Cheat sheets

Cheat sheet: Tailscale

You can securely connect your devices with Tailscale. How to set it up is explained in WireGuard or Tailscale.

Connecting

Log in and connect sudo tailscale up
Disconnect sudo tailscale down
Log out and remove the device sudo tailscale logout
Your network status tailscale status
Your own Tailscale address tailscale ip -4
Show version tailscale version

Testing

Test device reachability tailscale ping name
Check network connection tailscale netcheck
Who is this address? tailscale whois 100.x.y.z

Sharing your home network

Make your network available (subnet router) sudo tailscale up --advertise-routes=192.168.1.0/24
Accept routes from others sudo tailscale set --accept-routes
Offer this device as an exit node sudo tailscale up --advertise-exit-node
Use an exit node sudo tailscale up --exit-node=name-or-address
Enable forwarding (one-time) echo 'net.ipv4.ip_forward = 1' | sudo tee /etc/sysctl.d/99-tailscale.conf && sudo sysctl -p /etc/sysctl.d/99-tailscale.conf

Tools

Log in with Tailscale SSH tailscale ssh user@name
Send a file to another device tailscale file cp file name:
Retrieve received files sudo tailscale file get .
Request an https certificate for your device sudo tailscale cert name.your-tailnet.ts.net
Check the service systemctl status tailscaled

Good to know

  • You also need to approve routes and exit nodes in the admin console at login.tailscale.com.
  • Choose a range for your home network that does not overlap with the network you’re on when away from home (check with the CIDR overlap tool).
  • Tailscale options change with new versions; check the documentation if in doubt.

Sources and attribution

This overview is compiled in our own words. Commands and options vary by version: check the official documentation if in doubt.