I installed Tailscale on my Linux server to access self-hosted applications. I'd assumed that I would need to use the Tailscale IP (100.90.201.*) which works great - but I was surprised to see I can also connect to my LAN IP (192.168.0.33) when I'm away from home and using Mobile Data.

I don't understand why that works. It's causing problems because I want to use the Tailscale IP as a secondary (lower bitrate in android Symfonium music app) connection when 192.168.0.33 isn't available, but for some reason the 192.168.0.33 is accessible when Tailscale is connected on my phone (and doesn't work when disabled)

My solution at the moment is to make a create a new 'machine' for every self hosted app (with docker). That works, but it's a bit of a hassle not being able to share the same Tailscale IP for the whole Debian Virtual Machine.

I was looking at the posted prices for TS and was heartened to see that on the free tier the number of users has gone up to 6 and the number of devices is unlimited.

But I see there is now a limit on the number of "Ephemeral" minutes per month.

I've been using the "Ephemeral" option rather casually on one of my projects. Not sure it actually solved the problem I wanted to solve. Sometimes if I close a docker project and restart it I'll get a device like "Project-1", because the original "Project" is still there. Then I have to manually delete both devices. So I was hoping that the ephemeral status would auto-clear closed projects.

In my mind, ephemeral should be cheaper than non-ephemeral, because your device objects don't hang around taking up resources. But obviously I'm not understanding something correctly (what else is new?).

So, questions

1) Why is "ephemeral" a premium resource?

2) Ephemeral resources are limited by *minutes*. But I don't know what that is minutes of. Is it minutes of being connected (which you could burn through in one day)? Or minutes of usage when connecting? Or minutes when the device/machine is created? Or something else?

Thanks!

Is there a way to install Tailscale on the Qhora 322? If not can someone recommend a good router that can accept tailscale? I don't need wifi in the event that opens me up to more options.

• Tailscale 1.96.4
• Android 13
• Moto g32
• Always on VPN enabled
• Individual app unrestricted battery usage enabled
• Global battery optimisations disabled
• App pausing disabled

Hi guys,

I'm having connections issues with the tailscale client on a moto g32 android 13 phone.

After a few hours the connection is silently dropped, the ui indicates it's still connected.

This is a common issue with long running android apps and I've tried the recommended fixes to no avail.

I also used Tasker to reconnect periodically but this broke the internet access on the phone.

I've looked at the phone logs through adb but I'm not sure what I'm looking for. Filtering for tailscale hasn't revealed anything.

Currently I'm resigned to it not working on those specific phones. Any suggestions are welcome.

Thanks for reading.

I have a University VPN. And instead of running the OpenVPN client on each machine, started running it on one and designated it an app connector for the internal domains. Seems to work well so far.

There's definitely other ways to set this up, but this was just so easy and convenient. I'm happy with it.

Have y'all got any other more personal uses for App Connectors? Most of the examples aren't things I'd use for a while.

Hello all,

I have a nas that I have been collecting media on, movies tv shows etc. and I have jellyfin set up on my smart tv that streams the media stored on my nas

Do i need to run tailscale on my smart tv or is running it on my nas enough? (Not exposing me to any potential bad things?)

thank you .

Im trynna connect the thing with my friend, but after sending them (singular) the link and them accepting it, nothing happend. They have an account already.

Hey guys,

Not sure if this is possible or not, but I want to prevent devices from being seen in the tray if they can't connect. I've already got ACL rules set up so that the device can't connect, but even though they can't you can still see the devices that can in that tray GUI. I want to remove those. Is that possible?

Thanks!

Anyone else been having trouble connecting to Tailscale. Com ?

Also when connected my internet had cut out ?

My ISP is CGNAT only and the only one that does 300 Mbps speeds as the rest are on copper lines.

Anyway, the biggest issue I had with CGNAT is the fact I couldn’t host games for my friends despite having the fastest internet and pc. None of this mattered because of strict NAT with no way to forward ports. Even the games that did let me host it’d be constant desyncs and it was getting annoying.

I did research into alternatives like renting servers and all the rest of it but some games were P2P only making that useless too.

Then I came across Tailscale. Absolute magic and now I can finally enjoy games with my friends again. No desyncs no nothing games are blazing fast too. I want to thank the developers of this amazing product and hope more people are made aware of the benefits.

Issue seemed to start after installing the May 2026 security update. Tailscale was stuck on "starting" after restart. Tried a full reinstall, including deleting the folders in appdata and programdata. Now, fresh install says needs authentication, but won't open the browser window when I click on Log In.

No responose in powershell to "tailscale up" - all very very odd.

Any advice appreciated!

Hey! I set-up vpn connections on my exit nodes so that I can still switch vpn servers while using my tailnet and this works great for me. The only issue I'm having now is that I cannot get split tunneling to work on the android app at all. Every time I try to go to the split tunneling menu, the app just crashes.

Is this a known bug or is the problem between the chair and the keyboard?

Using Tailscale 1.98.2 and Android 16 (CP1A.260505.005)

TS has the ability to funnel (host) your machine to the net. But the description is always very terse, making me worry that it's not ready for prime time.

If I have a Nextcloud instance running in a docker container, with a reasonably strong password, exposed to the internet via TS funnel, also in the container, is this a reasonably strong set up? Or is there some weakness in TS funnel that I should be worrying about?

Thanks!

Knowing that the Egyptian government is notorious in blocking VPN, I was wondering if anyone successfully tested if tailscale is working over there or no!

Hello! As mentioned, I have a FireCube and sideloaded the .apk from the stable-channel, because their native AppStore has no Tailscale entry available.

It did install with no issues, but upon launch I see about 5 seconds of the Tailscale-dotted-splash-screen before it just shits itself back to the home screen

Thanks for any help

I have 2 Pi4,
Running Ubuntu.
Whats the best way to set up a 2 node cluster for TailScale?

I’ve seen some tutorials,
But it seems like the keys could get mixed up, or, I’m not sure if I want to relay on just a google search

Like the title says:

Tailscale is installed on unraid (local) and on a vps. both act as an exit node but only unraid is set as a subnet router. nginx is running in a docker on unraid with fixed (separate to unraid) ip. on cloudflare i have a wildcard configured to *mydomain.ch which points to my nginx local ip address. this works as long as i:

- enable tailscale without exit node (use tailscale dns is active/ not active --> both work)

- enable tailscale with vps-exit node (use tailscale dns is active/ not active --> both work)

- enable tailscale with unraid-exit node (use tailscale dns is inactive!!)

it doesn't work when enabling unraid-exit node with tailscale dns active.

magicdns is disabled because it broke my network at some time (maybe user-error but idk)

no nameservers configured in tailscale admin dash

what is the upside of using tailscale dns/having it active?

how can i use the adguard instance to filter dns when on the go (connected smartphone to tailscale?)

thanks in advance for ur help..

Running a Tailscale app connector as a Docker service using the official `tailscale/tailscale:latest` image on Docker Swarm. The connector shows the **Connector** badge correctly in the admin console, but on startup it automatically advertises a subnet route for its own Tailscale IP (`100.124.158.81/32`) — not any actual subnet I want to expose.

That route shows up under "Awaiting Approval" in the admin console. When I click Review, enable the route, click Save, and the UI says "Updated" — but the route just stays in "Awaiting Approval" indefinitely. No matter how many times I try, it never actually gets approved.

**Environment:**

- Docker Swarm

- `tailscale/tailscale:latest`

- Running as an app connector

**What I've tried:**

- Reviewing and saving the route multiple times through the admin UI

- Confirmed the connector itself is healthy and shows the Connector badge

**Questions:**

1. Why is the connector advertising its own Tailscale IP as a subnet route at all? Is this expected behavior for an app connector?
2. Is there a known bug where subnet routes get stuck in "Awaiting Approval" even after approving in the UI?
3. Is there a way to suppress or remove this self-advertised route?

Any help appreciated — I also have a support ticket open (TSS-90294) but hoping the community has seen this before.

As the titles says I was able to use my Synology NAS as an exit node and it is working fine. Since I have a NordVPN subscription my idea was to use it as an exit node to grant VPN to all the other devices on my Tailnet. The network interface is working properly and when I use it as the exit node, the other devices have the vpn server IP. The problem is that outside from web browsing all the devices lose internet access in programs or apps like Steam, Microsoft Store, Apple Store, and others. When I disconnect the VPN and use the NAS without it, the devices have internet access but my ISP IP address. Any idea? Ty!

EDIT: for all the people with the same problem in my case it was a DNS resolver error. The devices using the NAS as the exit node where using the exit node DNS. You need to override specific DNS in Tailscale control panel with a toggle to switch. Now everything works fine without touching MTU

Long story short: now I can use Tailscale with my nordVPN subscription that applies to all the devices in my Tailnet using my NAS as the exit node.

I’m seeing some tutorials for setting up k3s and TailScale on a Pi,
How well does it work?
I’m getting confused on the parts that require the vpn line for TailScale that starts with the “- -“
Do I run that all at once? Then it appears? As in all “arguments” in one line after I setup the k3s tailnet, reusable key?

I fixed a weird Moonlight / Sunshine issue where Moonlight on iPad/iOS over cellular with Tailscale failed with “RTSP handshake failed error 60” and showed ports like TCP 48010, UDP 48000, and UDP 48010. Tailscale ping worked, Sunshine Web UI worked, the host was paired, and Moonlight worked perfectly on the same LAN, but over T-Mobile/eSIM cellular it always failed at RTSP.

Symptoms:

- Moonlight RTSP handshake failed error 60

- TCP 48010 / UDP 48000 / UDP 48010 mentioned in the error

- Sunshine Web UI works over Tailscale

- Tailscale ping works / direct connection works

- Same LAN works perfectly

- Windows Moonlight client works

- Only iPad/iOS on cellular fails

- T-Mobile/eSIM cellular path seems to trigger it

I fixed a weird Moonlight / Sunshine issue where Moonlight on iPad/iOS over cellular with Tailscale failed with “RTSP handshake failed error 60” and mentioned TCP 48010, UDP 48000, and UDP 48010.

Tailscale ping worked, Sunshine Web UI worked, the host was paired, and Moonlight worked perfectly on the same LAN. Windows Moonlight also worked. Only iPad/iOS over T-Mobile/eSIM cellular failed at RTSP.

Symptoms:

- Moonlight RTSP handshake failed error 60

- TCP 48010 / UDP 48000 / UDP 48010 mentioned in the error

- Sunshine Web UI works over Tailscale

- Tailscale ping works / direct connection works

- Same LAN works perfectly

- Windows Moonlight client works

- Only iPad/iOS on cellular fails

- T-Mobile/eSIM cellular path seems to trigger it

What did NOT fix it:

- Windows firewall was already allowing Sunshine

- Sunshine ports were listening

- Re-pairing alone did not fix it

- Direct Tailscale to the host via 100.x / MagicDNS still failed

- Adding the Sunshine PC’s own LAN IP as a /32 route from the same Windows host was not useful

What fixed it:

- Set up another always-on Linux machine on the home LAN as a Tailscale exit node

- Advertised only the Sunshine host route: 192.168.5.128/32

- Approved the route and exit node in Tailscale admin

- On iPad, manually selected that Linux machine as the Tailscale exit node

- In Moonlight, deleted the old host and added the Sunshine host by LAN IP: 192.168.5.128

After that, RTSP worked immediately.

My guess:

The cellular carrier path allowed Tailscale ping/Web UI, but broke Moonlight’s RTSP/UDP stream when connecting directly to the Sunshine host over Tailscale. Routing through a home LAN Tailscale exit node changed the path and made Moonlight see the host like a LAN machine.

Hopefully this helps anyone searching for:

Moonlight RTSP handshake failed error 60, Sunshine RTSP failed, Tailscale Moonlight iPad, iOS cellular Moonlight error 60, TCP 48010, UDP 48000, UDP 48010.

Alrighty,

I have 2 locations and 1 cell phone.

Location #1 - Home. Opnsense router with Tailscale setup, exit node setup, bunch of clients behind it. Opnsense setup for subnet use.

Location #2 - Office. Opnsense router, Tailscale setup, set to use Location #1 as exit node, bunch of clients behind it.

Cell - Android, setup to use Location 1 as exit node.

Was trying to remote desktop from a client at #2 to a client at #1 today, it wasn't working (99% sure I tested it and it worked in the past). Checked my public-facing IP and it doesnt seem to be using #1s exit node.

Grabbed my cell, turned on Tailscale, checked ip and it reports exit node IP and my pihole is blocking what I expect it to block to the phone.. so the exit node and location 1 DNS setup seems to be working.

Tailscales admin console on their site says both Opnsense routers are active and connected. #2 router, on the Tailscale tab, reports Tailscale is operating and exitnodestatus reports #1s Tailscale ip.

So, Exit node seems to work (cell is using it), clients behind Location 1 are working a-ok, but clients behind Location 2 arent accessing Location 1s router.

Any suggestions where to troubleshoot from here?

--- edit

Logged into shell on Location #2 Opnsense router and am able to ping clients in Location #1 .. so both routers are connected to tailscale, but the clients behind 2 arent accessing the subnets behind #1. I have confirmed in the Tailscale admin console that I am advertising my local subnet.