this post was submitted on 24 Oct 2023
37 points (95.1% liked)

Linux

48329 readers
1418 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 5 years ago
MODERATORS
 

I would really really really like to have one device on my tailnet as the exitnode for all other devices on the tailnet. However, most VPNs make this really difficult. Is there any way to do this? I've read it's possible with split-tunnelling, but ProtonVPN (which I use) doesn't support that. I just installed Alpine Linux on my RPI 4b. And would like to use this as my exit node. Does anyone have any tips for how this could be done?

you are viewing a single comment's thread
view the rest of the comments
[–] BaalInvoker@lemmy.eco.br 2 points 1 year ago* (last edited 1 year ago) (1 children)

With Tailscale you have only to declare this device as exit node. It's just one single command, pretty simple

Edit:

Here's how: https://tailscale.com/kb/1103/exit-nodes/#step-2-advertise-a-device-as-an-exit-node

[–] LunchEnjoyer@lemmy.world 5 points 1 year ago* (last edited 1 year ago) (1 children)

Right that is pretty much clear, but I want this exit node to be running ProtonVPN as well. This however does not seem to be possible (to my knowledge). Edit: This is also why Tailscale added support for Mullvad VPN i assume.

[–] BaalInvoker@lemmy.eco.br 3 points 1 year ago* (last edited 1 year ago) (1 children)

Ok... I think I didn't get what you're trying to say. Do you wanna run a VPN through a VPN?

I mean, you have your RPI 4b as a Tailscale exit node, but the RPI 4b itself connects to the ProtonVPN?

[–] LunchEnjoyer@lemmy.world 3 points 1 year ago* (last edited 1 year ago) (1 children)

Right, so I've got Alpine on the RPI, and have installed/configured protonvpn with wireguard. However, if I then start Tailscale, the already running ProtonVPN connection goes down. Same happens if Tailscale is already running, and I try to start the ProtonVPN connection it will just refuse the connection.

I want it to connect to both services, as then this can act as the exitnode for all other devices on the tailnet. Whilst also giving the benefit of ""being in a different location"" with protonvpn.

So essentially, both services wants to use /dev/net/tun, but only one can.

[–] BaalInvoker@lemmy.eco.br 3 points 1 year ago (1 children)

Well, I found this article saying that theoretically is possible, however not so much. It says that depends on how the other VPN works. They even suggest some workarounds, so take a look

Anyway, have you tried to create another tun/tap service to run both VPN?

[–] LunchEnjoyer@lemmy.world 2 points 1 year ago (1 children)

Yeah already scoured their documentation for this, but no luck with any of the workarounds sadly.

Have not tried to do the latter you mentioned though? Not sure how to do that, but I will look into it asap.

[–] BaalInvoker@lemmy.eco.br 1 points 1 year ago

I never had to create a new TUN/TAP interface before, so I'm on the same boat as you. I'm brainstorming here with you and hoping for the best

But here is how to create a new tun interface:

https://www.baeldung.com/linux/create-check-network-interfaces

You'll have to manually set some parameters to make it work, I guess