Skip to content

"exit-node" Support for Tailscale#1059

Open
believerd wants to merge 2 commits into
lxc:mainfrom
believerd:feature/tailscale-exit-node
Open

"exit-node" Support for Tailscale#1059
believerd wants to merge 2 commits into
lxc:mainfrom
believerd:feature/tailscale-exit-node

Conversation

@believerd

Copy link
Copy Markdown
Contributor

I've added support for advertising exit node and using exit node to the tailscale service.

However, when I tried testing on my machine, I was not able to see other machines that are advertising exit nodes from the Incus OS(shell access through debug application and run tailscale exit-node list). It might be a tailscale issue but I'm not sure. Please give it a try on your machine and see if using exit node works for you!

Add advertise-exit-node, exit-node, and
exit-node-allow-lan-access support for Tailscale.

Signed-off-by: Peter Du <dev@peterdu.net>
…documentation

Signed-off-by: Peter Du <dev@peterdu.net>

@gibmat gibmat left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks alright, but I'm not familiar enough with Tailscale to know if there's anything we need to be cautious about when running an exit node directly on IncusOS server (versus from within a VM or container running on IncusOS).

AdvertisedRoutes []string `json:"advertised_routes" yaml:"advertised_routes"`
AdvertiseExitNode bool `json:"advertise_exit_node" yaml:"advertise_exit_node"`
ExitNode string `json:"exit_node" yaml:"exit_node"`
ExitNodeAllowLanAccess bool `json:"exit_node_allow_lan_access" yaml:"exit_node_allow_lan_access"`

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The linter likes all columns nicely aligned with whitespace :)


* `exit_node`: Tailscale exit node (IP, base name, or auto:any) for internet traffic, or empty string to not use an exit node.

* `exit_node_allow_lan_access`: If `true`, allow direct access to the local network when routing traffic via an exit node.

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Extra space at the end of the line

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

2 participants