Long time Wireguard user and lover here but tailscale is really a total game-changer, sometimes I think that is almost too good to be true. I use linux, macos and windows machines, setting up virtual private network with tailscale is extremely easy and I'm particularly amazed by the simplicity of the file sharing process (ok linux requires command line, but that's still very cool). You have done a terrific work with this program, I hope hope you get the success that you deserve (but don't cancel the free tier :)

@raulgalets

3 ай бұрын

agreed. how on earth after a voodoo magic handshake I can easily access my home network, even on CGNAT. How on earth can I set a funnel to plex and access it anywhere at near local speeds. 0 downtime. I truly cannot understand

@corpingtons

2 ай бұрын

@@raulgaletsit’s pretty crazy I mainly use it for cloud game streaming on my laptop when I’m traveling and also saving data to my pc great tool

@raulgalets

28 күн бұрын

@@Spractral it is the latter. I don't know the full process allowing this to happen, but I've come to understand it better as I read more and fiddle more with networks, but yes, it was just to show how magical it feels.

You don't lie! This is truly incredible, all my devices in different locations are now connected within literal minutes. No hassle. This is borderline magic haha. Thank you!

@pedro.abactor

Ай бұрын

fr man, been using wireguard for a while and just the fact that you dont have to open ports in your router its straight up magic

Found out about tailscale today and what an amazing thing you’ve created! Fits my use case perfectly and thank you for a generous free tier, which I hope remains 🤞🤞

WoW, Tailscale, where have you been all my digital life!!! Definitely a game-changer. I'm in the testing phase now. It looks extremely promising. Hats off to the instructor... Thank You.

Alex! Legend mate. What a great idea having you present. Always wondered what you looked like. Long time listener, CoderQA member but first time TailScaler here. Linking up some rigs and self hosted ting for a start up. Self taught. You Chris and Mike are my only friends on the lonely road.

@Tailscale

6 ай бұрын

Great to see you here!

I love this presentation! Thank you!

Great video Alex!

Thanks for the demo and info, awesome! Have a great day

This is incredible. Thanks!

It's IronicBadger! From "Chris and the Badger" morning show! 😂

Hi, thanks for the video, how did you get the bracket pair on top of your iPhone, look like custom logos on Cydia app lol

Really I love that Service. it is incredible

this is great, I'm ditching zero tier right now, thanks 😁

Needed a way to access my Paperless-NGX server from my phone while traveling. This was perfect

@Tailscale

4 ай бұрын

paperless-ngx is an awesome app

this is black magic :D I love it

the ssh by name alone is magnificent.

i use it for a mic i use the Steam Link to access my computer, which is about ~140km away from me the only device that i have with me that has a mic is my phone but apps that use the phone as a mic for ur pc connect over ur lan so i routed all my phones data to my computer now i can use my phone as a mic i think its possible to do what im doing in windows (use my desktop as vpn, without downloading anything), but idk how. The app simplified everything for me

outstanding! Saved my bacon with remote controlling a computer who's isp is Starlink

this software blew up my mind 🤯

Er well done. That's a very well done explanation - you've found the things many of us want to do. Do summarise them in writing at the end.

Great video explaining how everything works with Tailscale. I have a question however, is an exit node basically a forward proxy? Exit node is basically routing my traffic through it as if I'm accessing the internet from that exit node, as I understand that's what a proxy server does. Or am I understanding it incorrectly.

@parkerhiggins

7 ай бұрын

From a traffic routing perspective, that's correct. Often forward proxies are a little more "active" (inspecting traffic and enforcing policies) and a Tailscale exit node doesn't do any of that, but it does pass traffic through a node in the same way.

Please make a video how to use Tailscale with Moonlight\Sunshine, and how to optimize latency ! thanks for your work

If I have devices on a tailscale sub-net are they reachable via name only aswell?

Wow, this is just genius! :o Ich als Deutscher und IT-Nerd bin sehr zufrieden. XD

Quick question / point of clarification: at the very end of the exit node you indicated that it was useful for accessing apps you host yourself. I "think" this was a victim of editing that was not necessarily tied it needing to be an exit note to access self-hosted apps and home automation things because that was covered at the beginning with the Own Cloud stuff, right?

Do you have a video showing how to create tailnet for video cameras and Roku stick etc?

Questions: 1. I'm not open to Apple, Google, or Microsoft being an identity provider. We use 1Password, which has also been a passkey provider, and thus appears to be an option with Tailscale. It is easy to recover with the printed-off key that you get at the start, and doesn't tie me to be constantly logged in to any of those services. Do you see any issues or thoughts with using 1Password? 2. I have one asset that is Windows 11 machine, in a data center, with a single public IP address, e.g. no LAN. Can that be included with SSO as part of a flat Tailscale network? 3. For any LANs, I would assume that Tailscale would be transparent to all LAN users so their logins, private IPs, and access will remain unaffected unless they log into Tailscale?

excellent work, but I'm concerned about the portal of doom to many security holes this will open up

It is possible to route traffic to Cloud server to Mobile network as a exit node?

This is probably a stupid question but are you using Terminal on Mac to enter commands like "tailscale up" when setting up your private server?

@Tailscale

5 ай бұрын

Yep!

@zachary1011

2 ай бұрын

@@Tailscale bad grifter

awesome 👏

Interested...Can do a video Tailscale running on OpenWrt?

Hi nice video, but it would be good to get a sample example of how to setup https with tailnet on a ubuntu cloud server with caddy. I have done this but when it comes to use https I always got a challenge error when getting certificates. If you could help I would appreciate. Thanks in advance.

Any plans to add Ubiquiti UDM PRO (SE) natively integration? 👀

Dumb question. I sent a comment of applause but this is a question please. That’s an iPhone. What iPhone app are you using as your terminal? Is it part of TailScale? I am used to Linode.

@Tailscale

6 ай бұрын

Blink.

Excellent video! But I am strugling to reach certain web-gui (Truenas) on my network even still...this was the main goal for me. I can ping the tail-ip for this machine, but I cannot reach its web-gui. Can someone help? Everything is "connected" in the Tailscale machine-overview etc.

Still getting familiar with Tailscale. At ~ 2:40 and ~4:23, both connections are not secured, not TLS/SSL. Is this because the VPN connection between the phone and Tailscale is secure? What security protocol is used to secure the VPN tunnel, e.g., IKEv2/IPsec?

can I share that connection with a device that can't run tailscale? For example, can I start Tailscale on my PC, also start a wifi hotspot from that PC, connect my Nintendo Switch to it, and game locally with someone else on switch halfway around the world

How do we set up our PI as an exit node on umbrel?

I'm a little confused. If I can remotely connect to an exit node and then access home automation and self-hosted stuff at that location, why set up a subnet router?

Can i configure port number. And what if someone who don't have my any personal account , how can they access my network.

Installed exit node on Truenas, but can’t access via phone outside home network. Is it possible to advertise ip as x.x.x.13/24?(13 is my truenas scale).

how to allow my brother to view my devices? i invited him in, but he cant see anything on my tailscale

I tried this with 2 Synologys, both are connected in tailscale but I can't ping the other machine with the tailscale IP. It doesn't work on both machines. Linux 3.10.108 and 4.4.302+ What works is if I add a linux server, from that machine I can ping both Synologys but I need to access one synology from the other...

For some reason, If I try to ping one of my tailnet devices by name, I get a message that the host name cannot be resolved, yet the IP address can be pinged. How do I fix this?

Im using Unraid and when I go into docker and right click on Nextcloud and click console and type tailscale up, I get command not found. Using tailscale plugin on unraid. Any ideas?

Devices on a tailnet have IP addresses that aren’t publicly accessible - I get that. But I’m not sure how this affects a device that has a DHCP reservation… Is this the address that should be reserved from your pool of addresses?

@willnorris

6 ай бұрын

The Tailscale IP address is in addition to any other IP addresses your device has, such as from a DHCP server. In most cases, it will appear to the rest of your computer and applications as a separate network interface, just like a wired ethernet or wifi interface. The operating system knows to use that special Tailscale interface for any requests for the private 100.x.y.z addresses.

can using 1 device kontrol up 5 device syncron one time?

I seem to be having trouble having any exit nodes showing up even though I have 3 devices with exit nodes enabled. I also don't see the exit node option under my username when logged into the tailscale ios app. Anyone have ideas why?

@sthardman

6 ай бұрын

Okay I figured it out. In case anyone is having the same issue, in the admin area listing your devices, if your device has a "( i )" next to the "exit node" tag, you still need to go into the routing settings of that device and approve it. I wish they made that step a bit more obvious, perhaps the ( i ) with an orange/red color. Anyways, hope that helps

Any security risks to be aware of with this? I get that it helps to keep things secure, but I always feel like there is some gotcha. Definitely seems more secure than opening ports on your router

@phizlip

6 ай бұрын

Its as secure as a wireguard tunnel

@TSSC

5 ай бұрын

My thoughts too. Risk vs convenience. What if someone gains physical access to an unlocked device?

Lets say I have Tailscale setup on my Apple TV at home as an exit node and Tailscale setup on my phone. When I'm out and about away from home on cellular it appears that Tailscale will route traffic through the Apple TV...great. When I come home and reconnect to WiFi that uses the home router as its exit node which exit node will be used...the one for my router or the on via Tailscale on the Apple TV as both will be connected??

@Tailscale

6 ай бұрын

Only one exit node can be active concurrently. But seeing as the Apple TV exits through your router via NAT (I assume) then you’re achieving the same result as being on the LAN without having an exit node turned on with extra steps :)

@ipopo

4 ай бұрын

@@Tailscale Your tool is really a godsend! One thing though - would it be possible for Tailscale to automatically disable the exit node when I'm on a trusted network or cell service while still being connected to my Tailscale network, and then automatically reenable the exit node on other networks (to tunnel my traffic back to my trusty network)? It'll really make things a lot more convenient!

@McAko

3 ай бұрын

@@ipopo I guess you mean to disable the VPN from the tunneled device, not the exit node which may have other devices connected to it and would drop the connection for the other connected devices, right?

Anyone know how to use the command tailscale up in shell for truenas scale? I tried many ways to get in, SSH won't let me through auth, and shell doesn't offer commands.

doesn't work on my android device if I have my private dns (adguard) enabled :/

For privacy, why would you want to use your own device as an exit node? Really don't like using SSO through companies that make a living off of tracking and monitoring you. Seems an odd choice for privacy. Can you explain some of this in more detail?

Phone to phobe?

But it does matter which one you use. Afaik you get up to three users for free, but if you log in with a Google account, you can't add extra users, can you? A little more clarity needed

Can I use this to access my home ISP IP address from anywhere? I assume I could but I am a noob to this stuff is there anyone who can help me with this? :)

@zubairnasir219

4 ай бұрын

I can access my home ISP IP address using 2x GLINET Slate ax 1800s using WIREGUARD server on one and Wireguard client on another with port frowarding from the isp router...however that keeps connecting and disconneccting randomly - I need something more reliable that won't cause disconnections

and it's FREE??? insane, thank you for the great video sir. looking to set up a linux ML rig in the house and ssh with the macbook, was wondering how hard it would be. Grab some $NVDA before I snatch a 4090 lolol

Has anyone had success using tailscale to remote play a PS4?

@Tailscale

4 ай бұрын

Are you telling me I need to buy a ps4 and test it out? Will my boss ever believe me when I say “this is work?!”

@freestyla101

4 ай бұрын

@@Tailscale haha I’m pretty sure it’s technically illegal to deny you the opportunity for such research. There are a LOT of people desperate to use remote play with their backbone or psportal that can’t work out port forwarding. In all seriousness I’m on the cusp of getting this working, but I’m not quite there yet. I’ve set up a subnet route and advertised the ps4’s internal IP. I just don’t know what IP details to use with the remote play app. I’m behind a CGNAT which complicates things for me. This is about to learn 😅

There's no option in the Android app to route through an exit node any more.

@francoisdang

6 ай бұрын

3 dots --> Use exit node

@turkeyphant

6 ай бұрын

​@@francoisdangyes as I said that does exist on the current version of the Android app. There's only the option to run an exit node. The Tailscale web admin correctly shows that an exit node is available, but you can't use it from the android app currently.

@francoisdang

6 ай бұрын

​​@@turkeyphantAre you running an exit node on your tailnet yet? For me there's a button alongside "Run exit node" saying "Use exit node"

@turkeyphant

6 ай бұрын

​@@francoisdangyes as I just said my tailnet correctly shows the exit node is running. That's why I'm posting this comment - the current version of the app is broken as it does not allow you to use an exit node even when one is set up.

@aussiegruber86

4 ай бұрын

I hope not, 70% of phones are android

All very good for the geek. I'm a newbie home user and this was hard to follow. Gave up at the command prompt as no instruction on how that was done. Reading the comments it appears Blink was used. Searched for that - no such app. But found Blink Shell - you probably mean that. But as I say, a LOT of assumed knowledge. If you want ppl to use your software it would be nice to slow down a little please. This looks excellent, but the presenter is pitching it at advanced users.

@Tailscale

5 ай бұрын

Thanks for the feedback! We'll take it onboard for the next one.

Man I am so confused... I got to the point that I have Tailscale running on my server, laptop, and phone. All 3 are displaying in the Machines page of the admin console and showing connected. But beyond that, I don't get how to set up a remote NAS. My NAS volume is set up on the server running Windows Server 2016. Since before Tailscale, I can access the NAS volume from all my devices when on network via both ethernet and Wi-Fi with any file browser, and on my Windows devices I have the NAS volume mapped as a network drive. But of course when I leave my network area, I can't access the drive over the internet. So that's why I am trying to use Tailscale but I don't have a web interface for my Windows Server 2016 NAS so I get lost on that part of this video :(

6 啊

átláthatatlan katyfasz az egész

This video started great for beginners but suddenly exploded to advanced users far too fast. Slow down, you totally lost the majority of folks watching after 2:45. There should be a series for beginners, intermediate and advanced.

@vicgati4078

3 ай бұрын

Exactly. Where did NextCloud come from? Did you ever resolve how to set it up? I'm lost!

It's too bad it's developed with go, so it's highly inefficient and insecure.

I highly dislike that one has to use one of the providers like Google to use as a login. I prefer my own User Name and Password. I don't trust the likes of Google and similar companies. Also, please stop using "use case". The word 'case' is not necessary. The word case is enough. So you should say, 'another use is....' Same applies to 'Price Point". The word Price is enough. The word point is not necessary. The word price is enough. Why are you all adding unnecessary words to the English language?

I am still struggling to understand the use cases of the exit-node. I get that accessing my banking info at the coffee shop is a great use-case for it but at the end of the video Alex says "In real time, on my phone appears my Desktop as an option to route traffic out from my phone through the encrypted wireguard tunnel and pretend that I am in my house, this is useful for accessing home automation and my self-hosted services". Is that not possible without using exit nodes? Why would I need an exit node for that?

@Tailscale

6 ай бұрын

An exit node routes all traffic out through client. Whereas simply being connected to the tailnet only routes the traffic to that client destined for that client. All the rest of your traffic would not go via that exit node.

@ToryBerra

6 ай бұрын

@@Tailscale Thanks for your reply. How does this benefit a home self-hosted service?

@qmanol

6 ай бұрын

@@ToryBerra Well, you can't install TailScale on, say, a cheap locally accessible IPcam. But you could access it via a tailscale device designated as an exit node, because the exit node will route your traffic to that internal IP. I guess my question would be how it handles IP conflicts if your home IP range matches the IP range of the network your remote device is on.