Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: TailGuard – Bridge your WireGuard router into Tailscale via a container

github.com

Post reply on HN
Print view View original

21–30 of 40 posts

Re: Show HN: TailGuard – Bridge your WireGuard router into Tailscale via a container

#21

Post by vladvasiliu »

EnigmaCurry wrote: post #20
vladvasiliu wrote: post #19

> It also doesn't play nicely together with other VPNs, meaning I ended up connecting and disconnecting VPNs whenever I wanted to use them. This is especially evident on my phone, which only allows one VPN app at a time. What do you mean? I've had great luck using specific routes over wireguard with the official app on my phone. It works great with "on-demand" wg, and only routing my home subnet over it. Now, some "b…

This is at least a limitation in Android itself: https://developer.android.com/reference/android/net/VpnServi... "There can be only one VPN connection running at the same time. The existing interface is deactivated when a new one is created." Note this is not about routing some traffic to the VPN and other traffic to the clear net. This is about running two VPN connections simultaneously.

Fair enough. I haven't used an Android device since 2017... Do people have these issues on iOS too?

On Linux, I have no problem running either bare wireguard or tailscale alongside Forticlient. On Windows and macOS it's a bit more janky, specifically the DNS resolution, but I don't daily drive these platforms so I may be missing some kind of knowledge to fix this.

Re: Show HN: TailGuard – Bridge your WireGuard router into Tailscale via a container

#22

Post by EnigmaCurry »

vladvasiliu wrote: post #21
EnigmaCurry wrote: post #20

Earlier quoted context omitted.

This is at least a limitation in Android itself: https://developer.android.com/reference/android/net/VpnServi... "There can be only one VPN connection running at the same time. The existing interface is deactivated when a new one is created." Note this is not about routing some traffic to the VPN and other traffic to the clear net. This is about running two VPN connections simultaneously.

Fair enough. I haven't used an Android device since 2017... Do people have these issues on iOS too? On Linux, I have no problem running either bare wireguard or tailscale alongside Forticlient. On Windows and macOS it's a bit more janky, specifically the DNS resolution, but I don't daily drive these platforms so I may be missing some kind of knowledge to fix this.

Yea on Linux I can run 10 different VPNs (or 10 wg peers) no problem, this limitation of Android is super annoying to me. I think OPs solution is quite a good one for Android users.

Re: Show HN: TailGuard – Bridge your WireGuard router into Tailscale via a container

#23

Post by syntaxing »

Neat idea but getting a 5G GL inet router would probably be more robust. Built in tailscale and wireguard so you don’t have to worry about this. Best thing about GL inet routers are the IMEI cloning. It’s pretty popular for wireless ISP like T-Mobile and Verizon 5G home internet.

Re: Show HN: TailGuard – Bridge your WireGuard router into Tailscale via a container

#25

Post by juhovh »

EnigmaCurry wrote: post #22
vladvasiliu wrote: post #21

Earlier quoted context omitted.

Fair enough. I haven't used an Android device since 2017... Do people have these issues on iOS too? On Linux, I have no problem running either bare wireguard or tailscale alongside Forticlient. On Windows and macOS it's a bit more janky, specifically the DNS resolution, but I don't daily drive these platforms so I may be missing some kind of knowledge to fix this.

Yea on Linux I can run 10 different VPNs (or 10 wg peers) no problem, this limitation of Android is super annoying to me. I think OPs solution is quite a good one for Android users.

Yeah you're exactly on point here, and this limitation exists on both iOS and Android alike. I got very frustrated with switching between VPNs and connections breaking every time I did that.

Re: Show HN: TailGuard – Bridge your WireGuard router into Tailscale via a container

#26

Post by juhovh »

syntaxing wrote: post #23

Neat idea but getting a 5G GL inet router would probably be more robust. Built in tailscale and wireguard so you don’t have to worry about this. Best thing about GL inet routers are the IMEI cloning. It’s pretty popular for wireless ISP like T-Mobile and Verizon 5G home internet.

While I have no experience of their 5G routers specifically, based on my experiences with other GL.iNet routers and the TG-Link I have, I don't disagree. The Deco they have has the benefit of easy mesh wifi setup with fast roaming, but the easier access and configurability of GL.iNet are generally nice, and they're fairly affordable.

Re: Show HN: TailGuard – Bridge your WireGuard router into Tailscale via a container

#28

Post by syntaxing »

juhovh wrote: post #26
syntaxing wrote: post #23

Neat idea but getting a 5G GL inet router would probably be more robust. Built in tailscale and wireguard so you don’t have to worry about this. Best thing about GL inet routers are the IMEI cloning. It’s pretty popular for wireless ISP like T-Mobile and Verizon 5G home internet.

While I have no experience of their 5G routers specifically, based on my experiences with other GL.iNet routers and the TG-Link I have, I don't disagree. The Deco they have has the benefit of easy mesh wifi setup with fast roaming, but the easier access and configurability of GL.iNet are generally nice, and they're fairly affordable.

Since you have tailscale, and assuming your parents don’t do anything fancy, you can always double NAT. It especially doesn’t matter since you’re on CGNAT. Use the gl inet router as the primary and attach a mesh router behind it. You’ll be able to configure the secondary router through the primary.

Re: Show HN: TailGuard – Bridge your WireGuard router into Tailscale via a container

#29

Post by Terretta »

You can run a Tailscale node providing LAN access on Apple TV. Just grab Tailscale's Apple TV app. Performance is higher than you'd expect, saturates a gigabit link.

This is the perfect "get to parent's network" appliance. Pairs nicely with Eero+, which one might pick for remote network mgmt for reasons such as ad/threat blocking, aside from the cloud management with co-mgmt delegation built in.

It can also serve as an exit node. This makes it a lovely "use the Internet from my usual location" appliance, for all kinds of reasons.

Setup and use is ultra simple.

Re: Show HN: TailGuard – Bridge your WireGuard router into Tailscale via a container

#30

Post by RationPhantoms »

Terretta wrote: post #29

You can run a Tailscale node providing LAN access on Apple TV. Just grab Tailscale's Apple TV app. Performance is higher than you'd expect, saturates a gigabit link. This is the perfect "get to parent's network" appliance. Pairs nicely with Eero+, which one might pick for remote network mgmt for reasons such as ad/threat blocking, aside from the cloud management with co-mgmt delegation built in. It can also serve as…

It's a great way to get around those pesky "Are you actually at your home" nagware that Disney+ and other apps employ as well.
Post reply on HN