Denton Gentry

It is an estimate of the number of sites which would use this feature request. Given the number of 👍 since the label was applied, I changed the assessment. I...

Duplicate of https://github.com/tailscale/tailscale/issues/4314

`--exit-node-allow-lan-access` applies to the client connecting to the exit node, not the exit node itself. For example if you are sitting in an office and connecting to an exit node...

From around the time of the bugreport: `2022-07-19 07:42:54.556594105 +0530 +0530: LinkChange: major, rebinding. New state: interfaces.State{defaultRoute=enp2s0 ifs={CloudflareWARP:[172.16.0.2/32 fd01:5ca1:ab1e:8d44 :q:r:s:t/128] enp2s0:[172.16.168.x/23] lo:[fd01:y:z::2/128 fd01:y:z::3/128]} v4=true v6=true}` I think there are two...

> ...should I try disabling Warp entirely and see if Tailscale works as usual? You should try disabling Warp entirely and see if Tailscale works as usual.

I think it is fairly clear that the two VPNs are fighting over the routing table and iptables. `2022-07-19 07:42:14.050416142 +0530 +0530: router: somebody (likely systemd-networkd) deleted ip rules; restoring...

Possibly relevant: netmap minimization deployed for all users a couple months ago.

ACLs can allow use of exit nodes using `autogroup:internet`. If a node has no access to `autogroup:internet` then it won't be allowed to use an exit node. This does require...

In most cases when ability to block specific exit nodes is brought up, beyond ability to block `autogroup:internet`, it is because the exit node is being used as a way...

> I think even in the example you provide that begins to fall apart for a lot of SaaS apps that use a WAF like CloudFlare and do not have...