Wireguard works well, why not tailscale too?

[kriptomahsun]

I tested wireguard on freebsd. It works well. But just curious does it run on freebsd kernel level, or userspace? Because on Linux it works on kernel, which is much faster.

But tailscale doesn't work. I select an exit node for the system to use, but it doesn't do anything. IP address is still the same as before.

 

[ccammack]

I'm currently running tailscale on a 14.2 RELEASE server using the default setup and it seems to be working well.

 

[Jose]

I tested wireguard on freebsd. It works well. But just curious does it run on freebsd kernel level, or userspace? Because on Linux it works on kernel, which is much faster.

Kernel-mode Wireguard is available on Freebsd 13.2 and higher.

13.2-RELEASE brings back the Wireguard driver to FreeBSD

WireGuard driver has been reintegrated into FreeBSD 13.2-RELEASE

unfriendlygrinch.info

 

[kriptomahsun]

Kernel-mode Wireguard is available on Freebsd 13.2 and higher.

13.2-RELEASE brings back the Wireguard driver to FreeBSD

WireGuard driver has been reintegrated into FreeBSD 13.2-RELEASE

unfriendlygrinch.info

Hmm ok, do I get it with sudo pkg install wireguard-tools, am I right?

 

[Jose]

Hmm ok, do I get it with sudo pkg install wireguard-tools, am I right?

K

Post in thread 'Setup wireguard between two 13.2+ FreeBSD hosts'

May 27, 2023

Although net/wireguard-kmod and net/wireguard-go are no longer required, net/wireguard-tools provides /usr/local/bin/wg-quick and /usr/local/etc/rc.d/wireguard so you can put wireguard_enable="YES" and wireguard_interfaces="wg0" in /etc/rc.conf.

• kjeacle

• 
• 

 

[kriptomahsun]

I'm currently running tailscale on a 14.2 RELEASE server using the default setup and it seems to be working well.

What are you doing differently? I am just doing these:
sudo tailscale up
(logging into the link it gives)
sudo tailscale set --exit-node=ipofthemachine
It seems to work. But when I do whats my ip, I still get the same ip as before.

 

[ccammack]

What are you doing differently?

ccammack@server:~ $ su
Password:
root@server:~ # pkg install tailscale
root@server:~ # sysrc tailscaled_enable="YES"
root@server:~ # service tailscaled start
root@server:~ # reboot
ccammack@server:~ $ su
Password:
root@server:/home/ccammack # tailscale login
root@server:/home/ccammack # tailscale status

 

[kriptomahsun]

ccammack@server:~ $ su
Password:
root@server:~ # pkg install tailscale
root@server:~ # sysrc tailscaled_enable="YES"
root@server:~ # service tailscaled start
root@server:~ # reboot
ccammack@server:~ $ su
Password:
root@server:/home/ccammack # tailscale login
root@server:/home/ccammack # tailscale status

Yes but does setting an exit node work? If you have a desktop PC or a laptop, can you connect to a tailscale node, using that node as an exit node?

Mind you that I don't use any jails or anything. I am a simple user that uses Linux.

Btw sorry, I installed Ghostbsd to one of the laptops. Desktop is FreeBSD, I'll try on that when I go home.

 

[GogoFC]

Tailscale broke my DNS on two Debian machines. Dekstop and Laptop. Because Tailscale uses /etc/resolv.conf in some Linux systems. When I did tailscale down it didn't revert back the resolv.conf file leaving 100.100.100.100 in it and breaking my DNS. Coincidentally my ISP also has one of these rougue DNS servers on this same IP which is also reachable and all of my DNS queries went to the ISP website. I thought someone broke my network for about an hour until I figured the quad 100 is used by Tailscale.

I use Tailscale inside of a VM now.

 

[ccammack]

Yes but does setting an exit node work? If you have a desktop PC or a laptop, can you connect to a tailscale node, using that node as an exit node?

One step at a time. Does the basic setup allow you to see and reach other machines on your tailnet?

 

[kriptomahsun]

One step at a time. Does the basic setup allow you to see and reach other machines on your tailnet?

Ok, I've upgraded to FreeBSD 14.2, here I can't reach the other peers in tailscale network. But internet works, yet it shows wrong IP; it must show the tailscale exit node ip.

 

[patmaddox]

Tailscale is "community supported" on FreeBSD - meaning that Tailscale doesn't really develop for it. They'll accept PRs for it.

Exit nodes are one of the things that the Tailscale client doesn't currently support. Mostly it's down to assumptions that Tailscale makes about underlying network / routing features.

Details and workaround here: https://github.com/tailscale/tailscale/issues/10024