r/Tailscale

---
I'll start right out with an apology for the marketing headline, but it's not fluff - your tailnet domain is being directly passed along to the devices connected to your TS travel router. The updated blog post will tell you how to test it yourself, and more importantly how to fix it (hint - new toggle).

Sorry it's been a few months since v21 - business has left me little time for side-projects, and this v22 update just continued growing (and adding repeat test bench cycles) until I finally had to cut some features over to the v23 list. Here's a short list of what made it in:

• Plugin certification on GL firmware through 4.11.0
• Even *more* enhanced dual-layer kill switch that builds additional protections for router reboot persistence, block WAN subnet, guest/IoT coverage, more IPv6 coverage and two-layer protection while dropping or swapping between exit nodes with live devices on the tunnel
• new optional "Kill Switch Follows Exit node" function that enables users of the mode-button or app toggle to have the KS arm & disarm when switching from "VPN mode" to "overlay" mode.
• the above headliner of "Hide Tailscale Search Domain" to prevent your TS enabled router from broadcasting your tailnet via DHCP to your connected devices.
• Version Manager improvements
• a move towards op25 (and apk) support (more for v23)
• hardening, fixes, UI refinements, etc.
• a night of lost sleep redoing the blog's TS VPN setup guide with improved flow and updated screenshots for 4.8 - 4.11 firmware

So.. enough of me... linky's:

Full v22 changelog: https://remotetohome.io/blog/gl-tailscale-fix/#update-v1022

Direct link to the TS domain details: https://remotetohome.io/blog/gl-tailscale-fix/#hide-search-domain

And finally, for those not familiar with the history, the OG plugin post (old enough it's now locked from edits):
https://www.reddit.com/r/GlInet/comments/1rohrna/enhanced_tailscale_for_glinet_routers_proper_ts/

Edit: Forgot to mention the Mullvad exit node addon. This is the cherry on top of the sweet sundae, basically Mullvad provides Exit Node as a Service so you don’t have to use a local network device (usually Linux) as an exit node, and you get all of the benefits of Mullvad which is a zero trust VPN provider. You can pick the Mullvad exit node to use from 91 cities in 50 different countries. You can keep your existing DNS solution, in my case, the NextDNS DoH integration to keep DNS queries private. IMO Mullvad is the key component for privacy, def worth the money.

I’ve been a longtime AdGuard user, but I’ve discovered Tailscale and it is amazing. The learning curve is a bit steep, took me about six hours to get my config set up and my network tagged, but once you combine tailscale with NextDNS (which I used for a long time but left NextDNS for AdGuard when NextDNS got a bit stale with features), it’s so much more powerful than AdGuard since you can create your own private mesh network, which I used Cloudflare for. Cloudflare mesh does not integrate with AdGuard whatsoever so it was one or the other. With tailscale plus NextDNS, you get bot out of the box with minimal DNS config, and you get DoH. Absolutely incredible, I am in awe. Nice work Tailscale team!!!!