Your Apple TV is a Subnet Router for Tailscale now!

[@CatalystReactor]

Tailscale has been an absolute game changer for me. Thanks so much for all the work you continue to put into this product.

[@MikelManitius]

The stuff you are doing with Tailscale is stuff I only dreamed of a long time ago. These features (AppleTV exit node + subnet router) are phenomenal. Thank you!

[@SurajZachariahManesh]

First of all, awesome work folks at Tailscale! It's one of the best networking tools I have used in a long while. My "feature request" is not for Apple TV but, it's for the pfsense tailscale package - please add functionality to route through a different exit node on the tailscale pfsense package (right now, the only option is for the pfsense box to act as an exit node, not the other way around)

[@stephenjanssen7173]

Tailscale revolutionized the way I used networking in my life. It is so helpful for my travel, and supporting family members.

[@rosspeplow]

A new Tailscale user here!! Thank you so much, what a brilliantly implemented software.

[@Solanum.95]

Would love to se a tutorial how you set up acls and limit access for some users, haven’t really understand how to set it up yet 🙃

[@Tailscale]

Coming soon!

[@dustinmorgan8624]

Tailscale has almost limitless possible applications. I'm loving it. I did encounter something while on vacation recently that I think would be a great feature. Currently there is an option to launch RDP to a tailnet device from within the Tailscale admin console which launches the RDP application on the computer you're using. I think it would be a great feature to have RDP capability from directly in the browser so that the desktop would appear in the browser on whatever device you're on. This would be beneficial to be able to RDP onto a computer in my tailnet from device that is not connected to tailscale or in my tailnet.

[@Coltography]

Been trying to wrap my head around subnets (not an IT guy nor do I know a whole lot about networking) and couldn't figure this out (or so I thought) Just enabled subnet routes on my unraid server, used my phones data instead of wifi, and tried to connect to the IP of a IoT device on my home network. It just...worked. That's so insane to me it's that easy, almost freaky. Time to figure out all the ACLs!

[@casfren]

I would reeeeally appreciate one based on android TV please :)

[@flightmansam]

You guys are absolutely awesome. You have changed home servers. Im so proud of my little cloud in my living room. I would love to see clipboard sharing just like you have file sharing. Would be so flipping awesome!

[@MikeFaucher]

Outstanding!!! I have done several videos on Tailscale including subnet routers and I have been waiting for a feature like this. Nice job guys and I will test this right away.

[@tioal9419]

Can a Google or Android TV serve as a subnet router for Tailscale?

[@sthardman]

Is there a way to disable automatic vpn reconnection? Sometimes I want to disable to vpn on the Apple TV from the control center on the top right of the tv but whenever I do that, it automatically tries to reconnect again. I’m forced to go to the actual Tailscale app in order to do it. Would be much more convenient if I could disable without having to exit the current app I’m on and go to the Tailscale app. Thank you

[@EdanSaltz]

I'm still confused. I set up my AppleTV to advertise the subnet. I then could not figure out how to ping or ssh a machine on the network. Could you do a walk-through? I'm a beginner when it comes to networking.

[@ayoubthegreat]

Hello my friend. Did you get this working?

[@EdanSaltz]

Not yet. @@ayoubthegreat

[@EdanSaltz]

@@ayoubthegreat Never could figure it out.

[@ayoubthegreat]

@@EdanSaltz I believe you set the appletv as an exit node. Then you use the exit node on the device you are using.

[@EdanSaltz]

@@ayoubthegreat That doesn't sound right. I have to assume multiple Apple TVs can define subnets. The problem is, how can I ping a node on the subnet? How are collisions handled? Can I fix if DHCP assigns a machine the same IP address on two networks? I hope they can create a walkthrough that goes through these steps.

[@HiFiMods]

It would be nice if someone explained the use case for Tailscale. I can and have it installed on my iPhone, Synology NAS, windows PC and have yet to figure out what it’s for 😅. I work in IT and currently have site to site vpn setup on edge routers… how is Tailscale different here? Thx!

[@carnold.knowledge]

I have a few scenarios I use Tailscale for. Let's say you have a phone and want to get access to your home security cameras while you are at Costco on 5G. But you don't want to poke holes in your firewall. Tailscale addresses that. Also, in my case my home internet is Starlink and T-Mobile 5G (I have dual internet providers because I'm rural). They use CGNAT, which basically means I don't really have access to the true WAN IP address in order to poke holes through my firewall, which is how I used to do it with my cable modem. Tailscale addresses that. Lastly, I have a couple of family members with Macs and Windows boxes that I need to Remote Desktop into. I have added them to my Tailnet, and in can talk to them seamlessly from any of my other devices (usually a Mac laptop). Hope that helps.

[@jono_church]

This is great, I've got an apple TV which doesn't get used but always felt like a waste just sitting on the shelf. This will be an awesome use for it!

[@arnabganguly938]

Can you not add the usage of connecting to an exit node and enabling the subnet route together?

[@TheMattMustain]

Hopefully Android-based devices get this same love. Would like to see subnet routing available on Chromecast.

[@Tailscale]

We hear the Android feedback loud and clear folks! Our engineering teams are hard at work on some improvements on that side of the fence, keep an eye on our changelogs for updates.

[@MLBPC]

Is there a reason why 'allow local network access' is not available on the ATV?

[@Yiveytube]

Thinking of buying a couple of extra ATVs to put at different locations for this. Do I understand it right that also the older Apple TV HD (non-4K) with that bad touchpad remote works with tvOS 17 and therefore works with Tailscale? That would be great as those are practically free on the used market. 👍

[@geriivagyok]

Man this is so great! I'm so happy! Finally I can use Tailscale to phone home and reach local devices. Thanks!

[@christopherroque9659]

Is this a one way traffic only? I have a biometrics and i cant ping back to the router subnet.

[@iPigee]

Y’all are amazing!! One of my best SaaS additions in the past few years for me!! Thank you.

[@ruturaj118]

I’m using Tailscale to remotely manage a server running several VMs and it has been the best experience for me. I’m wondering if there’s a dedicated subnet router supporting tailscale.

[@Mario_Pintaric]

I've been able to get several critical scenarios working with Tailscale for my remote access needs. Fantastic product! I have been struggling with one particular setup that I haven't been able to make functional. I'd like my Apple TV in Europe to appear as though it is connected to my remote (Canadian) location. I've enabled subnet functionality which does give me loads of functionality that I needed. But I can't figure out how to make the Apple TV connection to work because I have to connect through a local WiFi (in Europe) which is also on the 198.168.0.x subnet. I presume that is why I can't get it to operate as though it's situated in Canada, since my local (Canadian) devices are also on the 198.168.0.x subnet. How do I resolve this problem?

[@thomasbroker69]

So can I use this instead of a pi-hole? I don’t understand what tailscale is for? Is this just for people to access home network when away?

[@Tailscale]

Tailscale is the easiest way to connect your devices together no matter where they are. Yes that sounds like a marketing line but it's true. -Alex

[@thespencerowen]

I’d love to see tailscale support arm based NAS from Terramaster

[@bboystances]

Great video thanks...i have question...can devices in subnet use exit node on another device in tailscale network?

[@Tailscale]

They wouldn’t have the routing information necessary unless they are also tailnet node.

[@kukister]

More custom dns's like adguard dns and controld...Implementation similar to Nextdns

[@bobbydini5567]

Is it possible to have the Apple TV acting subnet router forward broadcast and multicast traffic from it's network to other devices on the tailnet? This would be like a pseudowire connection for tailnet devices to the network the subnet router is located on.

[@romayojr]

is there a way to change the server from tailscale mesh to a custom one? i self host my own wireguard vpn using open source headscale and would like to take advantage of my apple tv as an exit node to access my local services

[@romayojr]

nevermind, i figured it out!

[@videowalrus4622]

Trying to use Tailscale on the apple-tv as a gateway to subnets on my tailnet. Created the static route in my router that points to the apple TV as the next hop, but doesn't seem to work. Traceroute shows the packet is stuck at the apple-TV. Is this the Apple TV not allowing forwarding? I guess simplest solution is to run tailscale on my actual router instead.

[@Tailscale]

Likely you are right. Good sleuthing

[@vmat377]

This is great but I have another use-case. I think it's basically the reverse. I have an Oculus Quest 2 which cannot have tailscale installed on it. The pfsense router has tailscale. I'd like to access a Jellyfin docker remotely, which has tailscale installed on its VM host. Is it possible to use the Subnet Router to enable the Oculus Quest 2 to connect to the docker??? Basically a non-tailscale device connect to a tailscale node

[@sylvainHZT]

Tailscale rocks ! I would not have imagine doing so much connectivity so easily ! Congrats team 💪

[@aritradattagupta9181]

What is the difference between subnet router and exit node? I am very new to networking and VPN.

[@marc2670]

How can I connect my printer, cameras and other devices to the Apple TV?

[@jbk1496]

I am extremely excited about the Exit Node or the NEW Subnet Routing options, I have searched and searched for this capability BUT your videos are over my head. The KZbin videos and documents on the Tailscale website are not written for individuals that have a 5 year old /child IT knowledge. I have a cabin with internet service, and I want to connect my Apple TV at the cabin to the one at my home using Tailscale. I'm not an IT person, so I need guidance on the Exit Node or the NEW Subnet Routing options on Tailscale to make it seem like my Apple TV at the cabin is actually at my house. PLEASE PLEASE PLEASE provide a tutorial that is very easy to understand (Step by Step) for those with little to no IT knowledge. THANK YOU VERY MUCH FOR YOUR CONSIDERATION AND HELP .

[@Tailscale]

JBK - enable exit node on the Apple TV at your house, then at your cabin select "use exit node (House)". Should do the trick!

[@jbk1496]

​@@Tailscale Thank you very much for taking the time to reply to my message. I really appreciate it. Tailscale is an amazing software application. I watched your KZbin video "Use Tailscale on your Apple TV!" a couple of times, and through trial and error, I believe I was able to make it work. I really enjoy your videos. I continue to test the system, but everything seems to work. Are there data bandwidth limitations when processing the Exit Node, and does the actual data travel from my Apple TV at my cabin to my Apple TV at my home and then out to the worldwide web and back? Could this cause bottlenecks and high bandwidth usage, ultimately leading to problems due to a lack of internet bandwidth? You mentioned you use the Exit Node from time to time, from the UK to the USA, do you expereince and bandwidth issues, picture freezing? I guess I really do not understand how the data actually travels between devices and locations, but I am wondering / concerned that there will be bandwidth issues.......like what happens when my teenages are at home using the Apple TV there and my wife and I our at the cabin using the AppleTV at the same time? THANK YOU FOR MAKING THESE VIDEOS!!! PLEASE remember that only some have the same level of IT knowledge as you do. Please consider making your videos simpler (like "Tailscale for Dummies") and providing more details in your instructions on your website. Once again, thank you for your direct message and for taking the time to make these videos!

[@yagoa]

I thought it was unclear how the CIDR range will be used and how to choose...

[@m23605]

I'd like to make a feature request: roadwarrior capability. Your docs have a site-to-site section but in a road warrior scenario, one of the "sites" is constantly moving about (connecting to random hotel or WiFi networks). So I need to be able to install tailscale on a pocket device (e.g. an Android phone that re-shares a WiFi network via a hotspot, or a Raspberry Pi/OpenWRT with an extra Ethernet and radio USB adapters) that will allow all connecting devices to use your home's exit-node (where you might have a pi hole, etc...). Also, in a road warrior setup, you need a kill-switch that prevents devices connected to your mobile router/AP to go out on the "local" WAN even if the tailscale tunnel goes down. This is important as you might get blocked on geofenced services if your seen to access them from outside your home country (think banking apps). Currently, Android devices don't route hotspot connected clients via tailscale. Even if they did, there's no kill-switch capability on Android that I'm aware of. Something like a Raspberry Pi running OpenWRT is probably the most practical solution as it is USB C powered and can be made mobile (via a UPS hat or a portable PD power bank).

[@laurentscorrano2892]

Hi. Tank you for the video I have a question on another subject : I have 2 Synology NAS devices (one at home and the other in the countryside) that serve as DHCP and DNS servers. Each connects to an internet box, so they have different public IP addresses. In my homes, each device connects to its respective NAS to obtain its local IP address. I want to link the two NAS devices so that they are part of the same local network, allowing devices to access each other when needed, whether they are at home or in the countryside. Can I use Tailscale for this purpose? Can the NAS devices default to using the Tailscale VPN connection? I haven’t found a way to configure a Tailscale or Wireguard VPN network directly on my NAS devices. Is this possible? Do you have any ideas? Thank you

[@internetztube]

Amazing News! And thanks for the networking refresher.

[@kpcenti]

Can you fix black screen / white screen problem on the Android TV app, then also bring this feature to Android TV?

[@booyaadotorg]

Alex as always excellent explanation of complex networking. Really excited to use this feature on my AppleTV! To be honest you could've stopped at the exit node feature, but tailscale are constantly exceeding my expectations! 🎉

[@EngiNetion]

Can I use Apple TV 2012 as subnet router?

[@rafraf23534]

Please do a video for ACLs!!!

[@sparkeyluv]

How about just configuring ipv6? I think that would make things much easier.

[@Weeem]

Please please please can you add Split Tunnelling so we can choose which applications goes through Tailscale and which stay on the default network (Private Internet Access does it and it's amazingly good)

[@AndreaGottardo96]

This is now available in Tailscale for Android. iOS VPN apps cannot support it due to OS limitations.

[@jenesuispasbavard]

Fantastic! My Apple TV is on more often than my TrueNAS server, so this would be useful when I'm testing new drives and my server is offline.

[@donciak]

damn i remember when the service was young and it was already cool, now is colossal how easly you can do pretty complicated stuff.

[@eliekfouri2043]

I would like a tutorial to set up my wifi router as sub-net , so any device in my home wifi is automatically using an exit node without installing Tailscale

[@allandresner]

Can tailscale listen for specific UDP traffic and rebroadcast that across the tailscale network?

[@bibutikoley]

Is subnet router coming to iOS and android devices?

[@Daemos2106]

when will tailscale be available on chromecast?

[@DeanVRS20VT]

Using this for my Roon subscription. Far better than port forwarding ARC on my router!

[@Tailscale]

Roon is a fabulous product!

[@DeanVRS20VT]

@@Tailscale - Oh it is! **Feature Request** Would you guys ever implement IMGP for Multicast? Just researching, I see that Tailscale doesn't broadcast packets from the client application onto the VPN tunnel. I would like to access Roon on my home network while away on a desktop. But, with the way Roon have implemented their software, it doesn't work.

[@mtnsolutions]

Can’t wait until Tailscale comes included on UniFi controllers. They include wireguard for VPN configurations…soon I hope

[@camerontgore]

Second!

[@magog6852]

lmao dont hold your breathe

[@robby_barnes]

I would love a video going through ACLs. I also would love the ability to make all of the rules with UI instead of code. As in both ways

[@Tailscale]

An ACL video is coming soon! 🔜

[@ellieminette6463]

@@Tailscale Excellent. I am really looking forward to that!

[@venjsystems]

getting better every day.

[@dp70737]

I’m confused 😅… how does the printer/ ipmi connect to the Apple TV

[@Okand2]

They don't connect to the Apple TV first themselves, but they will respond to packets first sent from the Apple TV. Which when this feature is enabled can originate from any other device you have connected to your Tailscale network. You have to know the IPs to the printer or ipmi interface and then try to access it on your own device first, this will then go across your tailnet to the Apple TV, which then routes from the tailnet subnet to the local subnet onwards to the printer or ipmi. Replies go back to the Apple TV which it then routes to your tailnet and back towards your device you're connecting from. Edit: if you have the access you could add your tailnet to the routing table in one of these devices or in the main router that normally handles the network, saying something like "the tailscale subnet exists behind this IP" and "this IP" then being the local IP of the Apple TV in this example. That way the printer or ipmi device could speak first and actually reach whatever is elsewhere in your tailscale network.

[@sipos0]

A Tailscale SD card providing this on a Raspberry Pi would be cool. They are cheap and low power, and lots of people have the laying around. Security updates to the OS on them can be automated too.

[@gbraadnl]

I get your point... but they do not want to maintain both their own deliverable AND follow the Raspbian releases for CVE or other security reports. It would be more for an automated service that would take the image and install tailscale into it and create a new deliverable.

[@sipos0]

@@gbraadnl Good point, maybe that is better.

[@magog6852]

Rpi’s are cool, but the lack of availability is a thorn in the side of many and they just go to any other device

[@sipos0]

@@magog6852 Availablity seems much better at the moment. I just bought one recently easily for example.

[@TonyYoutube-y2l]

Can I use this on a Firestick?

[@Tailscale]

We don't officially support Firesticks but some community members are doing cool things with them! www.mattknight.io/blog/routing-roku-tailscale-exit-node

[@jacko101]

Tailscale on a Firestick would be cool!

[@robbinklg9]

You guys are awesome!!

[@rainmagic1]

Just setup devices don’t see my iPhone 12 Pro Max could it be it uses a different email than my other devices

[@PizzaGoat323]

Looking forward to a magic dns video

[@Tailscale]

Us too! What would you like to see?

[@spanksen]

I have a Apple TV in Turkey running as exit node so I can watch Turkish Streaming Services from my Apple TV in Germany which is great. The only Problem is that even with my 200MB Internet Connection in Germany the loading times via Tailscale are really slow, I only get 8MB. Can I make the internet download Speed higher with the Subnet Router Function? Thank you

[@Mario_Pintaric]

I'm trying to do something similar. How did you set this up?

[@emreyavuz4706]

How fast is the upload speed in Turkey?

[@spanksen]

@@emreyavuz4706 Hallo Emre, the upload speed is just okay, but that doesn’t bother me at all, since I only use Tailscale from my Apple TV in Türkiye to access the football app ‘Tod oder Beein connect’ Once I’m in and have selected a game, I immediately turn off Tailscale in the background and can then continue watching over my regular internet connection. This works great, by the way, with other apps like Amazon as well.

[@camerontgore]

How would I get my remote Roku on a 192.168 address to talk to my local Jellyfin server at 10.0 ? My Jellyfin server has tailscale installed on it, but the Roku cannot. Can I set that node up as a subnet so that the 192.168 Roku can see the 10.0 Jellyfin?

[@Tailscale]

We currently do not support Roku for a number of reasons. Some folks in the community have done some clever things with routing to make their Roku devices use Tailscale routes though, like this: www.mattknight.io/blog/routing-roku-tailscale-exit-node

[@victorarango6054]

Please think about WebOS Lg TV, it could be so useful...

[@EngiNetion]

I second this!

[@joeknowsavings]

Now if they could add Bonjour to Tailscale, that would be incredible!

[@magog6852]

why?

[@bleem3k4]

Oh Alex, I nearly had to berate you for saying r-ow-ter, but I see you've relocated to the other side of t'pond! Cracking product, keep up the great work!

[@Tailscale]

My brain is so confused at this point too

[@tat3nda]

how could i connect tailscale to my xbox?

[@gbraadnl]

Finally, some actual use for the AppleTV I have ;-)

[@vega109]

I hope that Google TV will have a Subnet Router in the future!!

[@noinghenah2764]

i used apple tv as exit node and I can successfully establish direct connection to it but at 1 random point of the day, it lost connection even when the other devices and appletv is in local lan, the apple tv also cannot connect to the internet, it just restore if I turn off tailscale. About 5 minutes later, if I turn on tailscale, everything works fine. Dont know what is happening.

[@JasonWho]

I’m finding that my Apple TV has to be fully on for the exit node feature to work. If my Apple TV goes into standby, every device trying to use it as an exit node can’t reach the internet at all 😢

[@printingbuzz]

Great news, the Apple TV is now interesting. One drastic problem with Android is the Exit nodes need an urgent UI refresh when using Mullvad. It's impossible to find your own with all the VPN nodes in the same list on the Android app. Adding subfolders to organise exit nodes would be helpful as well as using it for regions with the VPN. 🎉📂

[@azndibs]

Desperately need this UI refresh, not just for Android but for Windows as well! The current list layout is incredibly cumbersome

[@AviDrissman]

I’m still pining for VNC in the browser, just like you have SSH in the browser; see your issue tracker #6102.

[@TheoneandonlyRAH]

Will this work on a pi4 being used as a pihole?

[@rysterstech]

probably not without moving pihole to docker using a mac/ipvlan setup, otherwise ports conflict. You can use a subnet router to access the pihole

[@Tailscale]

Should do!

[@lueotw]

Just tried it and it works! However, ping is not working...

[@Mario_Pintaric]

You might not have the requisite service that responds to ping requests. Windows, for example, requires a the installation of a service to respond to ping requests. Without it, you'll get no reply back.

[@pcmnn1920]

cool btw, maybe make tailscale avaliable for Mikrotik Router that'l be cool

[@NPx231]

Why not just use your router with ddns and open vpn?

[@NickBouwhuis]

This guy looks familiar. Are you the brother of the guy behind KTZ Systems? :D

[@Tailscale]

IMPOSTER!

[@SH4K4L]

i want to use this to get access to my Sonos System but, it doesn't work

[@Tailscale]

That's likely due to multicast requirements on the Sonos side. We don't support multicast over Tailscale. There are more details in this reddit thread if you'd like to dive into the technicalities. old.reddit.com/r/sonos/comments/t0emv0/the_definitive_sonos_vlan_segregation_post/

[@MartinPaoloni]

Oh, Alex from Tailscale. If only you had a podcast about self hosting 🙂

[@Tailscale]

I’ll write that one down! Great idea 💡

[@HaiLsKuNkY]

wow very easy, my nephew is in thailand and im going to set this up for him instead of a vpn

[@davekorns]

Thank you, thank you, thank you !!

[@nixxblikka]

I tested Tailscale last week and the need to fumble around with subnet routing pushed me away, looks like I will fügive it another go😂 have a nice weekend

[@rustyb78]

Roku please!

[@unyy01]

Brilliant 🎉

[@noomondai]

Why do you take and apple TV with you on your travels? Surely you should leave it home to use as an exit node?

[@Christos9]

Next video: Apple acquired and closed Tailscale :D

[@malzbier1339]

😍😍😍

[@johnwaldmann5222]

Unfortunately this video hinted at why you might use tailscale, but your discussion was almost entirely opaque. Your block diagram did not really explicate hardware/network structure. Please repeat with more detail, and clearer diagrams.

[@robinthekidd]

Don't be ashamed of being English, it's 'router' "roo-ter", not "rAuDeRrR"

[@Tailscale]

I'm definitely on the strugglebus with this one. I even flip flopped a couple of times in the video! -Alex

[@pepeshopping]

NO! Keep it point to point (client-server) unless you want any/other network devices to use/abuse such connection! Then. Wake me up when Tailscale implements SSL/https!!!