• 1 Post
  • 80 Comments
Joined 1 year ago
cake
Cake day: April 11th, 2024

help-circle
  • I actually did this instead of tailscale first; installing tailscale on a pfsense router was a challenge, iirc i had to find and install the freebsd tailscale pkg from the command line because the plugin doesn’t give the option to connect to a non-tailscale control plane.

    After I did that and connected to my headscale server (on my vps) I could ping pfsense’s local ip over the tailnet, but couldn’t get any traffic out from pfsense. Turns out I had forgotten the pfsense tailscale plugin automatically sets up outbound rules for you.

    That was a rabbit hole I didn’t feeling like falling down, so I turned off headscale and just used tailscale account and the normal pfsense tailscale plugin. But it’s there and it does work fine if I ever wanted to go figure out the outbound traffic rules.












  • I always put stuff in the same spot so I don’t have to look for it or think about where it is. Everything in my wallet has a place, everything in my pockets always goes in the same pockets, my work ID goes in the same place when not in use, my sunglasses have a spot on the counter at home, and on and on. Greatly simplifies things and reduces stress not having to think about where stuff is or might be.








  • I’m actually behind 3 routers and still hosting stuff to the internet. My house is behind cgnat, I have two isp routers, which both connect to a pfsense router (ip of which is in the dmz of each isp router).

    My pfsense router and a free vps hosted at oracle are both connected via tailscale. Pfsense router advertises specific subnet addresses to the tailnet. VPS uses caddy to reverse proxy to those subnet addresses to expose them to the internet.