Comment on Wireguard easy and third party von service.
dan@upvote.au 2 months agoiptables is deprecated… If you really do want to do your own custom thing you should learn nftables.
Comment on Wireguard easy and third party von service.
dan@upvote.au 2 months agoiptables is deprecated… If you really do want to do your own custom thing you should learn nftables.
LetchLemon@lemmy.blahaj.zone 2 months ago
Thats probably where im having the issue then thanks for the heads up.
dan@upvote.au 2 months ago
iptables should still work, but these days it gets converted to nftables so you may as well just learn nftables.
Having said that, I find it a pain to manually configure iptables or nftables. There might be a better way to do what you want.
LetchLemon@lemmy.blahaj.zone 2 months ago
Ahh good so im not just me its actually a bit of a headache. The more i talk to folk the more i feel headscales orobably going to be the way. And rely on folk smarter than i to implement the nftables. Atm im kinda doing a hamfisted approach as the two programs i am using 1 uses nftables and thebother iptables so im already making it hard for myself. Thanks so much this is the kind of clarity i was seeking.
Jason2357@lemmy.ca 2 months ago
I run head scale on a Vps and it has been 100% reliable and provides an exit node for me via that VPS. But you are going to have the exact same issue, I think with your VPN.
You want your default route from the exit node to go over mullivard’s interface, but you need wireguard or tailscale to talk to the other clients directly, via their clearnet IP. You can tell the exit nodes tailscale/wireguard client to bind the clearnet interface, but that may or may not help. Mullivard probably takes the default gateway, which will likely cut off the clients. You could set dedicated routes to the IP addresses of the clients, but they can change if those clients are mobile. You will need to maintain a routing table somehow or keep the pre-existing connection active (fragile).
I am sure its well trodden ground, just be aware that head scale probably won’t solve your problem automatically. Its a routing and or firewall config issue.