r/Tailscale

Hi,

I'll be moving across the world in a week and I think my Tailscale just broke :(

hoping you guys can help me solve this issue.

(Pretty sure this is a Tailscale issue but please correct if I'm wrong)

So I was running a Moonlight + Sunshine + Tailscale Streaming Setup pretty regularly last year but didn't really touch it in the last 6 months. Now I will be moving across world in a week leaving my PC behind but thinking that I can just stream it to my laptop wherever I'm at. Well... it seems my setup just broke somehow.

Streaming with Moonlight and Sunshine still works like a charm as long as I am on the same wifi. However, as soon as I switch wifis and try to connect via Tailscale the moonlight client is 'Unable to connect to the specified PC.' regardless of whether I'm using the Tailscale ip, ts dot net hostname or whatever else. I can directly ping both devices via Tailscale without any issue and also see both of them on tailscale status and admin console.

What I thought was weird was that doing

>Test-NetConnection <PC-Tailscale-IP> -Port 47989

always worked on the PC itself (routing traffic on the Sunshine port through Tailscale). However, doing

>Test-NetConnection <PC-Tailscale-IP> -Port 47989

never worked on the laptop but maybe thats not where the problem is.

Stuff I tried:

• I tested the ports and also tried it with a disabled firewall and any other idea the AI had the last 2 days but nothing worked.
• I didn't set up any ACLs or anything that goes beyond the basic necessary Tailscale configurations as per the Moonlight-Tailscale setup docs.
• I have completely removed and reconnected both devices to Tailscale as well as freshly reinstalled the Tailscale app.)
• Also I got a pretty new x64 Windows PC and a Qualcomm Snapdragon X Elite Arm64 Asus Laptop if that matters.

Perhaps I'm just blundering but I'm really out of ideas on what to try next and just hoping someone here might have an idea on what I could do so that I don't have to abandon my beloved computer

I'm no expert and still pretty new to this so any help is much appreciated! :)

I've been using Wireguard on iOS to access my homelab when remote and it has a nice "On-Demand" feature so it turns off on local WiFi. Tailscale has the same thing.

I just moved to Android and neither app has this feature. What do Android users do?
I could leave it connected but I think that would route my phone traffic over the wireguard or tailscale server instead of just the local network.

I'm going through "the wired nomad" tailscale setup and have opted to use the route using a glinet router: https://thewirednomad.com/tailscale

For my purposes, I am connecting my personal laptop to the Internet using a mobile hot-spot

I am then connecting to tailscale from my personal laptop which then connects to the glinet router at home as an exit node

Because it is a personal computer I am able to connect to tailscale directly from my personal computer

In such a case it seems that I can omit the travel router completely without any issue. Would I be correct in completely skipping that step?

Hello, I'm really new here

I have Tailscale set up between my remote machine (Device A) and my office machine (Device B).

Device B is physically in the office, has direct access to our local server/NAS, and is currently configured as a Tailscale exit node and Allow Local Network Access

Is there a way to route traffic through Device B so that Device A can access the office server directly?

All of it are MacOs Devices

Thanks

I was beginning to really like the new UI in the admin console, only to wake up today and realize it's been moved back to the top.

Why? The new design was better IMO

Hi all! I am setting up my first homelab, where I installed Headscale. I have some machines (like a WD NAS, a printer...) where I cannot install the Tailscale client. Can I still connect these machines to the Tailnet? Thanks!

Very specific question about how tailscale exit nodes work and how to maintain local LAN access. I'd like my nvidia shield TV box to be connected to my friend's tailscale network, using one of his nodes as an exit node - all the time. For reasons. He is two states over from me in California.

But I also have a local NAS server on my local network that I use for playing media on my nvidia shield. I'd like to maintain access to my local NAS as well as my friend's tailscale's exit node.

Is that possible? When I go to 192.168.1.104, for example, does my local nvidia shield go to my local network or his? Or does it use his exit node when I want to access something on the internet?

Note, I'm not using his subnet router. He has no subnet router setup.

on 1.102.1 it's fine

Hi all, has anyone else in Australia been having an issue with tailscale not connecting over cellular since the Telstra outage? I keep getting an error referencing cisco network equipment blocking my connection and an array of unable to connect to relay. Was rock solid before that, and it still connects fine over terrestrial WiFi networks.

I've recently updated tailscale on all my machines because of a new security update warning, current version on bazzite 44 is 1.98.8 and latest version is 1.102.2

`This machine is running a version with a known security vulnerability. It’s recommended to update to 1.102.2.`

If I do `sudo tailscale update` in bazzite, I get the following error

`ERROR: Fedora Atomic images utilize rpm-ostree instead (and is discouraged to use).`

and `ujust-update` does nothing (my system is up to date)

I succesfully done this on my fedora-kinoite laptop, here I have the tailscale package layered in rpm-ostree, and I have to add the tailscale repo

`sudo curl -fsSL` [`https://pkgs.tailscale.com/stable/fedora/tailscale.repo\`\](https://pkgs.tailscale.com/stable/fedora/tailscale.repo) `| sudo tee /etc/yum.repos.d/tailscale.repo`

then execute `rpm-ostree upgrade`, and it worked.

But this method doesn't works on Bazzite, not even after adding the tailscale repo. I don't see the package layered neither. So here my 2 questions:

It's safe to install the layered package on top of the pre-installed package? Do I have to wait until Bazzite 45 to get the latest version of tailscale?

Hi everyone,

I've spent days trying to figure out why my devices never establish a direct connection to each other — only relay via DERP(dfw) — and the most noticeable impact is that watching 4K movies from my self-hosted Jellyfin over Tailscale constantly buffers/stutters (the relay's throughput can't keep up).

Context:
- Ubuntu Server homelab, several devices on the tailnet (Android TV, iPhone, iPad, Windows PC).
- I tested with TWO different network setups: first behind a cheap consumer router, then connected directly to the ISP's modem (Telmex/Mexico). In BOTH cases, the result is identical.

tailscale netcheck in both cases:
- UDP: true
- MappingVariesByDestIP: true (consistent across both routers)
- PortMapping: UPnP (working, confirmed UPnP is active and responding)
- Nearest DERP: Dallas, ~46-62ms

tailscale ping to two different peers (Android TV and iPhone), 10/10 attempts each:
- 100% via DERP(dfw)
- Latencies of 73-171ms
- "direct connection not established" in both cases

Already ruled out: active exit node (none selected), DNS (MagicDNS working fine, no overrides), bandwidth (86Mbps down / 64Mbps up, nothing saturated), AP isolation on the router (disabled), and a saturated UPnP table on the previous router (no longer applies after switching routers).

My current hypothesis is ISP-side CGNAT, since MappingVariesByDestIP stays true regardless of the router, which per your docs is the typical signature of symmetric NAT imposed upstream of my local network.

Questions:

1. Has anyone with Telmex/similar ISPs in Mexico confirmed CGNAT and found a solution other than a Peer Relay?
2. Is it worth setting up a Peer Relay on my VPS (I have one with a public IP) for this, or is there another way to force/improve NAT negotiation?
3. For 4K streaming specifically over DERP, is there any way to prioritize throughput over latency, or is a Peer Relay literally the only way to improve this?

Thanks in advance.

So I set up a tailnet and had one user on Windows join it. They later fiddled with their client and figuered how to switch from their tailnet to mine. This made their machine show up on my dashboard and I could allow or deny approval to that machine. Now I had another user on Linux try to this exact thing, but me and them could not figure how to switch tailnets on CLI. There were no option o KTailctl to switch tailnets, and no command apparent to me to do so.

Hi all,

Is there an easy way to see the connection type of an Exit Node without running the terminal command?

I have an Exit Node that periodically drops from direct to relay despite having port forwarding set up and it would be helpful to be able to see this change in advance of finding out when connecting. There is nothing obvious in the machines page on the web console.

Thanks in advance.

Hey all,

Recently, I've been using cellular data while away from home, and I started noticing severe battery draining even when not using my phone at all.

During one of these periods, where 50 % of the battery had been drained in a matter of a couple of hours, I checked and saw that the Tailscale app was the main culprit, which had used a whopping 75 % of the charge up until that point.

I have Tailscale DNS enabled, no apps using split tunneling and subnet routing enabled. Can any of these explain the battery usage I'm seeing?

Once I noticed this with cellular data, I also saw it happening (although it wasn't as bad) when using Wi-Fi. This has forced me to keep Tailscale disabled most of the time, then manually enabling it when I need it, which is of course far from ideal.

Is this expected? Has anyone else noticed something like this? I'm kind of at a loss right now.

i've been trying to fix this for ages and i keep having issues. I have a small server which I've spent time customizing, and i built another for redundancy. I cloned the hdd of the first into another nvme that is in the 2nd server. Both are running Windows 11, i log into tailscale using my microsoft account. When 1 of the machine start up and runs tailscale - everything is fine - when the other starts up tailscale - i get "duplicate node key".

at this point i've gone through the following steps

1. remove machine from admin console
2. stop tailscale service
3. delete contents of c:\users\<username>\local\tailscale
4. uninstall tailscale
5. reboot
6. install tailscale
7. log into tailscale

i've done this on both servers, and they keep getting into duplicate node key state.

I have no idea what is going on - i even searched for every instance of tailscale in registry and removed them, and it still does this. I even fully logged out of my microsoft account on the browser and this still happens.

Any idea how to fix this? it's driving me batty.

update:

weird thing - both machines HAVE different node keys and different machine names - yet when one logs on, the other stomps on the other (and logs out the other), they also have different IDs... its been so hard to debug, as once one of the machines stomp on the other, you can't access the node keys anymore (as you expect 2 server entries, but effectively on the console, there is only 1)