Tailscale: erinevus redaktsioonide vahel
Allikas: Imre kasutab arvutit
Mine navigeerimisribaleMine otsikasti
(Uus lehekülg: '===Sissejuhatus=== TODO ===Tööpõhimõte=== TODO ===Misc=== käimasoleva kohta info küsimine <pre> root@pwrk-02:~# tailscale netcheck 2026/04/25 17:10:02 portmap: monitor: gateway and self IP changed: gw=192.168.111.189 self=192.168.111.198 Report: * Time: 2026-04-25T17:10:02.654619377Z * UDP: true * IPv4: yes, 80.235.106.155:57953 * IPv6: no, unavailable in OS * MappingVariesByDestIP: false * PortMapping: * Nearest DERP: Helsinki * DERP latency: - hel:...') |
Resümee puudub |
||
| 8. rida: | 8. rida: | ||
===Misc=== |
===Misc=== |
||
| + | |||
| + | asjasse puutuvad failid sh krüptomateral |
||
| + | |||
| + | <pre> |
||
| + | root@pwrk-02:~# find /var/lib/tailscale/ -ls |
||
| + | 787147 4 drwx------ 3 root root 4096 Apr 25 15:29 /var/lib/tailscale/ |
||
| + | 787040 4 -rw------- 1 root root 2698 Apr 25 15:29 /var/lib/tailscale/tailscaled.state |
||
| + | 786536 16 -rw------- 1 root root 15055 Apr 25 13:45 /var/lib/tailscale/derpmap.cached.json |
||
| + | 787183 4 -rw------- 1 root root 209 Apr 25 13:42 /var/lib/tailscale/tailscaled.log.conf |
||
| + | 786579 4 drwx------ 3 root root 4096 Apr 25 13:45 /var/lib/tailscale/files |
||
| + | 787007 4 drwx------ 2 root root 4096 Apr 25 13:45 /var/lib/tailscale/files/imre.oolberg-gmail.com-uid-4916328083301376 |
||
| + | 787250 0 -rw------- 1 root root 0 Apr 25 16:52 /var/lib/tailscale/tailscaled.log1.txt |
||
| + | 787282 0 -rw------- 1 root root 0 Apr 25 17:00 /var/lib/tailscale/tailscaled.log2.txt |
||
| + | </pre> |
||
| + | |||
| + | kus |
||
| + | |||
| + | <pre> |
||
| + | root@pwrk-02:~# cat /var/lib/tailscale/tailscaled.state |
||
| + | { |
||
| + | "_current-profile": "cHJvZmlsZS1iMTA3", |
||
| + | "_machinekey": "cHJpdmtleTpmOGNjYzA2YTgyMDllMTExZDgwZTgxZDMwM ...", |
||
| + | "_profiles": "eyJiMTA3Ijp7IklEIjo ... ", |
||
| + | "profile-b107": "ewoJIk ... " |
||
| + | </pre> |
||
| + | |||
| + | kus |
||
| + | |||
| + | <pre> |
||
| + | # echo "ewoJIk ... " | base64 -d |
||
| + | |||
| + | { |
||
| + | "ControlURL": "https://controlplane.tailscale.com", |
||
| + | "RouteAll": false, |
||
| + | "ExitNodeID": "", |
||
| + | "ExitNodeIP": "", |
||
| + | "InternalExitNodePrior": "", |
||
| + | "ExitNodeAllowLANAccess": false, |
||
| + | "CorpDNS": true, |
||
| + | "RunSSH": false, |
||
| + | "RunWebClient": false, |
||
| + | "WantRunning": true, |
||
| + | "LoggedOut": false, |
||
| + | "ShieldsUp": false, |
||
| + | "AdvertiseTags": null, |
||
| + | "Hostname": "", |
||
| + | "NotepadURLs": false, |
||
| + | "AdvertiseRoutes": null, |
||
| + | "AdvertiseServices": null, |
||
| + | "Sync": null, |
||
| + | "NoSNAT": false, |
||
| + | "NoStatefulFiltering": true, |
||
| + | "NetfilterMode": 2, |
||
| + | "AutoUpdate": { |
||
| + | "Check": true, |
||
| + | "Apply": true |
||
| + | }, |
||
| + | "AppConnector": { |
||
| + | "Advertise": false |
||
| + | }, |
||
| + | "PostureChecking": false, |
||
| + | "NetfilterKind": "", |
||
| + | "DriveShares": null, |
||
| + | "AllowSingleHosts": true, |
||
| + | "Config": { |
||
| + | "PrivateNodeKey": "privkey:98adf1348de16 ...", |
||
| + | "OldPrivateNodeKey": "privkey:0000000000000000000000000000000000000000000000000000000000000000", |
||
| + | "UserProfile": { |
||
| + | "ID": 49163 ..., |
||
| + | "LoginName": "imre.oolberg@gmail.com", |
||
| + | "DisplayName": "Imre Oolberg", |
||
| + | "ProfilePicURL": "https://lh3.googleusercontent.com/a/ACg8ocJoZc0K7dx ..." |
||
| + | }, |
||
| + | "NetworkLockKey": "nlpriv:f7efba98cda43 ...", |
||
| + | "NodeID": "nE1uKyy .." |
||
| + | } |
||
| + | }root@pwrk-02:~# |
||
| + | </pre> |
||
| + | |||
| + | systemd unit |
||
| + | |||
| + | <pre> |
||
| + | root@pwrk-02:~# systemctl status tailscaled |
||
| + | ● tailscaled.service - Tailscale node agent |
||
| + | Loaded: loaded (/usr/lib/systemd/system/tailscaled.service; enabled; preset: enabled) |
||
| + | Active: active (running) since Sat 2026-04-25 15:28:10 UTC; 2h 29min ago |
||
| + | Docs: https://tailscale.com/docs/ |
||
| + | Main PID: 2400 (tailscaled) |
||
| + | Status: "Connected; imre.oolberg@gmail.com; 100.121.207.99 fd7a:115c:a1e0::1537:cf63" |
||
| + | Tasks: 11 (limit: 9405) |
||
| + | Memory: 15.3M (peak: 17.6M) |
||
| + | CPU: 2.922s |
||
| + | CGroup: /system.slice/tailscaled.service |
||
| + | └─2400 /usr/sbin/tailscaled --state=/var/lib/tailscale/tailscaled.state --socket=/run/tailscale/tailscaled.sock --port=41641 |
||
| + | |||
| + | Apr 25 15:29:09 pwrk-02 tailscaled[2400]: health(warnable=wantrunning-false): ok |
||
| + | Apr 25 15:29:09 pwrk-02 tailscaled[2400]: health(warnable=warming-up): ok |
||
| + | Apr 25 15:29:09 pwrk-02 tailscaled[2400]: health(warnable=no-derp-connection): ok |
||
| + | Apr 25 15:29:09 pwrk-02 tailscaled[2400]: magicsock: derp-28 connected; connGen=1 |
||
| + | Apr 25 15:29:09 pwrk-02 tailscaled[2400]: health(warnable=no-derp-connection): ok |
||
| + | Apr 25 15:29:09 pwrk-02 tailscaled[2400]: [RATELIMIT] format("health(warnable=%s): ok") |
||
| + | Apr 25 15:29:09 pwrk-02 tailscaled[2400]: control: RegisterReq: got response; nodeKeyExpired=false, machineAuthorized=true; authURL=false |
||
| + | Apr 25 15:29:09 pwrk-02 tailscaled[2400]: control: netmap: got new dial plan from control |
||
| + | Apr 25 15:29:09 pwrk-02 tailscaled[2400]: netmap: suggested exit node: () |
||
| + | Apr 25 16:51:29 pwrk-02 tailscaled[2400]: wgengine: Reconfig: configuring userspace WireGuard config (with 1/1 peers) |
||
| + | </pre> |
||
| + | |||
| + | Võrguliides noarp point-to-point |
||
| + | |||
| + | <pre> |
||
| + | root@pwrk-02:~# ifconfig tailscale0 |
||
| + | tailscale0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> mtu 1280 |
||
| + | inet 100.121.207.99 netmask 255.255.255.255 destination 100.121.207.99 |
||
| + | unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 txqueuelen 500 (UNSPEC) |
||
| + | RX packets 3 bytes 254 (254.0 B) |
||
| + | RX errors 0 dropped 0 overruns 0 frame 0 |
||
| + | TX packets 2 bytes 168 (168.0 B) |
||
| + | TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 |
||
| + | </pre> |
||
| + | |||
| + | Ruutinguks kasutatakse abistavat nn tabelit nr 52 |
||
| + | |||
| + | <pre> |
||
| + | root@pwrk-02:~# ip route show |
||
| + | default via 192.168.111.189 dev enp6s18 proto static |
||
| + | 192.168.111.0/24 dev enp6s18 proto kernel scope link src 192.168.111.198 |
||
| + | |||
| + | root@pwrk-02:~# ip route show table 52 |
||
| + | 100.66.245.64 dev tailscale0 |
||
| + | 100.100.100.100 dev tailscale0 |
||
| + | </pre> |
||
käimasoleva kohta info küsimine |
käimasoleva kohta info küsimine |
||
Redaktsioon: 25. aprill 2026, kell 21:02
Sissejuhatus
TODO
Tööpõhimõte
TODO
Misc
asjasse puutuvad failid sh krüptomateral
root@pwrk-02:~# find /var/lib/tailscale/ -ls 787147 4 drwx------ 3 root root 4096 Apr 25 15:29 /var/lib/tailscale/ 787040 4 -rw------- 1 root root 2698 Apr 25 15:29 /var/lib/tailscale/tailscaled.state 786536 16 -rw------- 1 root root 15055 Apr 25 13:45 /var/lib/tailscale/derpmap.cached.json 787183 4 -rw------- 1 root root 209 Apr 25 13:42 /var/lib/tailscale/tailscaled.log.conf 786579 4 drwx------ 3 root root 4096 Apr 25 13:45 /var/lib/tailscale/files 787007 4 drwx------ 2 root root 4096 Apr 25 13:45 /var/lib/tailscale/files/imre.oolberg-gmail.com-uid-4916328083301376 787250 0 -rw------- 1 root root 0 Apr 25 16:52 /var/lib/tailscale/tailscaled.log1.txt 787282 0 -rw------- 1 root root 0 Apr 25 17:00 /var/lib/tailscale/tailscaled.log2.txt
kus
root@pwrk-02:~# cat /var/lib/tailscale/tailscaled.state
{
"_current-profile": "cHJvZmlsZS1iMTA3",
"_machinekey": "cHJpdmtleTpmOGNjYzA2YTgyMDllMTExZDgwZTgxZDMwM ...",
"_profiles": "eyJiMTA3Ijp7IklEIjo ... ",
"profile-b107": "ewoJIk ... "
kus
# echo "ewoJIk ... " | base64 -d
{
"ControlURL": "https://controlplane.tailscale.com",
"RouteAll": false,
"ExitNodeID": "",
"ExitNodeIP": "",
"InternalExitNodePrior": "",
"ExitNodeAllowLANAccess": false,
"CorpDNS": true,
"RunSSH": false,
"RunWebClient": false,
"WantRunning": true,
"LoggedOut": false,
"ShieldsUp": false,
"AdvertiseTags": null,
"Hostname": "",
"NotepadURLs": false,
"AdvertiseRoutes": null,
"AdvertiseServices": null,
"Sync": null,
"NoSNAT": false,
"NoStatefulFiltering": true,
"NetfilterMode": 2,
"AutoUpdate": {
"Check": true,
"Apply": true
},
"AppConnector": {
"Advertise": false
},
"PostureChecking": false,
"NetfilterKind": "",
"DriveShares": null,
"AllowSingleHosts": true,
"Config": {
"PrivateNodeKey": "privkey:98adf1348de16 ...",
"OldPrivateNodeKey": "privkey:0000000000000000000000000000000000000000000000000000000000000000",
"UserProfile": {
"ID": 49163 ...,
"LoginName": "imre.oolberg@gmail.com",
"DisplayName": "Imre Oolberg",
"ProfilePicURL": "https://lh3.googleusercontent.com/a/ACg8ocJoZc0K7dx ..."
},
"NetworkLockKey": "nlpriv:f7efba98cda43 ...",
"NodeID": "nE1uKyy .."
}
}root@pwrk-02:~#
systemd unit
root@pwrk-02:~# systemctl status tailscaled
● tailscaled.service - Tailscale node agent
Loaded: loaded (/usr/lib/systemd/system/tailscaled.service; enabled; preset: enabled)
Active: active (running) since Sat 2026-04-25 15:28:10 UTC; 2h 29min ago
Docs: https://tailscale.com/docs/
Main PID: 2400 (tailscaled)
Status: "Connected; imre.oolberg@gmail.com; 100.121.207.99 fd7a:115c:a1e0::1537:cf63"
Tasks: 11 (limit: 9405)
Memory: 15.3M (peak: 17.6M)
CPU: 2.922s
CGroup: /system.slice/tailscaled.service
└─2400 /usr/sbin/tailscaled --state=/var/lib/tailscale/tailscaled.state --socket=/run/tailscale/tailscaled.sock --port=41641
Apr 25 15:29:09 pwrk-02 tailscaled[2400]: health(warnable=wantrunning-false): ok
Apr 25 15:29:09 pwrk-02 tailscaled[2400]: health(warnable=warming-up): ok
Apr 25 15:29:09 pwrk-02 tailscaled[2400]: health(warnable=no-derp-connection): ok
Apr 25 15:29:09 pwrk-02 tailscaled[2400]: magicsock: derp-28 connected; connGen=1
Apr 25 15:29:09 pwrk-02 tailscaled[2400]: health(warnable=no-derp-connection): ok
Apr 25 15:29:09 pwrk-02 tailscaled[2400]: [RATELIMIT] format("health(warnable=%s): ok")
Apr 25 15:29:09 pwrk-02 tailscaled[2400]: control: RegisterReq: got response; nodeKeyExpired=false, machineAuthorized=true; authURL=false
Apr 25 15:29:09 pwrk-02 tailscaled[2400]: control: netmap: got new dial plan from control
Apr 25 15:29:09 pwrk-02 tailscaled[2400]: netmap: suggested exit node: ()
Apr 25 16:51:29 pwrk-02 tailscaled[2400]: wgengine: Reconfig: configuring userspace WireGuard config (with 1/1 peers)
Võrguliides noarp point-to-point
root@pwrk-02:~# ifconfig tailscale0
tailscale0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> mtu 1280
inet 100.121.207.99 netmask 255.255.255.255 destination 100.121.207.99
unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 txqueuelen 500 (UNSPEC)
RX packets 3 bytes 254 (254.0 B)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 2 bytes 168 (168.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
Ruutinguks kasutatakse abistavat nn tabelit nr 52
root@pwrk-02:~# ip route show default via 192.168.111.189 dev enp6s18 proto static 192.168.111.0/24 dev enp6s18 proto kernel scope link src 192.168.111.198 root@pwrk-02:~# ip route show table 52 100.66.245.64 dev tailscale0 100.100.100.100 dev tailscale0
käimasoleva kohta info küsimine
root@pwrk-02:~# tailscale netcheck 2026/04/25 17:10:02 portmap: monitor: gateway and self IP changed: gw=192.168.111.189 self=192.168.111.198 Report: * Time: 2026-04-25T17:10:02.654619377Z * UDP: true * IPv4: yes, 80.235.106.155:57953 * IPv6: no, unavailable in OS * MappingVariesByDestIP: false * PortMapping: * Nearest DERP: Helsinki * DERP latency: - hel: 12.5ms (Helsinki) - waw: 33.5ms (Warsaw) - ams: 41.7ms (Amsterdam) - fra: 42.1ms (Frankfurt) - par: 49.7ms (Paris) - lhr: 49.8ms (London) - nue: 50.8ms (Nuremberg) - mad: 74.3ms (Madrid) - tor: 115.6ms (Toronto) - nyc: 118.7ms (New York City) - ord: 127.3ms (Chicago) - dbi: 134.5ms (Dubai) - iad: 135.4ms (Ashburn) - den: 147.3ms (Denver) - mia: 156.1ms (Miami) - dfw: 167.5ms (Dallas) - blr: 177.3ms (Bengaluru) - sea: 184.2ms (Seattle) - nai: 186.8ms (Nairobi) - sfo: 187.8ms (San Francisco) - lax: 189ms (Los Angeles) - jnb: 210.3ms (Johannesburg) - hnl: 235ms (Honolulu) - sin: (Singapore) - syd: (Sydney) - tok: (Tokyo) - sao: (São Paulo) - hkg: (Hong Kong)
- UDP: true - udp port punching on kasutusel
Kasulikud lisamaterjalid
- TODO