Tailscale
Allikas: Imre kasutab arvutit
Mine navigeerimisribaleMine otsikasti
Sissejuhatus
Tailscale https://tailscale.com/ ..
Tööpõhimõte
Väited
- põhineb wireguard tarkvaral
Misc
asjasse puutuvad failid sh krüptomateral
root@pwrk-02:~# find /var/lib/tailscale/ -ls 787147 4 drwx------ 3 root root 4096 Apr 25 15:29 /var/lib/tailscale/ 787040 4 -rw------- 1 root root 2698 Apr 25 15:29 /var/lib/tailscale/tailscaled.state 786536 16 -rw------- 1 root root 15055 Apr 25 13:45 /var/lib/tailscale/derpmap.cached.json 787183 4 -rw------- 1 root root 209 Apr 25 13:42 /var/lib/tailscale/tailscaled.log.conf 786579 4 drwx------ 3 root root 4096 Apr 25 13:45 /var/lib/tailscale/files 787007 4 drwx------ 2 root root 4096 Apr 25 13:45 /var/lib/tailscale/files/imre.oolberg-gmail.com-uid-4916328083301376 787250 0 -rw------- 1 root root 0 Apr 25 16:52 /var/lib/tailscale/tailscaled.log1.txt 787282 0 -rw------- 1 root root 0 Apr 25 17:00 /var/lib/tailscale/tailscaled.log2.txt
kus
root@pwrk-02:~# cat /var/lib/tailscale/tailscaled.state
{
"_current-profile": "cHJvZmlsZS1iMTA3",
"_machinekey": "cHJpdmtleTpmOGNjYzA2YTgyMDllMTExZDgwZTgxZDMwM ...",
"_profiles": "eyJiMTA3Ijp7IklEIjo ... ",
"profile-b107": "ewoJIk ... "
kus
# echo "ewoJIk ... " | base64 -d
{
"ControlURL": "https://controlplane.tailscale.com",
"RouteAll": false,
"ExitNodeID": "",
"ExitNodeIP": "",
"InternalExitNodePrior": "",
"ExitNodeAllowLANAccess": false,
"CorpDNS": true,
"RunSSH": false,
"RunWebClient": false,
"WantRunning": true,
"LoggedOut": false,
"ShieldsUp": false,
"AdvertiseTags": null,
"Hostname": "",
"NotepadURLs": false,
"AdvertiseRoutes": null,
"AdvertiseServices": null,
"Sync": null,
"NoSNAT": false,
"NoStatefulFiltering": true,
"NetfilterMode": 2,
"AutoUpdate": {
"Check": true,
"Apply": true
},
"AppConnector": {
"Advertise": false
},
"PostureChecking": false,
"NetfilterKind": "",
"DriveShares": null,
"AllowSingleHosts": true,
"Config": {
"PrivateNodeKey": "privkey:98adf1348de16 ...",
"OldPrivateNodeKey": "privkey:0000000000000000000000000000000000000000000000000000000000000000",
"UserProfile": {
"ID": 49163 ...,
"LoginName": "imre.oolberg@gmail.com",
"DisplayName": "Imre Oolberg",
"ProfilePicURL": "https://lh3.googleusercontent.com/a/ACg8ocJoZc0K7dx ..."
},
"NetworkLockKey": "nlpriv:f7efba98cda43 ...",
"NodeID": "nE1uKyy .."
}
}root@pwrk-02:~#
systemd unit
root@pwrk-02:~# systemctl status tailscaled
● tailscaled.service - Tailscale node agent
Loaded: loaded (/usr/lib/systemd/system/tailscaled.service; enabled; preset: enabled)
Active: active (running) since Sat 2026-04-25 15:28:10 UTC; 2h 29min ago
Docs: https://tailscale.com/docs/
Main PID: 2400 (tailscaled)
Status: "Connected; imre.oolberg@gmail.com; 100.121.207.99 fd7a:115c:a1e0::1537:cf63"
Tasks: 11 (limit: 9405)
Memory: 15.3M (peak: 17.6M)
CPU: 2.922s
CGroup: /system.slice/tailscaled.service
└─2400 /usr/sbin/tailscaled --state=/var/lib/tailscale/tailscaled.state --socket=/run/tailscale/tailscaled.sock --port=41641
Apr 25 15:29:09 pwrk-02 tailscaled[2400]: health(warnable=wantrunning-false): ok
Apr 25 15:29:09 pwrk-02 tailscaled[2400]: health(warnable=warming-up): ok
Apr 25 15:29:09 pwrk-02 tailscaled[2400]: health(warnable=no-derp-connection): ok
Apr 25 15:29:09 pwrk-02 tailscaled[2400]: magicsock: derp-28 connected; connGen=1
Apr 25 15:29:09 pwrk-02 tailscaled[2400]: health(warnable=no-derp-connection): ok
Apr 25 15:29:09 pwrk-02 tailscaled[2400]: [RATELIMIT] format("health(warnable=%s): ok")
Apr 25 15:29:09 pwrk-02 tailscaled[2400]: control: RegisterReq: got response; nodeKeyExpired=false, machineAuthorized=true; authURL=false
Apr 25 15:29:09 pwrk-02 tailscaled[2400]: control: netmap: got new dial plan from control
Apr 25 15:29:09 pwrk-02 tailscaled[2400]: netmap: suggested exit node: ()
Apr 25 16:51:29 pwrk-02 tailscaled[2400]: wgengine: Reconfig: configuring userspace WireGuard config (with 1/1 peers)
kus
- paistab wireguard viiteid
Võrguliides noarp point-to-point
root@pwrk-02:~# ifconfig tailscale0
tailscale0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> mtu 1280
inet 100.121.207.99 netmask 255.255.255.255 destination 100.121.207.99
unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 txqueuelen 500 (UNSPEC)
RX packets 3 bytes 254 (254.0 B)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 2 bytes 168 (168.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
Ruutinguks kasutatakse abistavat nn tabelit nr 52
root@pwrk-02:~# ip route show default via 192.168.111.189 dev enp6s18 proto static 192.168.111.0/24 dev enp6s18 proto kernel scope link src 192.168.111.198 root@pwrk-02:~# ip route show table 52 100.66.245.64 dev tailscale0 100.100.100.100 dev tailscale0
käimasoleva kohta info küsimine
root@pwrk-02:~# tailscale netcheck 2026/04/25 17:10:02 portmap: monitor: gateway and self IP changed: gw=192.168.111.189 self=192.168.111.198 Report: * Time: 2026-04-25T17:10:02.654619377Z * UDP: true * IPv4: yes, 80.235.106.155:57953 * IPv6: no, unavailable in OS * MappingVariesByDestIP: false * PortMapping: * Nearest DERP: Helsinki * DERP latency: - hel: 12.5ms (Helsinki) - waw: 33.5ms (Warsaw) - ams: 41.7ms (Amsterdam) - fra: 42.1ms (Frankfurt) - par: 49.7ms (Paris) - lhr: 49.8ms (London) - nue: 50.8ms (Nuremberg) - mad: 74.3ms (Madrid) - tor: 115.6ms (Toronto) - nyc: 118.7ms (New York City) - ord: 127.3ms (Chicago) - dbi: 134.5ms (Dubai) - iad: 135.4ms (Ashburn) - den: 147.3ms (Denver) - mia: 156.1ms (Miami) - dfw: 167.5ms (Dallas) - blr: 177.3ms (Bengaluru) - sea: 184.2ms (Seattle) - nai: 186.8ms (Nairobi) - sfo: 187.8ms (San Francisco) - lax: 189ms (Los Angeles) - jnb: 210.3ms (Johannesburg) - hnl: 235ms (Honolulu) - sin: (Singapore) - syd: (Sydney) - tok: (Tokyo) - sao: (São Paulo) - hkg: (Hong Kong)
- UDP: true - udp port punching on kasutusel
protsess töötab global namespace'ides
root@pwrk-02:~# ps aux | grep scale | grep -v grep
root 2400 0.0 0.4 1354240 40380 ? Ssl 15:28 0:02 /usr/sbin/tailscaled --state=/var/lib/tailscale/tailscaled.state --socket=/run/tailscale/tailscaled.sock --port=41641
root@pwrk-02:~# lsns -p 2400
NS TYPE NPROCS PID USER COMMAND
4026531834 time 156 1 root /sbin/init
4026531835 cgroup 156 1 root /sbin/init
4026531836 pid 156 1 root /sbin/init
4026531837 user 156 1 root /sbin/init
4026531838 uts 151 1 root /sbin/init
4026531839 ipc 156 1 root /sbin/init
4026531840 net 156 1 root /sbin/init
4026531841 mnt 148 1 root /sbin/init
Kasulikud lisamaterjalid
- TODO
