Relay via exit node will not route private address? (public address ok)

This is the network topology:

ping from 100.86.227.9 to 192.168.100.156 got no responses, I can not see any icmp request on exit node’s tailscale0 interface, it seems that traffic relay only works for public ip address but not private address.

configuration of 100.86.227.9:

configration of 100.122.102.75 (the exit node)

tailscale up --advertise-routes=10.0.1.0/24 --accept-routes -accept-dns=false --advertise-exit-node

However advertise-routes specify the subnet 192.168.100.0/24 will make it work:

tailscale up --advertise-routes=10.0.1.0/24,192.168.100.0/24 --accept-routes -accept-dns=false --advertise-exit-node

Perhaps related but I use pihole at home (on a 192.168.x.x address). It works great on my home network.

I had the pihole VM set up as tailscale exit node but when I set to use the exit node on iOS devices; I get a lot of ERR_NAME_NOT_RESOLVED now…

OK, it says

Exit node

Allow your network to route internet traffic through this machine. Learn more →

exit node will only route internet traffic, that seems reasonable

BTW 192.168.100.0/24 is not enabled, but I can ping 192.168.100.156 now.

1 Like

that’s great works now!