technohim/docker-infrastructure
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

tailscale-proxy: move ts-vpn (IKEv2 egress) exit node 06-hetzner -> 04-zomro

Browse Source 
New Tailscale UDP flows from the Kirochnaya WAN to both Hetzner exit
nodes are dropped in transit (0 packets arrive; restart for a new port
did not help), so IKEv2 clients had no internet. 04-zomro (NL) answers
direct from ts-vpn; egress verified as 185.219.83.208, YouTube 200.
Host compose already matches (ts-vpn section identical). ts-proxy left
on 06-hetzner: its established flow still works.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
pipistrello
2026-10-12 13:12:05 +03:00
co-authored by Claude Opus 5.5
parent ea9501f719
commit c8fea8e801
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tailscale-proxy/docker-compose.yaml
+2 -1
View File
@@ -102,7 +102,8 @@ services:
TS_STATE_DIR: /var/lib/tailscale TS_STATE_DIR: /var/lib/tailscale
TS_USERSPACE: "false" TS_USERSPACE: "false"
TS_ACCEPT_DNS: "false" TS_ACCEPT_DNS: "false"
TS_EXTRA_ARGS: "--exit-node=100.106.197.99 --netfilter-mode=off --reset" # 2026-10-12: 06-hetzner unreachable for new Tailscale flows from Kirochnaya (incident 2026-10-12) -> 04-zomro (NL)
TS_EXTRA_ARGS: "--exit-node=100.122.51.71 --netfilter-mode=off --reset"
cap_add: [NET_ADMIN] cap_add: [NET_ADMIN]
devices: ["/dev/net/tun:/dev/net/tun"] devices: ["/dev/net/tun:/dev/net/tun"]
sysctls: sysctls: