Tailscale

 

 

Tailscale is a VPN service that makes the devices and applications you own accessible anywhere in the world, securely and effortlessly. The service handles complex network configuration on your behalf so that you don't have to. Network connections between devices pierce through firewalls and routers as if they weren't there, allowing for direct connections without the need to manually configure port forwarding.

Configuration

A description of the available settings is available in the Help tab within the plugin settings. Tailscale CLI commands can also be run via the WebGUI terminal or SSH.

Supported Unraid Versions

The Unraid plugin is currently maintained for Unraid 6.12.0 and newer.

The plugin can be manually installed on older versions of Unraid:

• 6.9.2 - 6.11.4: https://raw.githubusercontent.com/unraid/unraid-tailscale/2024.07.31/plugin/tailscale.plg
• 6.11.5: https://raw.githubusercontent.com/unraid/unraid-tailscale/2025.03.05/plugin/tailscale.plg
• 6.12.x: https://raw.githubusercontent.com/unraid/unraid-tailscale/2025.04.17/plugin/tailscale.plg

 

Changelog

https://github.com/unraid/unraid-tailscale/releases

Contributing

Issue reports and pull requests are welcome on Github: https://github.com/unraid/unraid-tailscale

 

Translations are maintained at https://crowdin.com/project/unraid-tailscale

Edited May 13, 20251 yr by EDACerton
Update

This topic is not for support of the Tailscale docker integration. Please make a post in the appropriate OS support forum for issues related to the docker integration.

Common Issues

• I can't access the WebGUI after logging in to Tailscale

  • This is usually caused by enabling the "Use Tailscale Subnets" feature. This feature isn't needed for most installs.

  • Usually, if this happens the WebGUI is still accessible via the Tailscale IP/name. Try connecting via that address, then disable "Use Tailscale Subnets".

  • If you don't know the Tailscale IP for your server, you can get it from another computer with Tailscale installed, or from the Tailscale admin console

• I can't access SMB shares over Tailscale

  • Go to Settings -> Network Services -> SMB and set "Enable NetBIOS" to "No".

Requesting Support

When requesting support, please include a Tailscale diagnostics package with your request:

 

https://edac.dev/unraid/plugin-diagnostics/usage/

 

This will help me resolve your problem.

Edited April 8, 20251 yr by EDACerton
Update diagnostics instructions

This is great, good work.

One question is how does it handle the frequent updates from Tailscale?  Will it be via updates published for the plugin?

Yes -- fortunately, that's simple, and documented on the repository, so someone could easily fork it if someday that became necessary (not that I plan on that, but I plan for it).

i use this cmd personaly, i hope this will help someone  

 

with this cmd before still in unraid terminal

 

echo 'net.ipv4.ip_forward = 1' | sudo tee -a /etc/sysctl.d/99-tailscale.conf
echo 'net.ipv6.conf.all.forwarding = 1' | sudo tee -a /etc/sysctl.d/99-tailscale.conf
sudo sysctl -p /etc/sysctl.d/99-tailscale.conf

 

 

tailscale up --advertise-exit-node --accept-routes --advertise-routes=192.168.1.0/24

Edited March 26, 20233 yr by ptichalouf

just for your info.... tailscales magic dns might break your docker containers.

/etc/resolv.conf gets copied to all freshly started contaieners from the host, which points to a dns not existing inside the container...

disabling magic dns resolved this issue.

2 hours ago, ptichalouf said:

i use this cmd personaly, i hope this will help someone  

 

with this cmd before still in unraid terminal

 

echo 'net.ipv4.ip_forward = 1' | sudo tee -a /etc/sysctl.d/99-tailscale.conf
echo 'net.ipv6.conf.all.forwarding = 1' | sudo tee -a /etc/sysctl.d/99-tailscale.conf
sudo sysctl -p /etc/sysctl.d/99-tailscale.conf

 

 

tailscale up --advertise-exit-node --accept-routes --advertise-routes=192.168.1.0/24

 

For everyone else’s benefit — as a general rule, if you aren’t already familiar with the extra flags here (and know you need them), just run tailscale up.
 

FYI -- the first three commands won't survive reboot -- Unraid doesn't act like a traditional linux system, any changes that are made to /etc are lost when the system is rebooted.

 

Fortunately, in this case the impact would be fairly small -- Unraid already sets IPv4 forwarding, so the only thing that you should lose would be IPv6 via the exit node. If you want for that to persist, you would need to modify sysctl on boot using a technique such as https://forums.unraid.net/topic/61544-how-to-modify-etcsysctlconf-on-boot/. This is something that I might look as adding as an option in an update to the plugin.

 

 

Edited March 26, 20233 yr by EDACerton

9 minutes ago, ADvorsky said:

just for your info.... tailscales magic dns might break your docker containers.

/etc/resolv.conf gets copied to all freshly started contaieners from the host, which points to a dns not existing inside the container...

disabling magic dns resolved this issue.

This can be the case for Docker containers that are connected to the default "bridge" network, but that is expected behavior from Docker.

 

If you want for Docker containers to have internal DNS resolution (i.e., being able to resolve the other containers by name), you need to create a user-defined bridge (reference: Docker documentation). Docker containers connected to a user-defined bridge get an internal DNS server.

Fantastic plugin, thank you for working on it! Exit node as a setting to persist across reboots would be fantastic.

13 minutes ago, gustyScanner said:

Fantastic plugin, thank you for working on it! Exit node as a setting to persist across reboots would be fantastic.

Just for clarity -- exit node will persist across reboots, the only thing that doesn't is enabling IPv6 forwarding.

I installed this plugin then ran 

 

tailscale up --advertise-exit-node --accept-routes --advertise-routes=192.168.1.0/24

 

Now, my system is unresponsive and I had to do a hard reboot and it's not coming back

 

I need to go hookup a keyboard and display to try and recover. Any ideas where to start?  

FYI, https://tailscale.com/cli just returns a 404 message for me

1 minute ago, mattgob86 said:

FYI, https://tailscale.com/cli just returns a 404 message for me

Sorry about that, the forum helpfully put the period at the end of my sentence on the link. It's fixed

9 minutes ago, mattgob86 said:

FYI, https://tailscale.com/cli just returns a 404 message for me

The link as a . at the end it should be https://tailscale.com/cli

17 minutes ago, Nexus said:

I installed this plugin then ran 

 

tailscale up --advertise-exit-node --accept-routes --advertise-routes=192.168.1.0/24

 

Now, my system is unresponsive and I had to do a hard reboot and it's not coming back

 

I need to go hookup a keyboard and display to try and recover. Any ideas where to start?  

Something about this command probably didn't mesh nicely with your network... it's enabling several extra features that affect how traffic moves.

As a general rule, start with tailscale up, only add other flags if you know you need them.

 

To fix your connection, I'd run the following from CLI:

tailscale set --accept-routes=false --advertise-exit-node=false --advertise-routes=""

 

Edited March 26, 20233 yr by EDACerton

3 hours ago, EDACerton said:

Something about this command probably didn't mesh nicely with your network... it's enabling several extra features that affect how traffic moves.

As a general rule, start with tailscale up, only add other flags if you know you need them.

 

To fix your connection, I'd run the following from CLI:

tailscale set --accept-routes=false --advertise-exit-node=false --advertise-routes=""

 

Thanks. I opted to boot with no plugins loaded and delete the plugin and plugins directory and reboot. I'll wait a bit until wiser ones than me can play around with this  

 

Edited March 27, 20233 yr by Nexus

23 hours ago, Nexus said:

Thanks. I opted to boot with no plugins loaded and delete the plugin and plugins directory and reboot. I'll wait a bit until wiser ones than me can play around with this  

 

If what you want is to be able to connect to Unraid remotely, and Docker containers running on bridge networks, then you can install the plugin and run tailscale up (no flags), that should work just fine.

 

The other features are all more advanced networking, so adding them incorrectly can cause issues.

All though I haven't tried this plugin.....yet. I definitely will be once I get back on land in a few days. Thanks for this. Now to see if and when someone can make a headscale plugin to pair up with this plugin.

 

Thanks for this!

 

~SOL

Edited March 27, 20233 yr by SomeoneOnLine
spell check!

Tried with advertise route 192.168.1.0/24 and exit node, all working like a charm, thanks, I hope next boot it remains

Thank you thank you for this, as well as the update!  I've been waiting for this since the first day I installed the Tailscale container.

Up and running with exit node, zero issues.

I published an update yesterday (version 2023.03.27) that adds a setting to enable IPv6 forwarding for folks that are using their Unraid server as a subnet router or exit node. This allows the required sysctl values (per the Tailscale documentation) to survive reboots.

 

To access, go to the "Settings" page, then "Tailscale".

anyway to get access to br0 dockers?

with dsmith44's docker tailscale verison and docker host network access enabled, it can access br0 dockers. So far i have been unable to get this plugin to do the same. any ideas?

1 hour ago, rukiftw said:

anyway to get access to br0 dockers?

with dsmith44's docker tailscale verison and docker host network access enabled, it can access br0 dockers. So far i have been unable to get this plugin to do the same. any ideas?

Honestly, I'm not really certain how that worked in the first place

 

You could probably use the subnet router option to get a similar effect. The other option is to sidecar a Tailscale container to your other containers. This is possible with the existing Docker container, I'm also chatting with dsmith44 a little bit about how that could be made easier.

Update 2023.03.29 released: updates Tailscale to 1.38.3.

Update 2023.04.01 released:

 

This update adds better support for Taildrop:

• There is a new option on the configuration page to specify a path for files that are taildropped to the server.
• If you configure this option, Tailscale will use the folder for any files that are Taildropped.
• If you do not configure the option / the array is stopped / the folder does not exist, Taildrop is disabled.

One additional note: Tailscale only notices changes to the Taildrop folder when the service starts. As a result, Tailscale will restart 5 seconds after the array starts or stops. The connection automatically resumes after the service restarts.