I set up Headscale and Tailscale using Docker on a VPS, which I want to use as my public IPv4 and Reverse Proxy to route incoming traffic to my local network and e. g. my home server. I also set up Tailscale using Docker on my home server and connected both to my Headscale server.
I am able to ping on Tailscale container from the other and vice versa and set up –advertise-routes=192.168.178.0/24 on my home server as well as –accept-routes on my VPS, but I can’t ping local IP addresses from my VPS. What am I missing?
Both container are connected to the host network, I have opened UDP ports 41641 and 3478 on my VPS.

  • Shadow@lemmy.ca
    link
    fedilink
    English
    arrow-up
    2
    ·
    8 months ago

    How do I do this?

    Run ip route show table all

    I would expect to see a line like:

    192.168.178.0/24 dev tailscale0 table 52
    

    Out of curiosity on a remote node do tcpdump -i tailscale0 -n icmp and then do a ping from the other side, does tcpdump see the icmp packets come in?

    • Dataprolet@lemmy.dbzer0.comOP
      link
      fedilink
      English
      arrow-up
      1
      ·
      8 months ago

      There is no tailscale0, but also not on my home server which also runs Tailscale and which I can access remotely using my Android. Could my existing Wireguard setup interfere with Tailscale?

      • Shadow@lemmy.ca
        link
        fedilink
        English
        arrow-up
        2
        ·
        edit-2
        8 months ago

        The tailscale client should have created an interface, but I’ve never used it on a box also running wg. You don’t have a tailscale specific interface in ip addr show at all? That’s… odd.

        Do you have a device at /dev/net/tun?

        • Dataprolet@lemmy.dbzer0.comOP
          link
          fedilink
          English
          arrow-up
          1
          ·
          8 months ago

          I’m not sure the Docker container is even using a tailscale interface, because there is none on my VPS or my home server.

          And how do I see whether I have a device at /dev/net/tun?