktor Jaep]

JAEP HAUGHTON Pronunciation

How to say JAEP HAUGHTON in English? Pronunciation of JAEP HAUGHTON with 1 audio pronunciation and more for JAEP HAUGHTON.

www.howtopronounce.com

Good luck with that buddy!

 

[dom2114]

Hi,

Long time Entware user, but rather new to Tailscale and have been reading up on Tailmon (great work!).
I was reading on some other threads that Tailscale on Asuswrt-merlin cant work with hardware acceleration, so it needs to be disabled, which would limit throughput to 350Mbps (or something long these lines).

Can someone share if this is true with Tailmon? How does Tailmon impact performance on the router...are there tradeoffs?
I'm trying to set this up so that streaming can all be router though my home router. Can the router handle multiple connections e.g. of Netflix streaming?

Thanks for any info.

 

[ColinTaylor]

I was reading on some other threads that Tailscale on Asuswrt-merlin cant work with hardware acceleration, so it needs to be disabled,

Interesting. Where did you read that? link?