I would really really really like to have one device on my tailnet as the exitnode for all other devices on the tailnet. However, most VPNs make this really difficult. Is there any way to do this? I’ve read it’s possible with split-tunnelling, but ProtonVPN (which I use) doesn’t support that. I just installed Alpine Linux on my RPI 4b. And would like to use this as my exit node. Does anyone have any tips for how this could be done?

    • Lunch'@lemmy.worldOP
      link
      fedilink
      arrow-up
      5
      ·
      edit-2
      1 year ago

      Right that is pretty much clear, but I want this exit node to be running ProtonVPN as well. This however does not seem to be possible (to my knowledge). Edit: This is also why Tailscale added support for Mullvad VPN i assume.

      • Responsabilidade@lemmy.eco.br
        link
        fedilink
        arrow-up
        4
        ·
        edit-2
        1 year ago

        Ok… I think I didn’t get what you’re trying to say. Do you wanna run a VPN through a VPN?

        I mean, you have your RPI 4b as a Tailscale exit node, but the RPI 4b itself connects to the ProtonVPN?

        • Lunch'@lemmy.worldOP
          link
          fedilink
          arrow-up
          3
          ·
          edit-2
          1 year ago

          Right, so I’ve got Alpine on the RPI, and have installed/configured protonvpn with wireguard. However, if I then start Tailscale, the already running ProtonVPN connection goes down. Same happens if Tailscale is already running, and I try to start the ProtonVPN connection it will just refuse the connection.

          I want it to connect to both services, as then this can act as the exitnode for all other devices on the tailnet. Whilst also giving the benefit of ““being in a different location”” with protonvpn.

          So essentially, both services wants to use /dev/net/tun, but only one can.

          • Responsabilidade@lemmy.eco.br
            link
            fedilink
            arrow-up
            3
            ·
            1 year ago

            Well, I found this article saying that theoretically is possible, however not so much. It says that depends on how the other VPN works. They even suggest some workarounds, so take a look

            Anyway, have you tried to create another tun/tap service to run both VPN?

            • Lunch'@lemmy.worldOP
              link
              fedilink
              arrow-up
              2
              ·
              1 year ago

              Yeah already scoured their documentation for this, but no luck with any of the workarounds sadly.

              Have not tried to do the latter you mentioned though? Not sure how to do that, but I will look into it asap.