Cannot express how glad I am I've found your video channel. I have subscribed immediately. Your style and voice are perfect for me to learn from. Perfect speed as well, usually these speakers are too fast or too slow or trying to be funny or sell you something. Best channel on youtube!! Thanks so much!
I cannot express how grateful I am for your videos. The way that you communicate is perfect for the way that I learn. Thank you greatly for all of your work and effort.
I must have watched just about every YT video on Tailscale ( yours are certainly among the best ). But, what I found to be missing was how to get files from my remote device onto my local device. So, for the others out there in the same boat, this is what I did : 1) On your Synology NAS - Control Panel \ Terminal & SNMP \ Terminal , check the "Enable SSH Service" box 2) Download the free file transfer utility, WinSCP from winscp DOT net . 3) Install WinSCP on your local computer. 4) With WinSCP, login to your remote Synology using : File protocol - SFTP, Host name - the IP address that Tailscale assigns to your remote Synology NAS, Port number - 30 ( that seems to be universal ), User name and password as appropriate for your NAS Then you get a window on the right populated with your remote NAS folders and files much like Windows Explorer. There are some interesting feature for syncing here but it works pretty much like using Windows Explorer. I hope that fills in a gap for some of you new Tailscale users like me.
Very helpful tutorial. It helped me setup Tailscale easily. I am able to access both my local and remote Synology NAS’s, both DSM through a web browser and File Explorer. And Hyper Backup works from my local to remote NAS. What no longer works is CMS on the remote NAS. I’ve tried disjoining and rejoining, but get a message back saying “Cannot be added to CMS Host”. BTW, I am using Tailscale’s IP for the remote NAS. Love to see a Tutorial on how to do this correctly. Thanks! 👍🏻👍🏻
Very good video with clear step-by-step instructions. I'd never used puTTy before and had a little problem trying to enter my password until I found out that puTTy doesn't show anything when you type in the password field. After that, and the spacing between the commands got sorted, everything went fine, just as you showed. Thank you.
So can you use both Quickconnect AND Tailscale like this, at the same time? Or will I have to stop using Quickconnect and use this method instead to connect to my NAS externally? Also... I use Quickconnect currently and use the "file and folder sharing" facility from within File Station to externally share files and folder access to members of my family. Can I continue to use that or will setting this up somehow compromise that method and prevent it from working and them accessing files and folders on my NAS? Sorry, I know it's a lot of questions, but you explain things so clearly and your videos are great for learning how to find your way around a NAS, even if the user is a beginner! Thanks!
That is correct, you can run both! Tailscale just allows you to access the services on your NAS, as well as other services on your local network (if desired). QuickConnect is great for things like sharing files, accessing Synology apps, etc, but if you want to access Plex (just an example), it won't work. Tailscale WILL work, because it's a VPN, meaning that you have access to everything. So in summary, yes, you can continue to use QuickConnect as well!
Really appreciate your detailed way of explaining solutions. Just one answer: would be possible to use Plex on Synology with Taiscale from remote smart tv and eventually how?
Thanks! Assuming that there's an app for the TV (which as of right now, there might not be), you'd have to connect with the app to Tailscale, then connect to Plex. It would work similarly to how it does on a cell phone when you're outside of your local network.
@@WunderTechTutorials Ok thanks. By the way by trying to get my Synology nas to be an exit node it seems that the preequisites indicated by the official guide (version should be at least 1.20) and in fact the existing install version by Synology is 1.16, so the full-tunnel VPN doesn't work. Have searched and in fact it' possible to upgrade to 1.26 manually, but in this case is it better to reverse the previous configuration thru ssh (and how?) before upgrading?
As usual great content. I particularly appreciate your written blog which allows to follow what you show. Big fan of your synology posts. One question though. When i try to connect to my synology through the tailscale ip using :5001 on my ipad, i get warning that the connexion is not secure. I need to accept the risk to log in. But once connected. There is a closed padlock next to the url. I guess this is a certificate issue. I searched the web for that and found several solutions requiring setting up a certificate using commands like tailscale cert and moving the certificate around. Got lost and did not try this. Would be great if you could do a video on that and how to i port the tailscale certificate to various clients.
Thanks! The warning is normal if you don't have a valid cert, though I wouldn't personally use Tailscale to issue certs. The best way to do it (in my opinion) is by using an internal reverse proxy server + DNS server, but it...gets a little messy. I have a newer video on creating one (ruclips.net/video/0f43UcKeKmk/видео.html), but this is really only one way to do it.
@@WunderTechTutorials thanks, do you know if you'd still need to select port 6281 on the backup destination settings window even when using Tailscale to get hyperbackup working? I would have thought that Tailsciale would have eliminated the need to open ports like that?
@@Tetra84 Yes, you need to use the port. You don't need to port forward it (on your router), but Hyper Backup must know which port to access for it to work.
Hi i got 2 questions: On my phone, if this is a split tunneling, can i permanently leave on the tailscale toggle? which from my understanding means only connecting home will be secured, and any other internet browsing will be left intact ( and at the maximum speed because its not vpn-ed) ? Second question is, if i use exit node and make it into a full-tunnel, is my general browsing and downloading speed slowed down ? who processes that VPN? through which servers ? Who will dictate my internet speed then ?
Yes, you can use the split tunnel always and it'll route the traffic to your local network if it's requested. A FT VPN will slow down your network traffic and the speeds generally depend on the download/upload speeds of the network you're connected to and the network the Tailscale server is hosted on.
Great video! I was wondering, if you set up tailscale on your mobile device then are you able to directly open Synology apps? Or do you have to change how you log into the apps? For example, Synology photos, drive or Plex?
That is correct! You'll have to ensure that local traffic is allowed to the subnet, but you'd be able to access everything using the local IP addresses of those devices.
@@WunderTechTutorials Thanks! i just installed tailscale on my NAS and mobile device. I was wondering, when I log into the mobile synology drive app, does it just go through tailscale now? It seems like I have to use the DSM through a browser on my mobile device to access synology drive instead of the mobile app itself. Is this correct?
@@cheezeballcity No, you should be able to use it with the mobile app. Were you using QuickConnect? You want to make sure that the connection is using the NAS's local IP address.
Not everything worked for me. Was unable to use split VPN tunnel (only NAS was accessible and only through Tailscale IP adress) and my local network was still inaccessible in both split/full VPN. Didn't get "Success" after SSH into NAS and inserting command mentioned in descripion. Yup i'm zero in Linux, i know. But using Tailscale to make VPN connection to NAS and using it like an exit node is quite useful for scenario of unknown wifi usage necessity. Finding many really cool things on this channel. Many thanks.
Hey got the same problem here, I can't have the success message, but still if I go in edit route settings I have the IP address that I have put in the command. So I guess it's working right ? But can't see the address in grey under the address provided by tailscale... And totally unable to connect to the IP address that I have put in the command... If you have find the solution I would be really gratefull if you can share it :) !
From a purely "ease of use" standpoint, Tailscale is superior. With that said, it's not a "traditional" VPN, meaning you are relying on Tailscale to maintain their service in order for you to connect to your local network. If you hosted your own VPN, as long as that VPN server is online, you'll always be able to connect to it and there's not a third-party that you need to worry about. You're also relying on them for their security practices, etc, where you would control everything by running your own. I use my own VPN server (I run both, WireGuard and OpenVPN) and that will not change. However, I was INCREDIBLY impressed that you could have a fully functional VPN in a few minutes, and the performance was incredibly similar to my self-hosted VPN's (couldn't really notice a difference). I apologize for the long-winded response, but ultimately, I think that it depends. From my perspective, self-hosted VPN solutions are superior since you're managing everything, but if you don't want to port forward, you're afraid of managing the security, or if you want something that just "works" with a very quick setup, Tailscale is awesome!
Hi, for some reason, I cannot see my docker containers that are running on a macvlan network (as you showed how to do in other tutorials). How can i connect to docker containers running on macvlan docker network with its own ip separate from the NAS? I tried accessing with the IP addresses i normally use when i was full tunnelled with tailscale but they would refuse to connect. How can i access the docker container services running on that macvlan with tailscale installed on the docker host synology
When you say that you can't connect, is it through Tailscale specifically or another VPN? Are you trying to access them through the bridge IP address? That should fix the issue if you're accessing them through the macvlan IP.
Hi Frank, thank you, your video! Could you please explain how to setup a reverse proxy or so so I do not have to use port numbers to access paperless or other containers?
Thanks! You can get it to work, but a reverse proxy server is generally used to expose services to the external internet. Basically, you'll have to use the same process as exposing it externally but use an internal DNS server to point directly to the local service. It's not the cleanest way, and definitely not the best way to use a NAS. I have a video using a ZimaBoard that shows how it can be done if you're interested but I don't have step-by-step instructions unfortunately.
unfortunately, the current version of tailscale apparently does not have the "advertise-routes" command? I am getting a "command not found" error on my SSH command line. Similarly, advertise command fails... :-(
What additional steps are needed to access the AdGuard LAN page and use AdGuard as a Tailscale nameserver? Would be great to have AdGuard on the go. Name resolution only works when I use my normal internal nameserver, not AdGuard. I can't ping the AdGuard IP either. I do have an allow firewall entry on my Synology to the AdGuard IP. It must be related to me running AdGuard as a Synology container that uses a bridge network.
@@WunderTechTutorials I am using a bridge network and that IP is not reachable by any LAN or TS client. Only the NAS can ping it. Also, the NAS cannot ping the macvlan IP of AdGuard. Only LAN clients can initially. If I move the subnet router to another TS client then I'm good. I can ping the macvlan IP from any LAN or TS client, I can reach the AdGuard console page, and I can use AdGuard as a nameserver in TS which is the end goal. Would prefer to have the subnet router setup on my NAS since it's always powered on.
@@TheMattMustain My thoughts are that since the NAS is hosting TS and AdGuard, I'd imagine using the bridge IP would be required. Does it not work with the bridge IP? If it doesn't, chances are high it has to do with a conflict with how the NAS is managing both connections and I wouldn't really be able to say which IP to use. It would really require a bunch of diagnosis and testing, but I'm sure you can get it working somehow.
If you're using Tailscale as a full tunnel VPN, will Docker containers also send their traffic through it? If not, is there a way to possibly set up a Docker container to forward its traffic through a different VPN?
I'm not exactly sure what you mean by the docker containers using them. Generally, this only applies if you're connecting from an external network so only that external device will be impacted.
Thank you Frank for a great video. I tried to advertise an extra vlan beside the one where tailscale is installed on a nas.But I could not use both subnets. Is there a way to accomplish this. I am trying to login to IoT vlan from outside. Thank you
I'm not absolutely positive about this, but I think you'd need to make it so that the VLAN where the NAS is can access the IoT network. If it can, I think you'll be able to access it through the VPN.
@@WunderTechTutorials thank you, I use CloudFlare's tunnel and was thinking it would be like this, instead of an IP address I could use my domain. I have to play around with that to get it in my head how it works. Thanks for your videos 👍
@@WunderTechTutorials At 1:46, in the address bar, https has a line through it, which means DSM tried to establish a HTTPS connection but failed, so it fell back on HTTP. I was curious on how you'd fix this?
@@gentiang Gotcha - that's just because you're not using a valid SSL certificate. Technically, HTTPS is still being used. The only way to avoid that is to set up a proper domain and SSL certificate.
If you didn't get a success message, that's going to be the problem because that's how you can use the local IP. I'd try again if possible and if it still doesn't work, uninstall the app and then reinstall it and try again.
@@WunderTechTutorials unistall on the synology or the conneting devive? or both? The NAS does show the subnet and exit node badges in the dashboard after the command so something is happening access via internal ip isnt working
@@bartsprengelmeijer4825 Well, I guess that depends on if any devices are working. If you have certain devices working, then the server is fine. If no devices are working, then there's probably an issue on the server (NAS).
I found the issue, or rather the fix. In the app after I select "Use exit node" and select the Synology, I am then able to reach the nas (and other devices) using there internal IP address. Any idea why I need to select that? In your video it looks like that was only necessary for the full tunnel VPN or I'm mistaken
@@bartsprengelmeijer4825 Glad you found the fix. I don't remember that being necessary, but I kind of remember there being a second option as well. Did you happen to select two different options or was it just the exit node?
I'll add it to my list! For now, here's a video I did on self-hosted VPN's vs QuickConnect (Tailscale is included in it): ruclips.net/video/l5YxO86SbRw/видео.html
Hi, I'm not sure why but my last comment seems to have been deleted. My apologies if I broke a rules. I was wondering if you could tell me if there was a way to use Tailscale to connect two Synology devices to each other over the Net. I have a box at the office and smaller one at home. Because I don't have control over the router at the office location, I'm using Quickconnect to connect the two devices and then the Synology drive admin console to sync them, I then have the drive software on my PC, this means that I can download stuff overnight onto the Synology and turn off my PC, however synchronising through Quickconnect is very slow. Any thoughts on how to implement Tailscale in this scenario? Cheers and appreciate all the work you do in making these very helpful tutorials.
Just wanted to add a couple of things to the above as I've been experimenting a little more with this. I have Tailscale running on both Synology NAS devices. I have tried to input the Tailscale i.p. address into the 'Remote NAS address' entry in the 'Connect to you remote Synology NAS' setup window in the 'Synology Drive Sharesync' app but I get a 'Connection failed......' message. I'm using an admin account as the login. I can't seem to figure out how to get this too work. It may be the case that this method won't work and that Tailscale won't allow out going connections from the Synology, aby thoughts would be gratefully appreciated.
Ok I'm sorry for bombarding this thread but I found a little more info about the issues with Tailscale and DSM 7 blocking outbound access. Frank would you be able to do a little tutorial for us using this info: #enabling-synology-outbound-connections found on the tailscale website in the docs. (I worry that if I publish the address wholesale it might cause my comment to be deleted.) Although it may look simple to some your videos are must more user friendly!
OK Think I figured it out. After doing everything in the video above you then add the three commands found in the documents page as referenced above. "# These three commands are only needed once and persist over restarts. sudo mkdir -p /dev/net sudo mknod /dev/net/tun c 10 200 sudo chmod 0666 /dev/net/tun " (Please check the document before you use these commands as things might have changed since I posted this.) You then need to restart the tailscale synology app. Fingers crossed you can then send data out of the synology using the Tailscale tunnel. Note I believe that if you turn off your Synology you may need to reenter these commands however there is a work around to that that is also documented but requires a manual tailscale software install upgrade to 1.22 (at the time of writing the Synology package was at 1.16.2. I hope this is helpful to others with the same requirement.
@@darkerbright Sorry for not getting to this in time, but glad that you got it working! The Tailscale implementation on DSM 7 isn't ideal from a permission perspective, but as you saw, there are ways around it - glad you figured it out.
@@WunderTechTutorials Not at all, thanks for responding and sorry for clogging up the comments, I probably should have asked these questions on your website, but I got a little carried away. Keep up the great work.
Thanks, Frank. A VPN that actually works for me. At 4:07 what password are they looking for? The DSM admin password? the password for the Gmail account I registered with? None of them work. get timed out at 3 guesses.
@@WunderTechTutorials Thanks, Frank. Tried it again this morning. Although I did NOT get a success message I now have access to subnets and Exit node on the machines console. Laptop works with Cellular wifi tether. Need to test on exterior wifi. Plex works great. Even using the Android app.
Did someone have problem after installing tailscale and turning it on? After joining to TS i could access my DSM only via TS instead of local ip or TS ;)
You have to be careful with tailscale on Android. I was using it and was not able to get rcs messages from Google messages. Apparently they are aware of this issue, not sure if they fixed it yet
![ARGENTINA vs. BOLIVIA [6-0] | RESUMEN | ELIMINATORIAS SUDAMERICANAS | FECHA 10](http://i.ytimg.com/vi/C3wPtKNbAOA/mqdefault.jpg)
Cannot express how glad I am I've found your video channel. I have subscribed immediately. Your style and voice are perfect for me to learn from. Perfect speed as well, usually these speakers are too fast or too slow or trying to be funny or sell you something. Best channel on youtube!! Thanks so much!
I'm glad it helped and really appreciate the kind words! Thanks so much!
I switched from Quickconnect and Openvpn(using your videos ) to Tailscale without any problems :) Split and Full tunnel of course with your guide !!!
Glad to hear you got it all working!
Just started my journey with NAS systems. This channel is pure gold, i can not describe how much you helped me. Cheers!
Glad it all helped! Thanks for watching!
I cannot express how grateful I am for your videos. The way that you communicate is perfect for the way that I learn. Thank you greatly for all of your work and effort.
I truly appreciate the kind words! Thank you so much for your support and for watching!
Frank, you are a true lifeline for all things Synology ! Thanks for all you do!!
Glad that the videos help, thanks for watching!
Awesome video Frank! So much easier to set up on the Synology than Zerotier. Have a great day!
Thanks so much, Tony! Totally agree, it's really a great tool. Hope you have a great night!
Perfect video Frank! Tailscale is like an underrated jewel! so easy to setup, so efficient. The video showed that perfectly!
Thanks so much for watching, Avi! It really is! Thanks for the kind words!
Nice video - short and crisp for the ones in a hurry, long version for advanced. Good balance between explaining and showing!
I must have watched just about every YT video on Tailscale ( yours are certainly among the best ). But, what I found to be missing was how to get files from my remote device onto my local device. So, for the others out there in the same boat, this is what I did :
1) On your Synology NAS - Control Panel \ Terminal & SNMP \ Terminal , check the "Enable SSH Service" box
2) Download the free file transfer utility, WinSCP from winscp DOT net .
3) Install WinSCP on your local computer.
4) With WinSCP, login to your remote Synology using :
File protocol - SFTP,
Host name - the IP address that Tailscale assigns to your remote Synology NAS,
Port number - 30 ( that seems to be universal ),
User name and password as appropriate for your NAS
Then you get a window on the right populated with your remote NAS folders and files much like Windows Explorer. There are some interesting feature for syncing here but it works pretty much like using Windows Explorer.
I hope that fills in a gap for some of you new Tailscale users like me.
Very helpful tutorial. It helped me setup Tailscale easily. I am able to access both my local and remote Synology NAS’s, both DSM through a web browser and File Explorer. And Hyper Backup works from my local to remote NAS. What no longer works is CMS on the remote NAS. I’ve tried disjoining and rejoining, but get a message back saying “Cannot be added to CMS Host”. BTW, I am using Tailscale’s IP for the remote NAS. Love to see a Tutorial on how to do this correctly. Thanks! 👍🏻👍🏻
Another superb video from WunderTech! This channel is probably my favorite Synology how to resource.
Thank you very much!
Very good video with clear step-by-step instructions. I'd never used puTTy before and had a little problem trying to enter my password until I found out that puTTy doesn't show anything when you type in the password field. After that, and the spacing between the commands got sorted, everything went fine, just as you showed. Thank you.
Glad you got it working!
Hi once you do the command it asks for the password is the password for your Synology or for the tail scale idk if I'm doing this right lol
This is what I have been looking for since about 6 months ago, thank you so much!
Thank you! This video was gold!
So can you use both Quickconnect AND Tailscale like this, at the same time? Or will I have to stop using Quickconnect and use this method instead to connect to my NAS externally? Also... I use Quickconnect currently and use the "file and folder sharing" facility from within File Station to externally share files and folder access to members of my family. Can I continue to use that or will setting this up somehow compromise that method and prevent it from working and them accessing files and folders on my NAS? Sorry, I know it's a lot of questions, but you explain things so clearly and your videos are great for learning how to find your way around a NAS, even if the user is a beginner! Thanks!
That is correct, you can run both! Tailscale just allows you to access the services on your NAS, as well as other services on your local network (if desired).
QuickConnect is great for things like sharing files, accessing Synology apps, etc, but if you want to access Plex (just an example), it won't work. Tailscale WILL work, because it's a VPN, meaning that you have access to everything.
So in summary, yes, you can continue to use QuickConnect as well!
@@WunderTechTutorials Superb! Thank you so much for answering my questions, I really appreciate it.
Really appreciate your detailed way of explaining solutions. Just one answer: would be possible to use Plex on Synology with Taiscale from remote smart tv and eventually how?
Thanks! Assuming that there's an app for the TV (which as of right now, there might not be), you'd have to connect with the app to Tailscale, then connect to Plex. It would work similarly to how it does on a cell phone when you're outside of your local network.
@@WunderTechTutorials Ok thanks. By the way by trying to get my Synology nas to be an exit node it seems that the preequisites indicated by the official guide (version should be at least 1.20) and in fact the existing install version by Synology is 1.16, so the full-tunnel VPN doesn't work. Have searched and in fact it' possible to upgrade to 1.26 manually, but in this case is it better to reverse the previous configuration thru ssh (and how?) before upgrading?
@@luigir6280 If you want to uninstall it, you can definitely do that from DSM and it should revert back to stock where you can then install manually.
As usual great content. I particularly appreciate your written blog which allows to follow what you show.
Big fan of your synology posts.
One question though.
When i try to connect to my synology through the tailscale ip using :5001 on my ipad, i get warning that the connexion is not secure. I need to accept the risk to log in.
But once connected. There is a closed padlock next to the url.
I guess this is a certificate issue. I searched the web for that and found several solutions requiring setting up a certificate using commands like tailscale cert and moving the certificate around. Got lost and did not try this.
Would be great if you could do a video on that and how to i port the tailscale certificate to various clients.
Thanks! The warning is normal if you don't have a valid cert, though I wouldn't personally use Tailscale to issue certs. The best way to do it (in my opinion) is by using an internal reverse proxy server + DNS server, but it...gets a little messy. I have a newer video on creating one (ruclips.net/video/0f43UcKeKmk/видео.html), but this is really only one way to do it.
I am gonna have to subscribe to your channel for how useful this post was....
Thanks so much!
Excellent video thank you been using tailscale for few months on my synology great tool find it better then zerotier
Great guide! But is it possible to backup your NAS with hyperbackup/vault to another NAS using Tailscale? if so to you have a guide for that?
I haven't personally done that, but no reason to believe you can't! You'd have to use the Tailscale IP (I think this would be the easiest way).
@@WunderTechTutorials thanks, do you know if you'd still need to select port 6281 on the backup destination settings window even when using Tailscale to get hyperbackup working? I would have thought that Tailsciale would have eliminated the need to open ports like that?
@@Tetra84 Yes, you need to use the port. You don't need to port forward it (on your router), but Hyper Backup must know which port to access for it to work.
@@WunderTechTutorials great, ty!
Hi i got 2 questions:
On my phone, if this is a split tunneling, can i permanently leave on the tailscale toggle? which from my understanding means only connecting home will be secured, and any other internet browsing will be left intact ( and at the maximum speed because its not vpn-ed) ?
Second question is, if i use exit node and make it into a full-tunnel, is my general browsing and downloading speed slowed down ? who processes that VPN? through which servers ? Who will dictate my internet speed then ?
Yes, you can use the split tunnel always and it'll route the traffic to your local network if it's requested. A FT VPN will slow down your network traffic and the speeds generally depend on the download/upload speeds of the network you're connected to and the network the Tailscale server is hosted on.
Great video! I was wondering, if you set up tailscale on your mobile device then are you able to directly open Synology apps? Or do you have to change how you log into the apps? For example, Synology photos, drive or Plex?
That is correct! You'll have to ensure that local traffic is allowed to the subnet, but you'd be able to access everything using the local IP addresses of those devices.
@@WunderTechTutorials Thanks! i just installed tailscale on my NAS and mobile device. I was wondering, when I log into the mobile synology drive app, does it just go through tailscale now? It seems like I have to use the DSM through a browser on my mobile device to access synology drive instead of the mobile app itself. Is this correct?
@@cheezeballcity No, you should be able to use it with the mobile app. Were you using QuickConnect? You want to make sure that the connection is using the NAS's local IP address.
@@WunderTechTutorials gotcha, that's the part I wasn't clear about. Thank you!
Tailscale is fantastic my ISP uses CGNAT so no port available forwarding for OpenVPN
Not everything worked for me. Was unable to use split VPN tunnel (only NAS was accessible and only through Tailscale IP adress) and my local network was still inaccessible in both split/full VPN. Didn't get "Success" after SSH into NAS and inserting command mentioned in descripion. Yup i'm zero in Linux, i know.
But using Tailscale to make VPN connection to NAS and using it like an exit node is quite useful for scenario of unknown wifi usage necessity. Finding many really cool things on this channel. Many thanks.
Thanks! Any firewall rules maybe that limited access in split-tunnel mode?
@@WunderTechTutorials maby, still trying to find out what was the reason. But I'm happy already with other possibilities found thereby this video.
Hey got the same problem here, I can't have the success message, but still if I go in edit route settings I have the IP address that I have put in the command. So I guess it's working right ? But can't see the address in grey under the address provided by tailscale... And totally unable to connect to the IP address that I have put in the command... If you have find the solution I would be really gratefull if you can share it :) !
Wow, the second part of this video was an eye-opener for me. Thanks! Next question I guess: this or OpenVPN?
From a purely "ease of use" standpoint, Tailscale is superior. With that said, it's not a "traditional" VPN, meaning you are relying on Tailscale to maintain their service in order for you to connect to your local network. If you hosted your own VPN, as long as that VPN server is online, you'll always be able to connect to it and there's not a third-party that you need to worry about. You're also relying on them for their security practices, etc, where you would control everything by running your own.
I use my own VPN server (I run both, WireGuard and OpenVPN) and that will not change. However, I was INCREDIBLY impressed that you could have a fully functional VPN in a few minutes, and the performance was incredibly similar to my self-hosted VPN's (couldn't really notice a difference).
I apologize for the long-winded response, but ultimately, I think that it depends. From my perspective, self-hosted VPN solutions are superior since you're managing everything, but if you don't want to port forward, you're afraid of managing the security, or if you want something that just "works" with a very quick setup, Tailscale is awesome!
@@WunderTechTutorials appreciate the time for a detailed explanation. I'll continue with my OpenVPN.......
Hi, for some reason, I cannot see my docker containers that are running on a macvlan network (as you showed how to do in other tutorials). How can i connect to docker containers running on macvlan docker network with its own ip separate from the NAS?
I tried accessing with the IP addresses i normally use when i was full tunnelled with tailscale but they would refuse to connect.
How can i access the docker container services running on that macvlan with tailscale installed on the docker host synology
When you say that you can't connect, is it through Tailscale specifically or another VPN? Are you trying to access them through the bridge IP address? That should fix the issue if you're accessing them through the macvlan IP.
Hi Frank, thank you, your video! Could you please explain how to setup a reverse proxy or so so I do not have to use port numbers to access paperless or other containers?
Thanks! You can get it to work, but a reverse proxy server is generally used to expose services to the external internet. Basically, you'll have to use the same process as exposing it externally but use an internal DNS server to point directly to the local service.
It's not the cleanest way, and definitely not the best way to use a NAS. I have a video using a ZimaBoard that shows how it can be done if you're interested but I don't have step-by-step instructions unfortunately.
@@WunderTechTutorials weiter Synonym or Zima, could you give me the link?
unfortunately, the current version of tailscale apparently does not have the "advertise-routes" command? I am getting a "command not found" error on my SSH command line. Similarly, advertise command fails... :-(
I tested it a few months ago and everything was still working. Does the command to bring Tailscale up work?
What additional steps are needed to access the AdGuard LAN page and use AdGuard as a Tailscale nameserver? Would be great to have AdGuard on the go. Name resolution only works when I use my normal internal nameserver, not AdGuard. I can't ping the AdGuard IP either. I do have an allow firewall entry on my Synology to the AdGuard IP. It must be related to me running AdGuard as a Synology container that uses a bridge network.
Yes, that's most likely it. Are you using a bridge network for AdGuard? If you are, have you tried that IP?
@@WunderTechTutorials I am using a bridge network and that IP is not reachable by any LAN or TS client. Only the NAS can ping it. Also, the NAS cannot ping the macvlan IP of AdGuard. Only LAN clients can initially. If I move the subnet router to another TS client then I'm good. I can ping the macvlan IP from any LAN or TS client, I can reach the AdGuard console page, and I can use AdGuard as a nameserver in TS which is the end goal. Would prefer to have the subnet router setup on my NAS since it's always powered on.
@@TheMattMustain My thoughts are that since the NAS is hosting TS and AdGuard, I'd imagine using the bridge IP would be required. Does it not work with the bridge IP? If it doesn't, chances are high it has to do with a conflict with how the NAS is managing both connections and I wouldn't really be able to say which IP to use. It would really require a bunch of diagnosis and testing, but I'm sure you can get it working somehow.
If you're using Tailscale as a full tunnel VPN, will Docker containers also send their traffic through it? If not, is there a way to possibly set up a Docker container to forward its traffic through a different VPN?
I'm not exactly sure what you mean by the docker containers using them. Generally, this only applies if you're connecting from an external network so only that external device will be impacted.
Super helpful video!
Thank you Frank for a great video. I tried to advertise an extra vlan beside the one where tailscale is installed on a nas.But I could not use both subnets. Is there a way to accomplish this. I am trying to login to IoT vlan from outside. Thank you
I'm not absolutely positive about this, but I think you'd need to make it so that the VLAN where the NAS is can access the IoT network. If it can, I think you'll be able to access it through the VPN.
Ok, but how does it look like to add the quick connect into nodes or drive etc.? Could you show an example how the line has to look like?
It's the same process you'll use at home. So generally, the local IP address.
@@WunderTechTutorials thank you, I use CloudFlare's tunnel and was thinking it would be like this, instead of an IP address I could use my domain. I have to play around with that to get it in my head how it works. Thanks for your videos 👍
thank you so much
I've followed the guide and everything works great but any ideas on how you'd fix HTTPS not working?
HTTPS not working in what sense?
@@WunderTechTutorials At 1:46, in the address bar, https has a line through it, which means DSM tried to establish a HTTPS connection but failed, so it fell back on HTTP. I was curious on how you'd fix this?
@@gentiang Gotcha - that's just because you're not using a valid SSL certificate. Technically, HTTPS is still being used. The only way to avoid that is to set up a proper domain and SSL certificate.
I cant acces my NAS through its local IP also I didnt get success after the advertise routes command, but also no error. Any ideas ?
If you didn't get a success message, that's going to be the problem because that's how you can use the local IP. I'd try again if possible and if it still doesn't work, uninstall the app and then reinstall it and try again.
@@WunderTechTutorials unistall on the synology or the conneting devive? or both? The NAS does show the subnet and exit node badges in the dashboard after the command so something is happening access via internal ip isnt working
@@bartsprengelmeijer4825 Well, I guess that depends on if any devices are working. If you have certain devices working, then the server is fine. If no devices are working, then there's probably an issue on the server (NAS).
I found the issue, or rather the fix. In the app after I select "Use exit node" and select the Synology, I am then able to reach the nas (and other devices) using there internal IP address. Any idea why I need to select that? In your video it looks like that was only necessary for the full tunnel VPN or I'm mistaken
@@bartsprengelmeijer4825 Glad you found the fix. I don't remember that being necessary, but I kind of remember there being a second option as well. Did you happen to select two different options or was it just the exit node?
Thank you very informative!
Hello there! Great video once more. A comment on speed please,comparing quickconnect vs. tailscale
I'll add it to my list! For now, here's a video I did on self-hosted VPN's vs QuickConnect (Tailscale is included in it): ruclips.net/video/l5YxO86SbRw/видео.html
@@WunderTechTutorials thanks a lot!
Hi, I'm not sure why but my last comment seems to have been deleted. My apologies if I broke a rules. I was wondering if you could tell me if there was a way to use Tailscale to connect two Synology devices to each other over the Net. I have a box at the office and smaller one at home. Because I don't have control over the router at the office location, I'm using Quickconnect to connect the two devices and then the Synology drive admin console to sync them, I then have the drive software on my PC, this means that I can download stuff overnight onto the Synology and turn off my PC, however synchronising through Quickconnect is very slow. Any thoughts on how to implement Tailscale in this scenario? Cheers and appreciate all the work you do in making these very helpful tutorials.
Just wanted to add a couple of things to the above as I've been experimenting a little more with this. I have Tailscale running on both Synology NAS devices. I have tried to input the Tailscale i.p. address into the 'Remote NAS address' entry in the 'Connect to you remote Synology NAS' setup window in the 'Synology Drive Sharesync' app but I get a 'Connection failed......' message. I'm using an admin account as the login. I can't seem to figure out how to get this too work. It may be the case that this method won't work and that Tailscale won't allow out going connections from the Synology, aby thoughts would be gratefully appreciated.
Ok I'm sorry for bombarding this thread but I found a little more info about the issues with Tailscale and DSM 7 blocking outbound access. Frank would you be able to do a little tutorial for us using this info: #enabling-synology-outbound-connections found on the tailscale website in the docs. (I worry that if I publish the address wholesale it might cause my comment to be deleted.) Although it may look simple to some your videos are must more user friendly!
OK Think I figured it out. After doing everything in the video above you then add the three commands found in the documents page as referenced above. "# These three commands are only needed once and persist over restarts.
sudo mkdir -p /dev/net
sudo mknod /dev/net/tun c 10 200
sudo chmod 0666 /dev/net/tun "
(Please check the document before you use these commands as things might have changed since I posted this.)
You then need to restart the tailscale synology app. Fingers crossed you can then send data out of the synology using the Tailscale tunnel.
Note I believe that if you turn off your Synology you may need to reenter these commands however there is a work around to that that is also documented but requires a manual tailscale software install upgrade to 1.22 (at the time of writing the Synology package was at 1.16.2.
I hope this is helpful to others with the same requirement.
@@darkerbright Sorry for not getting to this in time, but glad that you got it working! The Tailscale implementation on DSM 7 isn't ideal from a permission perspective, but as you saw, there are ways around it - glad you figured it out.
@@WunderTechTutorials Not at all, thanks for responding and sorry for clogging up the comments, I probably should have asked these questions on your website, but I got a little carried away. Keep up the great work.
Thanks, Frank. A VPN that actually works for me. At 4:07 what password are they looking for? The DSM admin password? the password for the Gmail account I registered with? None of them work. get timed out at 3 guesses.
It should be the password for the account you are SSH'd in with (in my case, the Frank user on DSM).
@@WunderTechTutorials Thanks, Frank. Tried it again this morning. Although I did NOT get a success message I now have access to subnets and Exit node on the machines console. Laptop works with Cellular wifi tether. Need to test on exterior wifi. Plex works great. Even using the Android app.
Did someone have problem after installing tailscale and turning it on? After joining to TS i could access my DSM only via TS instead of local ip or TS ;)
Are you testing from an external network?
You have to be careful with tailscale on Android. I was using it and was not able to get rcs messages from Google messages. Apparently they are aware of this issue, not sure if they fixed it yet
Wasn't aware of this! Thanks a lot for sharing!
Can you show how we can map a network drive with tailscale?
You'll have to map it using the local IP address (if you are passing that through) or the Tailscale IP address for the device.
@@WunderTechTutorials Thank you! 😄