I would really really really like to have one device on my tailnet as the exitnode for all other devices on the tailnet. However, most VPNs make this really difficult. Is there any way to do this? I’ve read it’s possible with split-tunnelling, but ProtonVPN (which I use) doesn’t support that. I just installed Alpine Linux on my RPI 4b. And would like to use this as my exit node. Does anyone have any tips for how this could be done?

  • LunchOP
    5•1 year ago

    Right that is pretty much clear, but I want this exit node to be running ProtonVPN as well. This however does not seem to be possible (to my knowledge). Edit: This is also why Tailscale added support for Mullvad VPN i assume.

    • Responsabilidade
      3•1 year ago

      Ok… I think I didn’t get what you’re trying to say. Do you wanna run a VPN through a VPN?

      I mean, you have your RPI 4b as a Tailscale exit node, but the RPI 4b itself connects to the ProtonVPN?

      • LunchOP
        3•1 year ago

        Right, so I’ve got Alpine on the RPI, and have installed/configured protonvpn with wireguard. However, if I then start Tailscale, the already running ProtonVPN connection goes down. Same happens if Tailscale is already running, and I try to start the ProtonVPN connection it will just refuse the connection.

        I want it to connect to both services, as then this can act as the exitnode for all other devices on the tailnet. Whilst also giving the benefit of ““being in a different location”” with protonvpn.

        So essentially, both services wants to use /dev/net/tun, but only one can.

        • Responsabilidade
          3•1 year ago

          Well, I found this article saying that theoretically is possible, however not so much. It says that depends on how the other VPN works. They even suggest some workarounds, so take a look

          Anyway, have you tried to create another tun/tap service to run both VPN?

          • LunchOP
            2•1 year ago

            Yeah already scoured their documentation for this, but no luck with any of the workarounds sadly.

            Have not tried to do the latter you mentioned though? Not sure how to do that, but I will look into it asap.