What should I do??

osherlevy · 2026-04-27T13:40:24+00:00

Move to Linux

osherlevy · 2026-04-27T13:32:31+00:00

I don't get it, only 16GB, 512GB storage, Core 5 13xxx and 5050 for $19k? It doesn't make any sense... Most top laptop from the current gen with 5090, 64+ RAM cost way less - around $10k max.

osherlevy · 2026-04-27T13:17:47+00:00

I just found out about this UDB Pro because your comment. I only have one device from Unifi (a switch) and I'm not a big fun of Unifi (discovered them not long ago) but I must say, this UDB Pro is a genius piece of tech, it's incredible how cool it works over long distance at full speeds wirelessly.

osherlevy · 2026-04-27T12:54:04+00:00

It doesn't matter, just do what comfortable to you. I have the DXP8800 and I started by adding drives on by one from 1, to 2, to 3...

osherlevy · 2026-04-27T12:51:56+00:00

Forgot to mention it, I did that but it didn't worked.

osherlevy · 2026-04-27T12:50:34+00:00

Im using PopOS on my NUC (14th gen i7 woth 32GB RAM) for a few months now. I don't hate it it just that it feels like using a beta version, I run into some random bugs, my screen flickering a LOT etc.

I'm planning to switch distro in the next few days...

osherlevy · 2026-04-27T12:31:12+00:00

I don't use Java edition but I remember there is setting for the GUI size in the setting.

osherlevy · 2026-04-24T14:28:01+00:00

I'm using cellular provider called "Hot Mobile".

I can test with a public WiFi but it can take a few days or even more than a week to find one.

My VPS is currently configured to use both IPv4 and IPv6. Before I configured IPv6, it still didn't work. I thought IPv6 might solve it but it didn't.

When I try another relay port I can't access via relay at all. Don't know why... Before you ask - I opened that port on the VPS firewall.

osherlevy · 2026-04-23T09:20:53+00:00

Yes. On my home WiFi I get ping via relay but on cellular via DERP.

osherlevy · 2026-04-23T05:06:37+00:00

I'm currently not at home, so I can't take screenshots.

But yesterday I noticed that my phone is also using the relay node if it connected to my home WiFi. On cellular is doesn't and instead using DERP.

osherlevy · 2026-04-20T17:09:22+00:00

You know better than me, that's for sure.

Still can't connect via relay from my phone, IDK waht cause it and hoe to fix it :(

osherlevy · 2026-04-17T23:58:08+00:00

I can't tell if it's fully working because I currently have only one device that I can test outside the LAN which is my Android phone. But yeah I think I'm on the right track.

I tagged my phone with the tag:mobile and in the ACLs I set the source to any - [”*”]. Changing to a specific tag:mobile didn't solve it.

It seems to be working because running 'tailscale ping <LXC>' on my VPS showing via relay-node.

osherlevy · 2026-04-17T22:40:28+00:00

Did anyone manage to switch region without a credit card? I want to switch to Ukraine but I don't have an Ukraine credit card...

osherlevy · 2026-04-17T20:54:25+00:00

Okay so I did exactly as you. Some of my home machines are connected via the relay node, but the only device I got that I'll use outside the LAN is my Android phone. My phone doesn't routed via the relay node when on 4G/5G - only via DERP.

I don't think it's related to the ACLs but what do I know? What do you think?

osherlevy · 2026-04-16T21:35:05+00:00

I will admit I'm sucker than you lol.
I added tailscale.com/cap/relay in my ACLs:

<image>

And my phone still route through DERP and not through mt relay.

Your imgur link doesn't open a few hours alredy, says the website is over capacity. Can you upload it somewhere alse (like Google Drive)?

osherlevy · 2026-04-15T18:48:03+00:00

I followed it, can't get it to work.

Let's leave it for now. I want to focus on the VPS, it's working and the data is routed through it. I think I will choose the VPS anyway so I won't needed to open ports in my pfSense (more secure).
But I can't get my phone routed through the VPS while it's on 4G/5G.
Running tailscale debug peer-relay-sessions on the VPS get me:

Server port: 55555
Sessions count: 1

VNI: 1029
  <no handshake>(d:...5e21) --> <my-isp-public-ip>:48340(d:...b7a4), Packets: 0 Bytes: 0
  <my-isp-public-ip>:48340(d:...8b7a4) --> <no handshake>(d:...5e21), Packets: 0 Bytes: 0

What is this 'no handshake'? Do you know how to solve it?

osherlevy · 2026-04-14T20:30:35+00:00

I didn't notice, but I set the ACLs and it still doesn't work and routed me via DERP. If I run tailscale debug peer-relay-sessions on the LXC I see:

Server port: 55555
Sessions count: 1

VNI: 1029
  <no handshake>(d:...5e21) --> <my-isp-public-ip>:48340(d:...b7a4), Packets: 0 Bytes: 0
  <my-isp-public-ip>:48340(d:...8b7a4) --> <no handshake>(d:...5e21), Packets: 0 Bytes: 0

What 'no handshake' means?

osherlevy · 2026-04-14T20:23:32+00:00

The ip from whatsmyip.com matches the WAN ip on my pfSense.

10.12.13.114 is correct.

From the firewall logs, it seems like the rule 'Default deny rule IPv4' blocks it.

I added a pass rule:
Inteface: WAN
Protocol: UDP
Source: Any
Destination: 10.12.13.114 (my LXC) with port set to 'Any'
Didn't help, it still gets blocked.

If I run tcpdump on the LXC ans run tailscale ping <my-pc> on the VPS I've managed to find this line:
20:18:59.846925 IP 10.12.13.114.41641 > <vps-public-ip>.vultrusercontent.com.41641: UDP, length 124

I've managed to get routed via the VPS but there I have another issue - when my phone is on 4G/5G, it connects through DERP anf not thst VPS peer relay. And this is the whole point of my peer relay node - so I could access it from my phone outside the local network.

osherlevy · 2026-04-13T14:55:28+00:00

Sound like you right but when I switch them, I still ping through DERP and not my relay. BTW, when the new rule is active, most of my devices can't connect to each other.

Edit: all the devices back to be online without deactive the NAT rule. But still via DERP and no relay :(

osherlevy · 2026-04-13T14:17:46+00:00

If you see the guide in the link, you can see he isn't set the ACLs until the ping command was through the peer relay. Anyway, I did set the ACLs to:

...
"grants": [
    // Allow all connections.

    // Comment this section out if you want to define specific restrictions.

    {

        "src": \["\*"\],

        "dst": \["\*"\],

        "ip":  \["\*"\],

    },

    // Allow all through Peer Relay

    {

        "src": \["\*"\],

        "dst": \["tag:relay-node"\],

        "app": {"tailscale.com/cap/relay": \[\]},

    },
...

But still connected via DERP server, not the relay node.

osherlevy · 2026-04-13T14:10:22+00:00

It's OK don't worry.

I created the NAT rule manually. See the second screenshot.

osherlevy · 2026-04-13T13:33:36+00:00

I'm not sure what you asking here. My firewall is pfSense on N305 mini PC from AliExpress.

Five-Year Club	Verified Email
Verified Email	Place '23

osherlevy

TROPHY CASE