runtipi-appstore icon indicating copy to clipboard operation
runtipi-appstore copied to clipboard

šŸ› [Tailscale] "This site canā€™t be reached" when installing Tailscale after installing Cloudflare tunnel

Open jasonpearce opened this issue 11 months ago ā€¢ 16 comments

Store Application

Tailscale

App version

v1.61.11

Description

If Tailscale is installed after Cloudflared, user is unable to access http://192.168.xxx.xxx:8093/ or https://192.168.xxx.xxx:8093/. Browser reports:

This site canā€™t be reached 192.168.xxx.xxx refused to connect ERR_CONNECTION_REFUSED

Steps to reproduce

  1. Install Ubuntu
  2. Install Tipi v3.1.0
  3. Install Cloudflared v2024.2.1
  4. Install Hello World
  5. Validate Hello World works via http://192.168.xxx.xxx:8000/ (it does)
  6. Validate Hello World works via https://helloworld.example.com (it does)
  7. Install Tailscale
  8. Validate Tailscale works via http://192.168.xxx.xxx:8093/ or https://192.168.xxx.xxx:8093/ (it does not)

App logs

Provide instructions on how to provide logs and I'll try.

Browser

Firefox and Brave

Browser logs

No response

User-Config changes

No response

Other

I have other apps that don't work if I install them after Cloudflared is installed. Some other apps, however, do work after Cloudflared is installed. I'll create separate tickets for each.

Please confirm the following

  • [X] I believe this issue is a bug that affects all users of RunTipi, not something specific to my installation.
  • [X] I have already searched for relevant existing issues and discussions before opening this report.
  • [X] I have updated the title field above with a concise description.

jasonpearce avatar Mar 08 '24 02:03 jasonpearce

Problem remains with Tailscale v1.62.0.

jasonpearce avatar Mar 16 '24 13:03 jasonpearce

Hello @jasonpearce

Sorry for late reply. I can reproduce the issue, will fix asap since this is a major app. Probably an update in >1 hour.

steveiliop56 avatar Mar 23 '24 17:03 steveiliop56

Alright after testing again seems that the app works on my seconds tipi testing machine. Are you using wsl? Because there seems to be an issue with that.

steveiliop56 avatar Mar 23 '24 17:03 steveiliop56

On both my physical production and my test VM, I am using Ubuntu 22.04.4 LTS. I'm sorry that I don't know what the WSL acronym represents. On both machines, their only purpose is to run Tipi.

jasonpearce avatar Mar 25 '24 00:03 jasonpearce

No worries wsl is windows subsystem for Linux I couldn't access the tailscale ui from it but I think that was my issue. Can you share the output of docker logs tailscale

steveiliop56 avatar Mar 25 '24 07:03 steveiliop56

Don't use cloudflare tunnels on my side, @jasonpearce why not using Funnels ? As it's the tunneling function of Tailscale :)

JigSawFr avatar Mar 25 '24 19:03 JigSawFr

Oh wait sorry I didn't see the cloudflare part. Are you sure you configured it correctly?

steveiliop56 avatar Mar 25 '24 19:03 steveiliop56

I configured it the same way that I reported with a lot of screen shots within this ticket:

  • https://github.com/runtipi/runtipi-appstore/issues/2394

I did it twice, once on my production physical server. And again on a virtual server.

In both cases, I first installed Hello World and configured it to work via a Cloudflare tunnel before attempting to recreate the problem with Tailscale.

I'm not certain I did it correctly, but I think it is likely. Would you like detailed screen shots similar to what I provide in issue 2394?

jasonpearce avatar Mar 26 '24 19:03 jasonpearce

Don't use cloudflare tunnels on my side, @jasonpearce why not using Funnels ? As it's the tunneling function of Tailscale :)

I haven't looked at Funnels yet. But thank you. I will. (Edit: I assume you are referring to https://tailscale.com/kb/1223/funnel).

I'd prefer to use Tailscale since I already have 10 to 15 other devices within that network.

jasonpearce avatar Mar 26 '24 19:03 jasonpearce

After upgrading to...

  • RunTipi v3.1.3
  • Cloudflared v2024.3.0
  • Tailscale v1.62.1

My results are unchanged:

  • Hello World still works by local IP address and Cloudflare Tunnel
  • http://local-ip:8093 is Unable to Connect
  • https://local-ip:8093 is Unable to Connect

The Firefox error is a little different, but that could be a result of an upgrade version of Firefox.

Unable to connect An error occurred during a connection to 192.168.xxx.xxx:8093.

The site could be temporarily unavailable or too busy. Try again in a few moments.
If you are unable to load any pages, check your computerā€™s network connection.
If your computer or network is protected by a firewall or proxy, make sure that Firefox is permitted to access the web

jasonpearce avatar Apr 03 '24 01:04 jasonpearce

A small question here. Do you want to use cloudflare just to point your domain to the tailscale ui local only so you can access it from tailscale.mydomain.com? Or do you want to expose the ui to the internet? These two are completely different from each other and the second I highly advise not to do.

steveiliop56 avatar Apr 03 '24 05:04 steveiliop56

I want to have Tailscale on my phone and on my RunTipi server so that I may remotely access the server's RunTipi dashboard through a VPN tunnel.

First, I'd like to just have a local IP-based interface to Tailscale, which does not appear to work if RunTipi also has Cloudflared installed on it.

In summary, I'm using Cloudflared to remotely access other apps installed on the RunTipi server. I don't intend to use Cloudflared to remotely access Tailscale with my own internet-facing subdomain (e.g. tailscale.example.com). I simply want to be able to install and use Tailscale locally on the same RunTipi server that also has Cloudflared installed and working for other apps.

I hope that helps clarify my use case. Thank you for your assistance.

jasonpearce avatar Apr 03 '24 17:04 jasonpearce

Cloudflare tunnel is the wrong approach here. If you just want to access tailscale inside your home network then cloudflare tunnel is not the solution. The solution would be to use tipi's reverse proxy or simply dns. Now as far as your ui issue it seems a bit weird as I cannot reproduce. Can you share the output of docker logs tailscale please?

steveiliop56 avatar Apr 04 '24 19:04 steveiliop56

Sorry accidentally closed.

steveiliop56 avatar Apr 04 '24 19:04 steveiliop56

For this purpose it's better to use Tailscale no ? Cloudflare is more for exposing to internet. (So other people's). But indeed it should works too, I can confirm that Tailscale is working for this purpose, if DNS are well configured too (using NextDNS)

JigSawFr avatar Apr 04 '24 20:04 JigSawFr

Thank you both. As a reminder, I'm not trying to expose the Tailscale app via a Cloudflare tunnel. My report is that the Tailscale app is not available via a local IP address and port IF the Cloudflared app is installed (and being used by other apps like Hello World). I apologize if my bug report was unclear or misleading.

jasonpearce avatar Apr 07 '24 15:04 jasonpearce