5 minutes ago, Espressomatic said:

I can't think of anything concrete to offer.  But if you want to poke around, from Unraid terminal you can use the tailscale command to check status and ping directly using tailscale to see if there's a difference.

 

 

 

Huh. Funny enough, `tailscale ping` _does_ work, both from the unraid-server to another machine, and from a machine to the unraid server. Odd.

 

So it seems like when we explicitly invoke Tailscale, the machines can contact each other. Is it possible that the Tailscale plugin isn't working or active, even though we think it is?

 

I tried uninstalling the plugin and reinstalling it, but should I try a full uninstall (including deleting config files) and reinstall and re-authorizing the machine?

I can't think of what's wrong, but I can't imagine there would be any issues besides a few lost minutes tearing it all down and putting it all back up again.  Go for it.

 

I'm not using Tailscale's DNS, so I've had to temporarily turn it on a few times when testing and posting. It wasn't on when I added that ts ping image above.

 

Once you've got everything back, test and then if it's still not working, check the different sections/tabs in the Tailscale plugin settings page (examples: Settings, Status, Info and maybe logs). Also a reminder that to enable the use of TS DNS on the Unraid plugin, you have to do it from the terminal.

 

 

 

 

 

 

Edited December 31, 20241 yr by Espressomatic

1 hour ago, Espressomatic said:

I can't think of what's wrong, but I can't imagine there would be any issues besides a few lost minutes tearing it all down and putting it all back up again.  Go for it.

 

I'm not using Tailscale's DNS, so I've had to temporarily turn it on a few times when testing and posting. It wasn't on when I added that ts ping image above.

 

Once you've got everything back, test and then if it's still not working, check the different sections/tabs in the Tailscale plugin settings page (examples: Settings, Status, Info and maybe logs). Also a reminder that to enable the use of TS DNS on the Unraid plugin, you have to do it from the terminal.

 

 

 

 

 

 

Thanks, I will give the full reset a try. But that last thing you said caught my attention - is the plugin bugged? Does the "use Tailscale DNS" dropdown in the tailscale settings page not function?

 

Nevermind, I see the difference. One's for outbound traffic, the other's (I assume) for inbound traffic. I'll try setting the "accept-dns" flag to true and restart the plugin, see if that helps. If it doesn't, I'll do the full reinstall.

 

Thanks for all of your help!

Edited December 31, 20241 yr by Argus9

I've uninstalled the plugin and removed the `tailscale` folder from my plugins directory on the Unraid flash drive, and fully reconfigured the unraid server in my Tailscale account, but unfortunately, the issue persists.

 

Now that we're past what's supposed to be the fix-all solution of starting from scratch, I'm thinking about what other info I can provide that might help, and there's a few things I can mention:

 

- I am using PiHole in my setup. It's running as a Docker container on my unraid server, but I'm using the `br0` network interface so I can give it a unique IP address on my network. I'm also on Unraid 7.0.0rc3 and have enabled Tailscale for the pihole container, so it has an IP address within my tailnet. I've set up the DNS settings for my tailnet to use that IP address as the sole global nameserver, and have "override local dns" enabled. This works fine for all of the devices on my tailnet.

- I've also enabled Tailscale for a few other docker containers on my unraid server, and they are accessible in the browser using their MagicDNS address, i.e. `pihole.foo-bar.ts.net`.

 

So the unraid server really is the outlier here, and specifically, the webGUI, since I'm able to access Docker containers with Tailscale enabled on them.

 

Just to be sure, I also wanted to check on the current status of tailscale DNS on the unraid server using `tailscale dns status`. This is the result, with certain sensitive data redacted:

 

root@unraid-server:~# tailscale dns status

=== 'Use Tailscale DNS' status ===

Tailscale DNS: enabled.

Tailscale is configured to handle DNS queries on this device.
Run 'tailscale set --accept-dns=false' to revert to your system default DNS resolver.

=== MagicDNS configuration ===

This is the DNS configuration provided by the coordination server to this device.

MagicDNS: enabled tailnet-wide (suffix = xxxx-xxxx.ts.net)

Other devices in your tailnet can reach this device at unraid-server.xxxx-xxxx.ts.net.

Resolvers (in preference order):
  - 100.xxx.xxx.xx

Split DNS Routes:
  - ts.net.                        -> xxx.xxx.xxx.xx
  - ts.net.                        -> xxxx:xxx:xxxx::xx

Search Domains:
  - xxxx-xxxx.ts.net

=== System DNS configuration ===

This is the DNS configuration that Tailscale believes your operating system is using.
Tailscale may use this configuration if 'Override Local DNS' is disabled in the admin console,
or if no resolvers are provided by the coordination server.

Nameservers:
  - xx.xxx.xxx.xx
  - xx.xxx.x.xx

Search domains:
  (no search domains found)

[this is a preliminary version of this command; the output format may change in the future]

One thing I noticed is that Nameservers doesn't have the values I expected; there's only one Global nameserver listed in my Tailscale admin console's DNS tab, and "Override Local DNS" is enabled. However, it's not showing under "Nameservers" and there's two other ones here.

 

Does this give you any other ideas?

Edited December 31, 20241 yr by Argus9

I don't have the time at the moment, but since you're starting from scratch I'll try to get back tomorrow with details of my setup for you to compare. In my case I'm using AdGuard Home as initial local DNS where you're using PiHole, which shouldn't matter. I have some ideas that you can try instead of setting things back the way you had before.

 

 

2 hours ago, Argus9 said:

I've uninstalled the plugin and removed the `tailscale` folder from my plugins directory on the Unraid flash drive, and fully reconfigured the unraid server in my Tailscale account, but unfortunately, the issue persists.

 

Now that we're past what's supposed to be the fix-all solution of starting from scratch, I'm thinking about what other info I can provide that might help, and there's a few things I can mention:

 

- I am using PiHole in my setup. It's running as a Docker container on my unraid server, but I'm using the `br0` network interface so I can give it a unique IP address on my network. I'm also on Unraid 7.0.0rc3 and have enabled Tailscale for the pihole container, so it has an IP address within my tailnet. I've set up the DNS settings for my tailnet to use that IP address as the sole global nameserver, and have "override local dns" enabled. This works fine for all of the devices on my tailnet.

- I've also enabled Tailscale for a few other docker containers on my unraid server, and they are accessible in the browser using their MagicDNS address, i.e. `pihole.foo-bar.ts.net`.

 

So the unraid server really is the outlier here, and specifically, the webGUI, since I'm able to access Docker containers with Tailscale enabled on them.

 

Just to be sure, I also wanted to check on the current status of tailscale DNS on the unraid server using `tailscale dns status`. This is the result, with certain sensitive data redacted:

 

root@unraid-server:~# tailscale dns status

=== 'Use Tailscale DNS' status ===

Tailscale DNS: enabled.

Tailscale is configured to handle DNS queries on this device.
Run 'tailscale set --accept-dns=false' to revert to your system default DNS resolver.

=== MagicDNS configuration ===

This is the DNS configuration provided by the coordination server to this device.

MagicDNS: enabled tailnet-wide (suffix = xxxx-xxxx.ts.net)

Other devices in your tailnet can reach this device at unraid-server.xxxx-xxxx.ts.net.

Resolvers (in preference order):
  - 100.xxx.xxx.xx

Split DNS Routes:
  - ts.net.                        -> xxx.xxx.xxx.xx
  - ts.net.                        -> xxxx:xxx:xxxx::xx

Search Domains:
  - xxxx-xxxx.ts.net

=== System DNS configuration ===

This is the DNS configuration that Tailscale believes your operating system is using.
Tailscale may use this configuration if 'Override Local DNS' is disabled in the admin console,
or if no resolvers are provided by the coordination server.

Nameservers:
  - xx.xxx.xxx.xx
  - xx.xxx.x.xx

Search domains:
  (no search domains found)

[this is a preliminary version of this command; the output format may change in the future]

One thing I noticed is that Nameservers doesn't have the values I expected; there's only one Global nameserver listed in my Tailscale admin console's DNS tab, and "Override Local DNS" is enabled. However, it's not showing under "Nameservers" and there's two other ones here.

 

Does this give you any other ideas?

Can you post a fresh Tailscale diagnostics?

Looking for a little support, very new to tailscale. I like to follow spaceinvader tutorials, i worked with his latest video doing 4GET with GluetunVPN and Tailscale. I got that all setup and it works, however what im looking to acieve and im not sure if its possible is to still utilize 4get through tailscale with glueton as exit point, and be able to access 4get through all my LAN devices not part of tailscale (Note i do use pfsense as well) what would be the best way to achieve this instead of adding a ton of devices to my tailscale network, just want the local devices to access 4get via lan and utilize the exit node in tailscale on the 4get container.

On 12/31/2024 at 6:54 PM, EDACerton said:

Can you post a fresh Tailscale diagnostics?

Sure thing! Here you go.

 

Thanks to you and @Espressomaticfor any (further) help you can provide!

unraid-server-tailscale-diag-20250103-130405.zip

I've been a huge fan of Tailscale and looking forward to Unraid 7 release.

 

Unfortunately, exit node implementation stopped working. Is there a formal contact / partnership between Unraid and Tailscale? Is this being worked on to address? If Tailscale is not supportive of the Unraid integration, this may just be the beginning of more issues to come?

 

https://github.com/tailscale/tailscale/issues/14372

43 minutes ago, steve1977 said:

I've been a huge fan of Tailscale and looking forward to Unraid 7 release.

 

Unfortunately, exit node implementation stopped working. Is there a formal contact / partnership between Unraid and Tailscale? Is this being worked on to address? If Tailscale is not supportive of the Unraid integration, this may just be the beginning of more issues to come?

 

https://github.com/tailscale/tailscale/issues/14372

Upstream is supportive of Unraid and have merged several PRs from me specifically to improve functionality on Unraid. 
 

I opened that issue shortly before the holidays, so let’s give them a little time now to get caught up and take a look. 

Hello. I am trying to access my custom network docker containers (eth2, 10.4.6.11:1880) via Tailscale. I have enabled subnet router and allowed it, and can access the WebGUI at 10.4.6.2, but I cannot access my docker container. When I tracert to 10.4.6.11, I get a response from unraid itself on line 1 (10.4.6.2), and on line 2 I get * * * !H !H !H (destination host unreachable). I am sort of completely out of ideas, anybody have any thoughts? I have attached diagnostics as requested. Thanks for your time.

Tower-tailscale-diag-20250104-223844.zip

Hi, will this somehow work with a headscale setup? I'm planning of setting up headscale on a VServer, but cannot see an option to specify the server in the plugin's settings. 

 

/edit: found the instructions on page 16 of this thread after properly using search...

Edited January 5, 20251 yr by Boergen

On 1/5/2025 at 12:09 AM, EDACerton said:

Upstream is supportive of Unraid and have merged several PRs from me specifically to improve functionality on Unraid. 
 

I opened that issue shortly before the holidays, so let’s give them a little time now to get caught up and take a look. 

Thanks for the update. Hope you’re right. Don’t think the native integration can be successful if there may be some lingering concerns by the tailscale team. Fingers crossed!

SOLVED: Funnel was not enabled on my tailnet from the admin console, apparently this has to be toggle ON for this feature to work.

 

----

 

I need some help with the serve/funnel features on the docker integrations. I hope this is just a case of user error but the documentation isn't all that well fleshed out.

 

1. Tailscale does not seem to generate an SSL cert for HTTPS (which i've enabled in the admin console)

 

2. I've enabled funnel but it appears to be stuck at enabling funnel as nothing happens after that last line.

 

 

The status.

 

 

The Docker shows up as a device on my tailnet after I authenticated it. I just cannot connect to it when I type in the domain.

 

 

Edited January 6, 20251 yr by MowMdown

1 hour ago, MowMdown said:

SOLVED: Funnel was not enabled on my tailnet from the admin console, apparently this has to be toggle ON for this feature to work.

 

----

 

I need some help with the serve/funnel features on the docker integrations. I hope this is just a case of user error but the documentation isn't all that well fleshed out.

 

1. Tailscale does not seem to generate an SSL cert for HTTPS (which i've enabled in the admin console)

 

2. I've enabled funnel but it appears to be stuck at enabling funnel as nothing happens after that last line.

 

 

The status.

 

 

The Docker shows up as a device on my tailnet after I authenticated it. I just cannot connect to it when I type in the domain.

 

 

This is not an issue with the Tailscale plugin, please make a post in the pre releases forum if you have further issues:

 

https://forums.unraid.net/bug-reports/prereleases/

Does docker post arguments work while using Tailscale integration in Unraid 7?

For example i use post argument to connect to a second network e.g. `; docker network connect dns-net pihole`. Without tailscale integration it works, but when I enable tailscale integration it's as though the post argument does not run, because it never connects to the network in the post agument

6 minutes ago, sean86 said:

For example i use post argument to connect to a second network e.g. `; docker network connect dns-net pihole`. Without tailscale integration it works, but when I enable tailscale integration it's as though the post argument does not run, because it never connects to the network in the post agument

This is not the correct thread to post in, however a post argument is executed in the container not on the host and usually this command wont work in the container, you have to use that on the host.

 

What you are doing is basically a hack that the Tailscale integration is preventing and will be maybe be prevented in future versions of Unraid now that you've posted it.

My flash drive died overnight and with it, so did my tailscale setup and my tunnel for my commercial vpn. I still had the tailscale plugin installed but I needed to register my server as a new machine (I'm assuming because of the new flash drive) and re-set it up as an exit router. I also had to redo all my docker containers that use my vpn tunnel.

 

Now, from my phone I can access my unraid web gui with either the tailscale ip address or my regular ip address as well as my docker containers that are configured as host or bridge network. However, if I try to access the web gui of one of the containers that is behind my vpn tunnel, it does not work. DId I mess sometime up re-setting up tailscale?

B2-tailscale-diag-20250110-124604.zip

Edited January 10, 20251 yr by JewelCrabCrab
Plugin diagnostic added

how do i unadvertise a subnet route? (or exit node for that matter)

@EDACerton I was wondering what unraid 7.0 actually changes regarding the current tailscale plugin? The announcement is extreamly vague. They basically announce that your plugin exists and thats about it? Not a single thing mentioned what will be different compared to 6.12.14... Does it get automatically deployed with new 7.0 image? Or is that announcement just an add for you plugin an nothing at all changes?

1 hour ago, Laov said:

@EDACerton I was wondering what unraid 7.0 actually changes regarding the current tailscale plugin? The announcement is extreamly vague. They basically announce that your plugin exists and thats about it? Not a single thing mentioned what will be different compared to 6.12.14... Does it get automatically deployed with new 7.0 image? Or is that announcement just an add for you plugin an nothing at all changes?

The core of the plugin works the same as it always has. There are a couple of tweaks in the WebGUI to work better with Tailscale:

• If you have HTTPS enabled for your tailnet, the WebGUI will automatically get a certificate to use for the Tailscale interface.
• Tailscale routes are now shown on the network settings page

The plugin is still installed via CA and updated via the normal plugin update process. This was intentional so that Tailscale can update independent of Unraid (Tailscale updates more frequently than Unraid does).

20 minutes ago, EDACerton said:

The core of the plugin works the same as it always has. There are a couple of tweaks in the WebGUI to work better with Tailscale:

• If you have HTTPS enabled for your tailnet, the WebGUI will automatically get a certificate to use for the Tailscale interface.
• Tailscale routes are now shown on the network settings page

The plugin is still installed via CA and updated via the normal plugin update process. This was intentional so that Tailscale can update independent of Unraid (Tailscale updates more frequently than Unraid does).

I thought Unraid 7.0 has native integration, which (among other things) may also allow to use tailscale with some dockers (while not with others)? Currently already possible with the plugin, but more difficult.

11 minutes ago, steve1977 said:

I thought Unraid 7.0 has native integration, which (among other things) may also allow to use tailscale with some dockers (while not with others)? Currently already possible with the plugin, but more difficult.

That is not tied to the plugin. 
 

That integration works by trying to inject Tailscale into the target container. As we’ve seen, that works in some cases,  but not in all. 
 

My preference would be to use sidecar containers or tsdproxy instead of the Docker integration. 

On 1/4/2025 at 11:23 PM, steve1977 said:

I've been a huge fan of Tailscale and looking forward to Unraid 7 release.

 

Unfortunately, exit node implementation stopped working. Is there a formal contact / partnership between Unraid and Tailscale? Is this being worked on to address? If Tailscale is not supportive of the Unraid integration, this may just be the beginning of more issues to come?

 

https://github.com/tailscale/tailscale/issues/14372

I am still at a loss here. Tailscale is a commercial project (which I am paying for and the one & only reason for this is Unraid). Why is Unraid promoting it so heavily with its latest Unraid 7 release and native integration? While at the same time, Tailscale restricts use of Unraid and limits critical feautures for Unraid users. And then is completely unresponsive to Unraid users and developers on git. There is not even an answer why Unraid being in restrictive use for Tailscale for almost a month now or whether there are any plans to change this?

 

FYI  @ljm42 @SpaceInvaderOne for thoughts

10 minutes ago, steve1977 said:

I am still at a loss here. Tailscale is a commercial project (which I am paying for and the one & only reason for this is Unraid). Why is Unraid promoting it so heavily with its latest Unraid 7 release and native integration? While at the same time, Tailscale restricts use of Unraid and limits critical feautures for Unraid users. And then is completely unresponsive to Unraid users and developers on git. There is not even an answer why Unraid being in restrictive use for Tailscale for almost a month now or whether there are any plans to change this?

 

FYI  @ljm42 @SpaceInvaderOne for thoughts

I’ve already been in communication with staff about this.