Tailscale

A modern, zero-config VPN built on top of the WireGuard protocol.

Initial Setup

SSH into your server:

ssh root@<server-ip>

You will see Tailscale usage info automatically.

Run:

tailscale up

A login URL will appear.

Open the URL in your browser, then authenticate your server and join your Tailscale network.

Basic Commands

Show help:

tailscale help

Check status and connected devices:

tailscale status

Enable SSH access through Tailscale:

tailscale set --ssh

Advertise this node as an exit node for routing traffic:

tailscale set --advertise-exit-node

Disconnect from Tailscale:

tailscale down

Show Tailscale version:

tailscale version

Use a remote exit node:

tailscale up --exit-node=<device-name-or-IP>

Show detailed network info:

tailscale netcheck

Log in to a Tailscale account:

tailscale login

Disconnect from Tailscale and expire current node key:

tailsclae logout

Switch to a different Tailscale account:

tailscale switch

Run a web server for controlling Tailscale:

tailscale web

Managing Tailscale Service

Stop service:

systemctl stop tailscaled

Start service:

systemctl start tailscaled

Restart service:

systemctl restart tailscaled

View live logs:

journalctl -u tailscaled -f

Enable Exit Node Mode (VPN Server)

This server is pre-tuned for exit-node performance.

Your server already has:

  • ✔ IP forwarding enabled
  • ✔ IPv6 forwarding enabled
  • ✔ GRO / UDP GRO forwarding optimization enabled
  • ✔ Correct routing configuration
  • ✔ No firewall blocking Tailscale traffic

Run on the server:

tailscale set --advertise-exit-node

Allow the exit node from the admin console.

Application Details