Yeah I think we’re talking about the same thing. Got any guidance on how you set that up?
Comment on Is this a bad idea? Mesh/VPN
DesolateMood@lemm.ee 1 week ago
If I’m understanding correctly, I think I’ve actually done something similar with tailscale. I run a VPN on my server and use it as a tailscale exit node (since it’s always running, I never have to worry about it turning off) and this allows me to connect to my server remotely while using a VPN, since Android also doesn’t allow simultaneously VPN connections
brownmustardminion@lemmy.ml 1 week ago
brian@programming.dev 1 week ago
tailscale also just has a button to buy/enable mullvad as an exit node. if you’re just looking for a commercial vpn for privacy it works well.
DesolateMood@lemm.ee 1 week ago
You need a VPN that can split tunnel by ip via CLI (although I think it’s also possible to set it up in an ovpn file, but I haven’t tried it). The only one I’ve found that can do this natively is proton, specifically the python community version.
I don’t know how this next part works if you use something that isn’t tailscale, but if you do then just set proton’s split tunneling for 100.64.0.0/10
Then, still on this machine, advertise the exit node from tailscale (you also have to allow it from your tailscale admin console). Connect to it from your phone, making sure to use the server as an exit node, and head over to ip.me to see if it’s working
BearOfaTime@lemm.ee 1 week ago
Interestingly (I just found this out) Android permits 1 VPN connection per user profile.
So I run a VPN in my regular profile, and found my work profile wasn’t using it. So I installed Tailscale there, and it works only in the work profile, while my regular VPN only works in my main profile.
If always assumed VPN config was a system-wide thing.
DesolateMood@lemm.ee 1 week ago
I remember figuring this out when I realized my vpn wasn’t connecting while I was inside of my secure folder, which acts like it’s own user profile