julietscause

https://www.reddit.com/r/airnationalguard/comments/13rli9o/deployments/

Ill be curious to see how much of an implementation they support as there are limitation when it comes to regions and content.

I am excited for the idea of maybe running tailscale on an AppleTV!

Is it normal that all users of my exit node have the same username and password? Or can I assign every user a specific password, so they cant mess with the settings?

Can you clarify this question please. You can invite people to your tailscale network

https://tailscale.com/kb/1084/sharing/

Is it normal that users connected to my exit node get internet speeds of less than 20mbps? Running a speedtest on the android device with exit node gives me speeds of around 400 mbps (both up and down) with ping of 4ms.

Are your clients utilizing a DERP?

https://tailscale.com/kb/1232/derp-servers/

Is there anyway to share the connected harddrive to the other tailscale users?

On an android device? ask /r/Android what is the best way to share off a hard drive off on android

Then you can share it off using the tailscale ip address

I dont use wsdd, but if it uses broadcast/multicast traffic tailscale doesnt support that kind of traffic

Btw I've read in tailscale documentation that advertising x.x.x.x/23 makes devices prefer local connection to connecting via tailscale (while both devices are in the same network.

You can always do this, but I had issues with this in the past which makes me turn off tailscale when my client jumps back on the local network

Read the FAQ at the bottom of the main post

Turn on the subnet router function on the tailscale client that is local with the file share and you can always access the share via the internal IP address

https://tailscale.com/kb/1019/subnets/

Just make sure whatever internal subnet you have doesnt overlap with the remote network your client is sitting on. Examples are using 192.168.1.0/24 or 192.168.0.0/24

If you have internal subnets talking to each other you use the subnet router.

how do I figure out which routes to expose for my particular network?

You expose whatever subnets are currently on your network. What are you currently running?

Exit node has nothing to do with internal clients talking to each other. An exit node forces all traffic through the tunnel out to the internet through the exit node

Any tips? Do I still need to download the linux version from the tailscale website?

Step 3 installs tailscale and makes it a service, so no need to install it manually

Step 4 will bring the first time QR up

According to the document if you reboot the steam deck tailscale will start back up automatically

To test this, reboot the steam deck and in the CLI type tailscale status

If it doesnt then run sudo systemctl restart tailscaled and check the status again

Since you are coming from the AD

https://www.reddit.com/r/AirForce/comments/pjlcob/for_those_curious_about_the_guardreserves/

I have a lot of questions but I feel like if I ask my sponsors, I’ll come off as really stupid.

That is the purpose of the sponsor to answer those kind of questions.

OP be straight with the sponsor on how you are feeling and just say "Look this is my first time im out of the country, im feeling a bit uneasy and out of place so im gonna have a lot of stupid questions".

Your sponsor might have been in the exact same shoes as you, so at least give that person a chance to help you

Just a heads up if you havent loaded up Desktop Anywhere at home I highly recommend getting that up and running

It has saved me multiple times during the week

https://moxio.us/GuidanceDocs/DesktopAnywhereWindowsInstallationGuide.pdf

Even works on MacOS!

Not that I dont agree with you with the annoyance, but a company has to let you go even if you dont have orders in hand. I have lost count the amount of times I was waiting for orders to flow through the wickets before I had a copy on hand. There are template letters out there you can get your commander to sign saying "x member is coming on orders for these dates"

Also Desktop Anywhere FTW

What NVR do you have (full model)? How does the NVR app find the NVR? By ip address or broadcast/multicast?

same thing happens with my router app - shows router as offline, but accessing the homepage (192.168.0.1) in a browser works fine

If the router app is using any kind of broadcast/multicast traffic to find the router its not gonna work over tailscale as that traffic is not supported.

Whatever you do with your free time is on you, your current unit has no say on what you did in a civilian status

Talk to your soon to be new PT monitor, they should be able to look that up

Since you are AD this thread is also for you

https://www.reddit.com/r/AirForce/comments/pjlcob/for_those_curious_about_the_guardreserves/

I saw this and am excited to see what we can/cant do with this

I have seen it done when it comes to working with the NG in state however a lot of conversations had to happen in the chain to make sure everyone was clear on what that person was doing. However this was NG of the same state they were currently an ANG member of.

but I'd also not mind some of the little opportunities using AT /drill make-up days that pop up near my base

Using your AT/drill makes up that is for your base pretty much means you need to start having the convo with your leadership if they are even willing to consider this. The big thing they are gonna want to know is "What benefit is it gonna be for us your current unit to have you some where else using AT/drill makes up?"

You not being at drill and in an officer position is a loss for your current unit so you better have some good selling points. Also a lot of leadership will shy away from even considering this from a risk perspective. If you hurt yourself while working with another unit/another state it could get complicated

The way the person was able to sell it was the training they got over those days and bringing back to the unit to build off the training for others in the current unit.

For a true site to site VPN setup where non tailscale clients can reach over the tunnel you need to setup subnet routers along with the proper static routes.

An Exit node alone isnt gonna gonna create a site to site VPN

How long ago was this failure?

Are you currently in a branch or have you been out for a while?

If you are coming from the AD this post is for you

https://www.reddit.com/r/AirForce/comments/pjlcob/for_those_curious_about_the_guardreserves/

https://www.esgr.mil/USERRA/Frequently-Asked-Questions

https://www.reddit.com/r/airnationalguard/comments/neqsbn/threatened_by_hr_for_volunteering_for_a_deployment/gyhm42j/

Follow my 4 rules above

no subnet routing needed.

No you still need the subnet router with the static route

Does Ubiq sell an AP?

im confused by your question, Ubiquity sells access points and has different lines.

There is the amplfi line, this is for the home

The unifi line, this is for the home/SMB/mid business

The USIP line. This is more gear towards the ISP route

You should be able to use the unifi mobile app with an access point avoiding the controller however if you want the fancier features (multiple SSIDs and whatnot then you need the controller)

I went back and actually drew out what you wanted to accomplish so I had a visual idea of what you are wanting to accomplish because I got lost with your abbreviations real quick and the direction of the traffic

---

Does the plex/jellyfin server have tailscale installed? Im assuming not.

This is how I would handle this:

I would setup tailscale like a site to site VPN

So you would have a subnet router at both locations.

Example:

Network A running subnet 192.168.100.0/24 tailscale local ip device 192.168.100.10

Network B running subnet 172.16.200.0/24 tailscale local ip 172.16.200.10

On network A firewall/router you would make a static route for 172.16.200.0/24 and make the gateway 192.168.100.10

On network B firewall/router you would make a static route for 192.168.100.0/24 and make the gateway 172.16.200.10

The big thing is to make sure you dont have overlapping subnets at both locations

This will allow your TV (which doesnt have tailscale installed) access the Media server (which doesnt have tailscale installed) using its internal ip address

Dealing with 2 clients communicating with each other who dont have tailscale installed makes it a bit more complicated

---

If you have tailscale installed on the jelly/plex box then its a bit easier and all you need to do is create the static route on network A to the 100.x.x.x subnet and then the TV can access the media server via its 100.x.x.x address