dolceAlka
dolceAlka
new patch in 1.66 seems to have broken the workaround as it seems that autogroup:danger-all does not include mullvad nodes or that the new semantics mean that a tag with...
no dns over public ip for both linux and windows with dig google.com @1.1.1.1 even with allowing all ports on the host machine from danger all group
used to work on global ACL, now i think it doesn't work anymore, i'm just using plain wireguard for vpn services and then tailscale between my own devices
sorry i can't confirm as i'm not on mullvad with tailscale anymore and am no longer interested in using it, if anyone else can confirm its a simple dig @1.1.1.1...
Theory that derp nodes are seeing client IP of the proxy device instead and that's where it fails on NAT, but doesn't explain why just using DERP fails
BUG-aa405f804928d74aab5a62884a0201c860450a07d083c15cb8815c5439a7cc9f-20240628155212Z-1ab46e8f72113cf4
This seems to be related to https://github.com/tailscale/tailscale/issues/895 and the ipv6 connectivity of the proxy host itself. Though strangely I can't ping all the devices on my tailnet, only some, perhaps...
Can confirm that tailscale seems to store peer endpoints (routable IP) on a need to basis, meaning that it is only loaded locally if you ping it at all
The issue is that if you disable IPv6 inside the container, the container will stop connecting to v6 endpoints but it will also lose connectivity through the tunnel. Ideally you...
i'm unable to replicate that on my side, can you try it on another system or device?