From d12f24749070519ab2c90ce02832904e0ca53d6b Mon Sep 17 00:00:00 2001 From: Moritz Poldrack <33086936+mpldr@users.noreply.github.com> Date: Wed, 15 Mar 2023 19:17:55 +0100 Subject: [PATCH] document running exit nodes Currently the only kind-of documentation is #210 which is outdated. To remedy this, add a document describing the process. --- docs/exit-node.md | 47 +++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 47 insertions(+) create mode 100644 docs/exit-node.md diff --git a/docs/exit-node.md b/docs/exit-node.md new file mode 100644 index 0000000..47eaed1 --- /dev/null +++ b/docs/exit-node.md @@ -0,0 +1,47 @@ +# Exit Nodes + +## On the node + +Register the node and make it advertise itself as an exit node: + +```console +$ sudo tailscale up --login-server https://my-server.com --advertise-exit-node +``` + +If the node is already registered, it can advertise exit capabilities like this: + +```console +$ sudo tailscale set --advertise-exit-node +``` + +## On the control server + +```console +$ # list nodes +$ headscale routes list +ID | Machine | Prefix | Advertised | Enabled | Primary +1 | | 0.0.0.0/0 | false | false | - +2 | | ::/0 | false | false | - +3 | phobos | 0.0.0.0/0 | true | false | - +4 | phobos | ::/0 | true | false | - +$ # enable routes for phobos +$ headscale routes enable -r 3 +$ headscale routes enable -r 4 +$ # Check node list again. The routes are now enabled. +$ headscale routes list +ID | Machine | Prefix | Advertised | Enabled | Primary +1 | | 0.0.0.0/0 | false | false | - +2 | | ::/0 | false | false | - +3 | phobos | 0.0.0.0/0 | true | true | - +4 | phobos | ::/0 | true | true | - +``` + +## On the client + +The exit node can now be used with: + +```console +$ sudo tailscale set --exit-node phobos +``` + +Check the official [Tailscale documentation](https://tailscale.com/kb/1103/exit-nodes/?q=exit#step-3-use-the-exit-node) for how to do it on your device.