1
Virtual private networks / Tailscale site-to-site setup
« on: July 23, 2022, 12:21:05 pm »
I'w reacently started looking in to Tailscale, it solves most of the problems i had with wireguard and i'd like to try it as my site-to-site solution, i understand that it's using wireguard-go and it will perform a bit worse then the kmod we have all gotten used to by now (it's not default but seems to be very common anyway)
I'w currently installed Tailscale from mimugmail''s repo and got it working fine by using the tailscale IP to reach the remote site, but whenever i try to add subnet routing i get stuck...
Subnets are properly advertised on both sites but i cant figure out how to route the corresponding subnet to the right interface.
I understand that it's not possible to route traffic to a specific interface, but setting up a gateway for that interface and route traffic to that gateway should work right? well i couldn't make it work...
I also tried to set up outbound-nat to translate the remote subnet to tailscale net but couldn't get that to work either.
I noticed that pfsense had some guides for this since they also got a tailscale plugin now, not sure it that plugin does stuff differently behind the curtains, but i could not get any closer to success with any of those guides.
Basically i'd like to solve this and create a Guide for it since i am positive this will be helpful for many people when more people realize the pros of this system.
Is subneting/exit node working on this package? what could i be doing wrong? and most importantly what would be a good way to troubleshoot the problem? i'w watched the "Live View" and the traffic actually leaves LAN network and goes in to the Tailscale network... but the remote site never gets any traffic.
I'w currently installed Tailscale from mimugmail''s repo and got it working fine by using the tailscale IP to reach the remote site, but whenever i try to add subnet routing i get stuck...
Subnets are properly advertised on both sites but i cant figure out how to route the corresponding subnet to the right interface.
I understand that it's not possible to route traffic to a specific interface, but setting up a gateway for that interface and route traffic to that gateway should work right? well i couldn't make it work...
I also tried to set up outbound-nat to translate the remote subnet to tailscale net but couldn't get that to work either.
I noticed that pfsense had some guides for this since they also got a tailscale plugin now, not sure it that plugin does stuff differently behind the curtains, but i could not get any closer to success with any of those guides.
Basically i'd like to solve this and create a Guide for it since i am positive this will be helpful for many people when more people realize the pros of this system.
Is subneting/exit node working on this package? what could i be doing wrong? and most importantly what would be a good way to troubleshoot the problem? i'w watched the "Live View" and the traffic actually leaves LAN network and goes in to the Tailscale network... but the remote site never gets any traffic.