Comment on Is there a solution to use tailscale (or pangolin) alongside a traditional VPN on grapheneos?

DenimFootpath@lemmy.dbzer0.com ⁨3⁩ ⁨weeks⁩ ago

• i_am_not_a_robot@discuss.tchncs.de ⁨3⁩ ⁨weeks⁩ ago

  This is sadly the only way to do it on Android. It’s not supported by Headscale and it only supports Mullvad.

  original

  • DenimFootpath@lemmy.dbzer0.com ⁨3⁩ ⁨weeks⁩ ago

    It’s a shame you can’t force an exit node to be used by the whole tailnet

    original

    • i_am_not_a_robot@discuss.tchncs.de ⁨2⁩ ⁨weeks⁩ ago

      You can use exit nodes, but at least in my case that would be really stupid of me to do. If you have a router connected to a VPN and you use that router as an exit node, all of your traffic is going from your mobile device to the VPN server to your router back to the VPN server to the destination host and any return traffic takes the same route in reverse, adding additional latency and limiting your bandwidth to the minimum of any link in either direction along the entire chain. You can potentially exclude the mobile to router Tailscale traffic from the VPN tunnel to skip a little bit of latency, but it probably doesn’t help much unless your VPN server is in a third location that is not along the path between your current location and your router. My slow upload speed would become a slow download speed, and when I travel long distances my latency to services at my destination would become half a second.

      What I do is I have a travel router that I deploy where I’m staying, and that router has a site-to-site VPN with my home network. That way traffic doesn’t need to travel across continents to reach a server only 20ms away.

      I also have a set of services that are exposed directly to the internet and I can reach those servers without Tailscale. I can live with being connected to a different VPN and not having the Tailscale-only services.

      It may be possible to just use Wireguard. The main benefit of Tailscale instead of Wireguard is that two Tailscale nodes that are next to each other can connect directly without going through another server, and this is accomplished by continuously reconfiguring Wireguard. If you just want a private network VPN where you have a fixed route to your private network and a fixed route to a public internet VPN, you can do that without Tailscale. If you are traveling with a phone and a laptop, connections from the phone’s VPN IP to the laptop’s VPN IP will be slower as they route through your VPN server, but they will work.

      original
    • DarkSirrush@piefed.ca ⁨3⁩ ⁨weeks⁩ ago

      Headscale does support exit nodes, I use it to get pihole filtering on my phone away from home.

      original