mirror/openwrt-packages
1
0
Fork 0
mirror of https://git.openwrt.org/feed/packages.git synced 2024-06-19 23:28:39 +02:00
Code Releases Activity
565866a472
openwrt-packages/net/tailscale/README.md
Oskari Rauta aabfc3f510 tailscale: update to 1.36.0 
- Update tailscale to version 1.36.0
 - Patch iptables support

Tailscale does not (yet) support nftables.
Tailscale allows running with --netfilter=off allowing
end-user to create his own firewall rules, but this
affects only tailscale cli, not tailscaled daemon, so
connection cannot be made without error telling that
tailscaled was unable to determine execute iptables
for determining it's version.

There is a work-around for those who do not want
nft-iptables compatibility package; they can create
a script to /usr/bin/iptables which responds to
--version argument and echos fake version string
and on any other arguments or no arguments, just exits.

After this procedure and starting tailscale cli with
netfilter off- it works. Openwrt has moved on to
nftables, so iptables manipulation seems unnecessary.
Especially for other reasons, on Openwrt, firewall
should be configured on it's own, because firewall
rules made by other software, such as tailscale,
loose their firewalling rules when firewall restarts.

So I patched it to allow "fake" iptables pointing
to executable /bin/false and ignoring version
request. And I also set cli to default to
netfilter off setting.

If still end-user wants to use iptables, this
patch does not make it impossible; just install
iptables, or nft-iptables, and run tailscale
with argument --netfilter=on and it works out
as it did before, tailscaled daemon still
matches with iptables if it is found in $PATH.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2023-02-04 18:26:54 +08:00

894 B
Raw Blame History

Tailscale

This readme should help you with tailscale client setup.

Install

There are two packages related to tailscale. Tailscaled (daemon which has to run every time you want to be connected to VPN) and tailscale (package with a utility which is necessary for registering device).

To install them run

opkg install tailscale tailscaled

First setup

First, enable and run daemon

/etc/init.d/tailscale enable
/etc/init.d/tailscale start

Then you should use tailscale utility to get a login link for your device.

Run command and finish device registration with the given URL.

tailscale up

If you are running with nftables, it is not supported by tailscale, so disable it and configure firewall by yourself and add argument --netfilter-mode off to tailscale up command to disable iptables use.

After that, you should see your router in tailscale admin page.