Posts tagged: tailscale Archive

💭 What are these 100.x.y.z addresses? · Tailscale Docs

2025-06-07T11:27:43Z

Here’s my thought on What are these 100.x.y.z addresses? · Tailscale Docs

I have had serious issues with a whitelist I set in my traefik config and then reaching some services on my tailnet… turns out I whitelisted 10.64.0.0/10 instead of 100.64.0.0/10 in my traefik configuration file…

Note

This is one of [[ my-thoughts ]]. I picked this up from Waylon Walker(https://thoughts.waylonwalker.com). It’s a short note that I make about someone else’s content online. Learn more about the process Thoughts

Double check your CIDR blocks!

2025-06-07T07:27:31Z

tl;dr

Copy paste - don’t rely on typing correctly…

The Issue

I use tailscale at home and generally love it. One thing I use it for is whitelisting - so I have some apps publically available and my homelab ones have DNS with SSL certs by LE but I whitelist to only my private IPs so that I can use https at home basically. However I have had a few issues with a couple apps, and I kind of chaulked it up to “network protocol this” “need to figure out that header that” but ultimately I was being lazy and the issues weren’t catastrophic… it was things like:

couldn’t get to my NVR by DNS, so I’d have to use tailscale_ip:port
couldn’t login with my user in jellyfin cause I lock me down to LAN only since I dont’ use a password
gotify wouldn’t connect using DNS

These things aren’t huge but they are annoying and today I decided to figure it out.

Typo! #

I’m not an expert yet but I think the main problem was the CIDR block I was using in my traefik config.

This’ll shock some of you but 10.64.0.0/10 and 100.64.0.0/10 are not the same blocks!

Check your CIDRs

It’s always DNS, and even when it’s not, it’s still probably networking

💭 Installing Tailscale on JetKVM | Medium

2025-04-28T14:07:51Z

Here’s my thought on Installing Tailscale on JetKVM | Medium

My jetKVM is a flipping dream - plug and play kvm that worked out of the box. I want to put tailscale on it so I can hit my server from anywhere no matter what - this article appears to walk through doing it.

Note