Tailscale: erinevus redaktsioonide vahel

Allikas: Imre kasutab arvutit
Mine navigeerimisribaleMine otsikasti
(Uus lehekülg: '===Sissejuhatus=== TODO ===Tööpõhimõte=== TODO ===Misc=== käimasoleva kohta info küsimine <pre> root@pwrk-02:~# tailscale netcheck 2026/04/25 17:10:02 portmap: monitor: gateway and self IP changed: gw=192.168.111.189 self=192.168.111.198 Report: * Time: 2026-04-25T17:10:02.654619377Z * UDP: true * IPv4: yes, 80.235.106.155:57953 * IPv6: no, unavailable in OS * MappingVariesByDestIP: false * PortMapping: * Nearest DERP: Helsinki * DERP latency: - hel:...')
 
Resümee puudub
8. rida: 8. rida:
   
 
===Misc===
 
===Misc===
  +
  +
asjasse puutuvad failid sh krüptomateral
  +
  +
<pre>
  +
root@pwrk-02:~# find /var/lib/tailscale/ -ls
  +
787147 4 drwx------ 3 root root 4096 Apr 25 15:29 /var/lib/tailscale/
  +
787040 4 -rw------- 1 root root 2698 Apr 25 15:29 /var/lib/tailscale/tailscaled.state
  +
786536 16 -rw------- 1 root root 15055 Apr 25 13:45 /var/lib/tailscale/derpmap.cached.json
  +
787183 4 -rw------- 1 root root 209 Apr 25 13:42 /var/lib/tailscale/tailscaled.log.conf
  +
786579 4 drwx------ 3 root root 4096 Apr 25 13:45 /var/lib/tailscale/files
  +
787007 4 drwx------ 2 root root 4096 Apr 25 13:45 /var/lib/tailscale/files/imre.oolberg-gmail.com-uid-4916328083301376
  +
787250 0 -rw------- 1 root root 0 Apr 25 16:52 /var/lib/tailscale/tailscaled.log1.txt
  +
787282 0 -rw------- 1 root root 0 Apr 25 17:00 /var/lib/tailscale/tailscaled.log2.txt
  +
</pre>
  +
  +
kus
  +
  +
<pre>
  +
root@pwrk-02:~# cat /var/lib/tailscale/tailscaled.state
  +
{
  +
"_current-profile": "cHJvZmlsZS1iMTA3",
  +
"_machinekey": "cHJpdmtleTpmOGNjYzA2YTgyMDllMTExZDgwZTgxZDMwM ...",
  +
"_profiles": "eyJiMTA3Ijp7IklEIjo ... ",
  +
"profile-b107": "ewoJIk ... "
  +
</pre>
  +
  +
kus
  +
  +
<pre>
  +
# echo "ewoJIk ... " | base64 -d
  +
  +
{
  +
"ControlURL": "https://controlplane.tailscale.com",
  +
"RouteAll": false,
  +
"ExitNodeID": "",
  +
"ExitNodeIP": "",
  +
"InternalExitNodePrior": "",
  +
"ExitNodeAllowLANAccess": false,
  +
"CorpDNS": true,
  +
"RunSSH": false,
  +
"RunWebClient": false,
  +
"WantRunning": true,
  +
"LoggedOut": false,
  +
"ShieldsUp": false,
  +
"AdvertiseTags": null,
  +
"Hostname": "",
  +
"NotepadURLs": false,
  +
"AdvertiseRoutes": null,
  +
"AdvertiseServices": null,
  +
"Sync": null,
  +
"NoSNAT": false,
  +
"NoStatefulFiltering": true,
  +
"NetfilterMode": 2,
  +
"AutoUpdate": {
  +
"Check": true,
  +
"Apply": true
  +
},
  +
"AppConnector": {
  +
"Advertise": false
  +
},
  +
"PostureChecking": false,
  +
"NetfilterKind": "",
  +
"DriveShares": null,
  +
"AllowSingleHosts": true,
  +
"Config": {
  +
"PrivateNodeKey": "privkey:98adf1348de16 ...",
  +
"OldPrivateNodeKey": "privkey:0000000000000000000000000000000000000000000000000000000000000000",
  +
"UserProfile": {
  +
"ID": 49163 ...,
  +
"LoginName": "imre.oolberg@gmail.com",
  +
"DisplayName": "Imre Oolberg",
  +
"ProfilePicURL": "https://lh3.googleusercontent.com/a/ACg8ocJoZc0K7dx ..."
  +
},
  +
"NetworkLockKey": "nlpriv:f7efba98cda43 ...",
  +
"NodeID": "nE1uKyy .."
  +
}
  +
}root@pwrk-02:~#
  +
</pre>
  +
  +
systemd unit
  +
  +
<pre>
  +
root@pwrk-02:~# systemctl status tailscaled
  +
● tailscaled.service - Tailscale node agent
  +
Loaded: loaded (/usr/lib/systemd/system/tailscaled.service; enabled; preset: enabled)
  +
Active: active (running) since Sat 2026-04-25 15:28:10 UTC; 2h 29min ago
  +
Docs: https://tailscale.com/docs/
  +
Main PID: 2400 (tailscaled)
  +
Status: "Connected; imre.oolberg@gmail.com; 100.121.207.99 fd7a:115c:a1e0::1537:cf63"
  +
Tasks: 11 (limit: 9405)
  +
Memory: 15.3M (peak: 17.6M)
  +
CPU: 2.922s
  +
CGroup: /system.slice/tailscaled.service
  +
└─2400 /usr/sbin/tailscaled --state=/var/lib/tailscale/tailscaled.state --socket=/run/tailscale/tailscaled.sock --port=41641
  +
  +
Apr 25 15:29:09 pwrk-02 tailscaled[2400]: health(warnable=wantrunning-false): ok
  +
Apr 25 15:29:09 pwrk-02 tailscaled[2400]: health(warnable=warming-up): ok
  +
Apr 25 15:29:09 pwrk-02 tailscaled[2400]: health(warnable=no-derp-connection): ok
  +
Apr 25 15:29:09 pwrk-02 tailscaled[2400]: magicsock: derp-28 connected; connGen=1
  +
Apr 25 15:29:09 pwrk-02 tailscaled[2400]: health(warnable=no-derp-connection): ok
  +
Apr 25 15:29:09 pwrk-02 tailscaled[2400]: [RATELIMIT] format("health(warnable=%s): ok")
  +
Apr 25 15:29:09 pwrk-02 tailscaled[2400]: control: RegisterReq: got response; nodeKeyExpired=false, machineAuthorized=true; authURL=false
  +
Apr 25 15:29:09 pwrk-02 tailscaled[2400]: control: netmap: got new dial plan from control
  +
Apr 25 15:29:09 pwrk-02 tailscaled[2400]: netmap: suggested exit node: ()
  +
Apr 25 16:51:29 pwrk-02 tailscaled[2400]: wgengine: Reconfig: configuring userspace WireGuard config (with 1/1 peers)
  +
</pre>
  +
  +
Võrguliides noarp point-to-point
  +
  +
<pre>
  +
root@pwrk-02:~# ifconfig tailscale0
  +
tailscale0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> mtu 1280
  +
inet 100.121.207.99 netmask 255.255.255.255 destination 100.121.207.99
  +
unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 txqueuelen 500 (UNSPEC)
  +
RX packets 3 bytes 254 (254.0 B)
  +
RX errors 0 dropped 0 overruns 0 frame 0
  +
TX packets 2 bytes 168 (168.0 B)
  +
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
  +
</pre>
  +
  +
Ruutinguks kasutatakse abistavat nn tabelit nr 52
  +
  +
<pre>
  +
root@pwrk-02:~# ip route show
  +
default via 192.168.111.189 dev enp6s18 proto static
  +
192.168.111.0/24 dev enp6s18 proto kernel scope link src 192.168.111.198
  +
  +
root@pwrk-02:~# ip route show table 52
  +
100.66.245.64 dev tailscale0
  +
100.100.100.100 dev tailscale0
  +
</pre>
   
 
käimasoleva kohta info küsimine
 
käimasoleva kohta info küsimine

Redaktsioon: 25. aprill 2026, kell 21:02

Sissejuhatus

TODO

Tööpõhimõte

TODO

Misc

asjasse puutuvad failid sh krüptomateral

root@pwrk-02:~# find /var/lib/tailscale/ -ls
   787147      4 drwx------   3 root     root         4096 Apr 25 15:29 /var/lib/tailscale/
   787040      4 -rw-------   1 root     root         2698 Apr 25 15:29 /var/lib/tailscale/tailscaled.state
   786536     16 -rw-------   1 root     root        15055 Apr 25 13:45 /var/lib/tailscale/derpmap.cached.json
   787183      4 -rw-------   1 root     root          209 Apr 25 13:42 /var/lib/tailscale/tailscaled.log.conf
   786579      4 drwx------   3 root     root         4096 Apr 25 13:45 /var/lib/tailscale/files
   787007      4 drwx------   2 root     root         4096 Apr 25 13:45 /var/lib/tailscale/files/imre.oolberg-gmail.com-uid-4916328083301376
   787250      0 -rw-------   1 root     root            0 Apr 25 16:52 /var/lib/tailscale/tailscaled.log1.txt
   787282      0 -rw-------   1 root     root            0 Apr 25 17:00 /var/lib/tailscale/tailscaled.log2.txt

kus

root@pwrk-02:~# cat /var/lib/tailscale/tailscaled.state
{
  "_current-profile": "cHJvZmlsZS1iMTA3",
  "_machinekey": "cHJpdmtleTpmOGNjYzA2YTgyMDllMTExZDgwZTgxZDMwM ...",
  "_profiles": "eyJiMTA3Ijp7IklEIjo ... ",
  "profile-b107": "ewoJIk ... "

kus

# echo "ewoJIk ... " | base64 -d

{
	"ControlURL": "https://controlplane.tailscale.com",
	"RouteAll": false,
	"ExitNodeID": "",
	"ExitNodeIP": "",
	"InternalExitNodePrior": "",
	"ExitNodeAllowLANAccess": false,
	"CorpDNS": true,
	"RunSSH": false,
	"RunWebClient": false,
	"WantRunning": true,
	"LoggedOut": false,
	"ShieldsUp": false,
	"AdvertiseTags": null,
	"Hostname": "",
	"NotepadURLs": false,
	"AdvertiseRoutes": null,
	"AdvertiseServices": null,
	"Sync": null,
	"NoSNAT": false,
	"NoStatefulFiltering": true,
	"NetfilterMode": 2,
	"AutoUpdate": {
		"Check": true,
		"Apply": true
	},
	"AppConnector": {
		"Advertise": false
	},
	"PostureChecking": false,
	"NetfilterKind": "",
	"DriveShares": null,
	"AllowSingleHosts": true,
	"Config": {
		"PrivateNodeKey": "privkey:98adf1348de16 ...",
		"OldPrivateNodeKey": "privkey:0000000000000000000000000000000000000000000000000000000000000000",
		"UserProfile": {
			"ID": 49163 ...,
			"LoginName": "imre.oolberg@gmail.com",
			"DisplayName": "Imre Oolberg",
			"ProfilePicURL": "https://lh3.googleusercontent.com/a/ACg8ocJoZc0K7dx ..."
		},
		"NetworkLockKey": "nlpriv:f7efba98cda43 ...",
		"NodeID": "nE1uKyy .."
	}
}root@pwrk-02:~#

systemd unit

root@pwrk-02:~# systemctl status tailscaled
● tailscaled.service - Tailscale node agent
     Loaded: loaded (/usr/lib/systemd/system/tailscaled.service; enabled; preset: enabled)
     Active: active (running) since Sat 2026-04-25 15:28:10 UTC; 2h 29min ago
       Docs: https://tailscale.com/docs/
   Main PID: 2400 (tailscaled)
     Status: "Connected; imre.oolberg@gmail.com; 100.121.207.99 fd7a:115c:a1e0::1537:cf63"
      Tasks: 11 (limit: 9405)
     Memory: 15.3M (peak: 17.6M)
        CPU: 2.922s
     CGroup: /system.slice/tailscaled.service
             └─2400 /usr/sbin/tailscaled --state=/var/lib/tailscale/tailscaled.state --socket=/run/tailscale/tailscaled.sock --port=41641

Apr 25 15:29:09 pwrk-02 tailscaled[2400]: health(warnable=wantrunning-false): ok
Apr 25 15:29:09 pwrk-02 tailscaled[2400]: health(warnable=warming-up): ok
Apr 25 15:29:09 pwrk-02 tailscaled[2400]: health(warnable=no-derp-connection): ok
Apr 25 15:29:09 pwrk-02 tailscaled[2400]: magicsock: derp-28 connected; connGen=1
Apr 25 15:29:09 pwrk-02 tailscaled[2400]: health(warnable=no-derp-connection): ok
Apr 25 15:29:09 pwrk-02 tailscaled[2400]: [RATELIMIT] format("health(warnable=%s): ok")
Apr 25 15:29:09 pwrk-02 tailscaled[2400]: control: RegisterReq: got response; nodeKeyExpired=false, machineAuthorized=true; authURL=false
Apr 25 15:29:09 pwrk-02 tailscaled[2400]: control: netmap: got new dial plan from control
Apr 25 15:29:09 pwrk-02 tailscaled[2400]: netmap: suggested exit node:  ()
Apr 25 16:51:29 pwrk-02 tailscaled[2400]: wgengine: Reconfig: configuring userspace WireGuard config (with 1/1 peers)

Võrguliides noarp point-to-point

root@pwrk-02:~# ifconfig tailscale0
tailscale0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST>  mtu 1280
        inet 100.121.207.99  netmask 255.255.255.255  destination 100.121.207.99
        unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00  txqueuelen 500  (UNSPEC)
        RX packets 3  bytes 254 (254.0 B)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 2  bytes 168 (168.0 B)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

Ruutinguks kasutatakse abistavat nn tabelit nr 52

root@pwrk-02:~# ip route show
default via 192.168.111.189 dev enp6s18 proto static
192.168.111.0/24 dev enp6s18 proto kernel scope link src 192.168.111.198

root@pwrk-02:~# ip route show table 52
100.66.245.64 dev tailscale0
100.100.100.100 dev tailscale0

käimasoleva kohta info küsimine

root@pwrk-02:~# tailscale netcheck
2026/04/25 17:10:02 portmap: monitor: gateway and self IP changed: gw=192.168.111.189 self=192.168.111.198

Report:
	* Time: 2026-04-25T17:10:02.654619377Z
	* UDP: true
	* IPv4: yes, 80.235.106.155:57953
	* IPv6: no, unavailable in OS
	* MappingVariesByDestIP: false
	* PortMapping:
	* Nearest DERP: Helsinki
	* DERP latency:
		- hel: 12.5ms  (Helsinki)
		- waw: 33.5ms  (Warsaw)
		- ams: 41.7ms  (Amsterdam)
		- fra: 42.1ms  (Frankfurt)
		- par: 49.7ms  (Paris)
		- lhr: 49.8ms  (London)
		- nue: 50.8ms  (Nuremberg)
		- mad: 74.3ms  (Madrid)
		- tor: 115.6ms (Toronto)
		- nyc: 118.7ms (New York City)
		- ord: 127.3ms (Chicago)
		- dbi: 134.5ms (Dubai)
		- iad: 135.4ms (Ashburn)
		- den: 147.3ms (Denver)
		- mia: 156.1ms (Miami)
		- dfw: 167.5ms (Dallas)
		- blr: 177.3ms (Bengaluru)
		- sea: 184.2ms (Seattle)
		- nai: 186.8ms (Nairobi)
		- sfo: 187.8ms (San Francisco)
		- lax: 189ms   (Los Angeles)
		- jnb: 210.3ms (Johannesburg)
		- hnl: 235ms   (Honolulu)
		- sin:         (Singapore)
		- syd:         (Sydney)
		- tok:         (Tokyo)
		- sao:         (São Paulo)
		- hkg:         (Hong Kong)
  • UDP: true - udp port punching on kasutusel

Kasulikud lisamaterjalid

  • TODO