Help regarding Remote Access reddit / selfhosted ---------------------------------------------------------------------- sohailkhan46 · 2023-10-06 15:59 Hey Guys, I'm relatively new to the self-hosting and networking, and I only started it as hobby. Admittedly, my knowledge in this area is still quite limited, and I have a question about setting up my home server: I've installed Tailscale VPN on it, and now I'm wondering how I can access services like NextCloud, PhotoPrism etc. My home server has a private IP address of '10.1.1.18,' and through Tailscale, it also has an external IP address of '100.xxx.xx.72.' My confusion lies in whether I need to use both of these addresses separately, like 'PrivateIP:Port' and 'TailscaleIP:Port,' to access my services, or if there's a more seamless way to go about it. Thanks in advance :) ---------------------------------------------------------------------- Geminii27 · 2023-10-06 18:00 Basically, for anything on the internet which is going to be looking for your server, use the external IP address. This includes configuring any services on the server which will need to talk to things on the internet. (Although in most cases you can also use your external domain name.) Only use the internal IP address when you have something on your LAN talking to something else on your LAN. ---------------------------------------------------------------------- Patient-Tech · 2023-10-06 20:53 The internal address (10.x.x.x, or 172.16.x.x or 192.168.1.x) are universally local. No internet routers will forward these addresses. The 100.x.x.x will forward only via tailscale. ---------------------------------------------------------------------- sohailkhan46 · 2023-10-06 21:03 Thank you for helping me out, I know what you're saying but my question was do I have to use seperate address like when Im at home I use local ip for faster speeds and when im away from home I obviously have to use Tailscale ip, so it's a bit tedious to switch between Local and Tailscale service, I'm currently dealing with it by having 2 shortcuts per service, 1 with Local IP and 1 with Tailscale IP :/ ---------------------------------------------------------------------- jstevewhite · 2023-10-06 22:13 Tailscale will approach linespeed in most networks. It's a mesh (point to point), so accessing the tailscale IP should be just as fast as using your local IP. I often use the tailscale IP as the default access method. ---------------------------------------------------------------------- jstevewhite · 2023-10-06 22:16 If nothing outside of your tailscale needs access to the service, just use your tailscale ip. It's mesh, so point-to-point and will approach linespeed. On my GBE network, I can saturate the link between two tailscale endpoints. You can use tailscale magicDNS too. ---------------------------------------------------------------------- Patient-Tech · 2023-10-07 03:07 You should do just that when possible. TS will always have a little overhead on it for the encryption, so when you’re local you won’t need to use it. When remote, you’ll obviously have no choice. ---------------------------------------------------------------------- sohailkhan46 · 2023-10-07 06:24 can you please expand further on magicDNS and its advantage/uses as when I first setup Tailscale it was conflicting with my System DNS on Debian so I had to turn it off. ---------------------------------------------------------------------- jstevewhite · 2023-10-09 13:18 Yeah, default deployment of magicDNS caused me big issues initially. But if you look at the DNS tab, you can add DNS servers ( i.e. 1.1.1.1 or 8.8.8.8 ) and it will only use tailscale's dns for your tailnet's names - or that's what the docs say; I need to take the time to turn it back on and verify. Also, after talking about the speed, I did some testing in my lab. tailscale has a non-trivial CPU impact, and if one of your endpoints has lower CPU, you may see throttling. I get near linespeed between my Mac and my NAS, but to one of my VMs I only get about 600mb/s.