Denton Gentry

Looking at the client metrics, they seem to be a mishmash of sources and I don't see a pattern or correlation. I don't expect to do more here.

In 1.12, when 100.100.100.100 needs to forward a lookup to a well-known global resolver like CloudFlare or dns.google, it automatically use DNS-over-HTTPS so the query doesn't go over the open...

Are `111.12.xx.xx:51574` and `42.90.xx.xx:34461` your addresses? For example, do you have Tailscale devices behind a firewall at those IP addresses?

This may be a case of binding to the wrong interface, continuing to use the LTE after Wi-Fi is available. We've only been able to produce the problem a couple...

Shortly after startup of tailscaled: `2022-07-30 14:16:28.397005074 +0000 UTC: authReconfig: ra=false dns=true 0x01: setting up filter/ts-input: running [/sbin/ip6tables -t filter -N ts-input --wait]: exit status 3: modprobe: can't change directory...

I'm suggesting that the lack of ip6tables leads to tailscaled exiting its initialization early and is likely what results in DNS not working. Adding `apt install ip6tables` or equivalent to...

It is failing: `2022-07-30 14:16:28.397005074 +0000 UTC: authReconfig: ra=false dns=true 0x01: setting up filter/ts-input: running [/sbin/ip6tables -t filter -N ts-input --wait]: exit status 3: modprobe: can't change directory to '/lib/modules':...

According to the error output there is no /lib/modules and no ability to use the TUN device. You need a container able to open /dev/net/tun.

Related: https://github.com/tailscale/tailscale/issues/2782

I think this is addressed by https://github.com/maisem/tailscale-on-k8s (which may move into the tailscale organization at some point for visibility, Maisem is a software engineer at Tailscale).