First: I’ve tried Tailscale, for some reason it works awful for me so I’m avoiding that option if possible.
I am trying to have a single server that has a VPN port exposed to connect to it, but routes traffic through a comercial VPN (mullvad ideally) to privately share my linux ISOs. So far I haven’t been able to achieve this, it sees I can’t use the VPN server (wg-easy) + VPN (mullvad gui), only the one that start first work.
Has anybody achieve something like this?
Two cases.
One to have my server connect to the internet without exposing my traffic.
The second is to not have to chose between be connected to my server or be connected behind a VPN.
Honestly, if if wasn’t because tailscale is performing badly for the last few months, I wouldn’t have problems using and even paying for it.
Tailscale can actually use a Mullvad exit point. I don’t know if you knew that …
Yes, but it’s working awful for me. Even without exit point lose connection for a long time, and there’s a error on the app. I need to restart the connection for it to work again.
Even when it works it’s much slower to connect to my server than VPN.
I wonder why.
Wireguard / TS runs faster than VPN’s, and even my family member has had a couple of devices on my Tailnet down at their place for a couple of years now, and they haven’t a clue how it works and fully believe I’m a magician.
Any background on your connection/location/devices etc?
Location is Europe, when I lose connection it mentions the TS server and it’s in my country.
Devices mainly my server (mini PC at home, public IP, no NAT) and phone.
When trying to use subsonic of jellyfin from outside the network there’s a noticeable delay between opening the apps and actually connecting. When using WG directly it’s like being at home on the same LAN.
Main issue is that every now and then phone losses all internet connectivity, and TS shows an error connecting to it’s server.
Yeah, UK here and a couple of times I get errors about not being able to connect to the relay server in London + Amsterdam also with a public IP address from my ISP, but seem to have no issues even when it shows them unable to connect to the relay servers. The external Tailnet down at fam members house is FTTP but CG-NAT’ed, and why I love how TS works around it. Somehow.
But I have to ask. Have you setup the Tailnet with this fix for IP Forwarding on a subnet router (this helps me so much for tech support on said Tailnet…) and also UDP
https://tailscale.com/blog/quic-udp-throughput
I’m currently on my phone but I recall having to ensure the Mini PC w/Ubuntu / Pi4 with Raspbian down at their house had both the above when bringing Tailscale,
up
.