Essentially, I want to be able to use a vpn at the same time as tailscale when I am on my phone and away from home or connected to a hotel wifi etc. Android doesn’t allow this but I read about tailscale exit nodes so I have set this up and it works. The issue is that I would prefer to not use my server location as the exit so I want to push traffic into gluetun (which I already have set up with other stuff running in it).
Comment on Need some help with networking - tailscale, gluetun etc
sorter_plainview@lemmy.today 1 day ago
I don’t understand what is the use of gluetun here. Are you trying to, say all the traffic from a laptop,to be routed through your server in your home, while you are away? If yes, can you elaborate why this is needed? Else can you give a better explanation on the setup you are trying to achieve and the results you want?
Unquote0270@programming.dev 1 day ago
stratself@lemdro.id 1 day ago
Two separate functions should go into two separate nodes
- Run Tailscale binary on host. Connect to Jellyfin server using that node’s IP address.
and
- Run Gluetun + another Tailscale instance in containers. Don’t use host networking, use bridge or something else. Connect to that node as an exit node
As an alternative to Gluetun + Tailscale I propose tswg (my project)
chaospatterns@lemmy.world 1 day ago
How do you expect the packets to actually route? If you run Tailscale and your VPN on your phone, they might fight with each other for control of the routing table.
If you’re trying to use Tailscale exit note to then route through Tailscale to one node running gluetun to Mullvad. That’s going to be complex because against they both want to mess with the routing table.
Tailscale natively supports Mullvad: tailscale.com/mullvad
Unquote0270@programming.dev 1 day ago
Yes, the mullvad integration is essentially what I am trying to achieve because I cannot run both vpn and tailscale as they conflict. Unfortunately I need mullvad on other devices and have spare device slots I can use so it makes no sense to pay another $5 on top.
I was hoping that requests to the jellyfin port would get returned back through tailscale directly and anything else goes on to gluetun. The subnet option sounds like this would be the solution but I could be misunderstanding many things here.
chaospatterns@lemmy.world 1 day ago
Gluetun doesn’t make any sense here. You’re forcing all the traffic for from Jellyfin to go through Mullvad, but you need to be able to connect to Jellyfin because Jellyfin is a service you connect to.
Since your Tailscale is host network mounted, you’ll be able to expose your Docker network subnets over Tailscale then access Jellyfin.
You probably intend to gluetun your downloading software, not Jellyfin.
Unquote0270@programming.dev 1 day ago
Is jellyfin going through mullvad? Jellyfin and tailscale are using host. This is part of a larger docker compose where I do have things running through gluetun.
Thanks that sounds like what I’m after. So this means that I could access jellyfin on the 172.x.x.x address but anything else goes to the exit node (and then the vpn)?
chaospatterns@lemmy.world 1 day ago
Okay it was a little hard to read since your post was missing formatting. TS_SUBNETS is what controls what CIDRs are announced through Tailscale. Since you’re not using Docker networking for Jellyfin, it would be whatever subnet the host is on. Maybe it’s 192.168.x.y
Unquote0270@programming.dev 1 day ago
Interesting, I will definitely give that a try, thank you.