Tailscale

Sissejuhatus

TODO

Tööpõhimõte

TODO

Misc

asjasse puutuvad failid sh krüptomateral

root@pwrk-02:~# find /var/lib/tailscale/ -ls
   787147      4 drwx------   3 root     root         4096 Apr 25 15:29 /var/lib/tailscale/
   787040      4 -rw-------   1 root     root         2698 Apr 25 15:29 /var/lib/tailscale/tailscaled.state
   786536     16 -rw-------   1 root     root        15055 Apr 25 13:45 /var/lib/tailscale/derpmap.cached.json
   787183      4 -rw-------   1 root     root          209 Apr 25 13:42 /var/lib/tailscale/tailscaled.log.conf
   786579      4 drwx------   3 root     root         4096 Apr 25 13:45 /var/lib/tailscale/files
   787007      4 drwx------   2 root     root         4096 Apr 25 13:45 /var/lib/tailscale/files/imre.oolberg-gmail.com-uid-4916328083301376
   787250      0 -rw-------   1 root     root            0 Apr 25 16:52 /var/lib/tailscale/tailscaled.log1.txt
   787282      0 -rw-------   1 root     root            0 Apr 25 17:00 /var/lib/tailscale/tailscaled.log2.txt

kus

root@pwrk-02:~# cat /var/lib/tailscale/tailscaled.state
{
  "_current-profile": "cHJvZmlsZS1iMTA3",
  "_machinekey": "cHJpdmtleTpmOGNjYzA2YTgyMDllMTExZDgwZTgxZDMwM ...",
  "_profiles": "eyJiMTA3Ijp7IklEIjo ... ",
  "profile-b107": "ewoJIk ... "

kus

# echo "ewoJIk ... " | base64 -d

{
	"ControlURL": "https://controlplane.tailscale.com",
	"RouteAll": false,
	"ExitNodeID": "",
	"ExitNodeIP": "",
	"InternalExitNodePrior": "",
	"ExitNodeAllowLANAccess": false,
	"CorpDNS": true,
	"RunSSH": false,
	"RunWebClient": false,
	"WantRunning": true,
	"LoggedOut": false,
	"ShieldsUp": false,
	"AdvertiseTags": null,
	"Hostname": "",
	"NotepadURLs": false,
	"AdvertiseRoutes": null,
	"AdvertiseServices": null,
	"Sync": null,
	"NoSNAT": false,
	"NoStatefulFiltering": true,
	"NetfilterMode": 2,
	"AutoUpdate": {
		"Check": true,
		"Apply": true
	},
	"AppConnector": {
		"Advertise": false
	},
	"PostureChecking": false,
	"NetfilterKind": "",
	"DriveShares": null,
	"AllowSingleHosts": true,
	"Config": {
		"PrivateNodeKey": "privkey:98adf1348de16 ...",
		"OldPrivateNodeKey": "privkey:0000000000000000000000000000000000000000000000000000000000000000",
		"UserProfile": {
			"ID": 49163 ...,
			"LoginName": "imre.oolberg@gmail.com",
			"DisplayName": "Imre Oolberg",
			"ProfilePicURL": "https://lh3.googleusercontent.com/a/ACg8ocJoZc0K7dx ..."
		},
		"NetworkLockKey": "nlpriv:f7efba98cda43 ...",
		"NodeID": "nE1uKyy .."
	}
}root@pwrk-02:~#

systemd unit

root@pwrk-02:~# systemctl status tailscaled
● tailscaled.service - Tailscale node agent
     Loaded: loaded (/usr/lib/systemd/system/tailscaled.service; enabled; preset: enabled)
     Active: active (running) since Sat 2026-04-25 15:28:10 UTC; 2h 29min ago
       Docs: https://tailscale.com/docs/
   Main PID: 2400 (tailscaled)
     Status: "Connected; imre.oolberg@gmail.com; 100.121.207.99 fd7a:115c:a1e0::1537:cf63"
      Tasks: 11 (limit: 9405)
     Memory: 15.3M (peak: 17.6M)
        CPU: 2.922s
     CGroup: /system.slice/tailscaled.service
             └─2400 /usr/sbin/tailscaled --state=/var/lib/tailscale/tailscaled.state --socket=/run/tailscale/tailscaled.sock --port=41641

Apr 25 15:29:09 pwrk-02 tailscaled[2400]: health(warnable=wantrunning-false): ok
Apr 25 15:29:09 pwrk-02 tailscaled[2400]: health(warnable=warming-up): ok
Apr 25 15:29:09 pwrk-02 tailscaled[2400]: health(warnable=no-derp-connection): ok
Apr 25 15:29:09 pwrk-02 tailscaled[2400]: magicsock: derp-28 connected; connGen=1
Apr 25 15:29:09 pwrk-02 tailscaled[2400]: health(warnable=no-derp-connection): ok
Apr 25 15:29:09 pwrk-02 tailscaled[2400]: [RATELIMIT] format("health(warnable=%s): ok")
Apr 25 15:29:09 pwrk-02 tailscaled[2400]: control: RegisterReq: got response; nodeKeyExpired=false, machineAuthorized=true; authURL=false
Apr 25 15:29:09 pwrk-02 tailscaled[2400]: control: netmap: got new dial plan from control
Apr 25 15:29:09 pwrk-02 tailscaled[2400]: netmap: suggested exit node:  ()
Apr 25 16:51:29 pwrk-02 tailscaled[2400]: wgengine: Reconfig: configuring userspace WireGuard config (with 1/1 peers)

Võrguliides noarp point-to-point

root@pwrk-02:~# ifconfig tailscale0
tailscale0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST>  mtu 1280
        inet 100.121.207.99  netmask 255.255.255.255  destination 100.121.207.99
        unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00  txqueuelen 500  (UNSPEC)
        RX packets 3  bytes 254 (254.0 B)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 2  bytes 168 (168.0 B)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

Ruutinguks kasutatakse abistavat nn tabelit nr 52

root@pwrk-02:~# ip route show
default via 192.168.111.189 dev enp6s18 proto static
192.168.111.0/24 dev enp6s18 proto kernel scope link src 192.168.111.198

root@pwrk-02:~# ip route show table 52
100.66.245.64 dev tailscale0
100.100.100.100 dev tailscale0

käimasoleva kohta info küsimine

root@pwrk-02:~# tailscale netcheck
2026/04/25 17:10:02 portmap: monitor: gateway and self IP changed: gw=192.168.111.189 self=192.168.111.198

Report:
	* Time: 2026-04-25T17:10:02.654619377Z
	* UDP: true
	* IPv4: yes, 80.235.106.155:57953
	* IPv6: no, unavailable in OS
	* MappingVariesByDestIP: false
	* PortMapping:
	* Nearest DERP: Helsinki
	* DERP latency:
		- hel: 12.5ms  (Helsinki)
		- waw: 33.5ms  (Warsaw)
		- ams: 41.7ms  (Amsterdam)
		- fra: 42.1ms  (Frankfurt)
		- par: 49.7ms  (Paris)
		- lhr: 49.8ms  (London)
		- nue: 50.8ms  (Nuremberg)
		- mad: 74.3ms  (Madrid)
		- tor: 115.6ms (Toronto)
		- nyc: 118.7ms (New York City)
		- ord: 127.3ms (Chicago)
		- dbi: 134.5ms (Dubai)
		- iad: 135.4ms (Ashburn)
		- den: 147.3ms (Denver)
		- mia: 156.1ms (Miami)
		- dfw: 167.5ms (Dallas)
		- blr: 177.3ms (Bengaluru)
		- sea: 184.2ms (Seattle)
		- nai: 186.8ms (Nairobi)
		- sfo: 187.8ms (San Francisco)
		- lax: 189ms   (Los Angeles)
		- jnb: 210.3ms (Johannesburg)
		- hnl: 235ms   (Honolulu)
		- sin:         (Singapore)
		- syd:         (Sydney)
		- tok:         (Tokyo)
		- sao:         (São Paulo)
		- hkg:         (Hong Kong)

• UDP: true - udp port punching on kasutusel

Kasulikud lisamaterjalid

• TODO