Is the adam one stack compatible with Tailscale? Is it possible to run a DNS server on the Tailscale network together with the mytools server?
In theory it seems it is. When I add the interface tailscale0 and the listeners in the .CONF file I can reach the mytools page by IP address, but not by host name. I think I have set up all of the correct options to force the DNS to the gateway. I’m using the gw as an exit node but I lose Internet access. Still have advertised routes access, but no Internet. Has anybody ever tried this?
Hey @nckrwlmn
So Tailscale by default enables their MagicDNS feature which basically runs a local stub resolver on the machine with a search domain of <youraccount>.ts.net which allows your tailnet hosts to be resolved and then by default your devices local DNS nameserver is used to resolve non tailnet hosts.
This means that it works perfectly well with adam:ONE and DTTS.
**be sure to add this to your policy using DNSHarmony, and also to adjust for NXDOMAIN/yhttps://support.adamnet.works/uploads/default/original/1X/e83c093d8e1fe3c3d6feb51e99a5862e081d4982.pngour block page IPs
We can verify with ping first with tailscale enabled and then disabled:
you’ll see all traffic seems to be coming from the router (exit node)!
[Edit (26 Jun 2023)]:
I forgot to mention, and I think it matters, adam will need to listening on localhost, so that would mean something like the below, which is a slight deviation from defaults.
# adamone-setup configure
...
Available Interface Addresses:
1 - WAN (68.35.118.117)
2 - *LAN (172.16.1.1)
3 - *Localhost (127.0.0.1)
4 - Localhost (::1)
Select the addresses you would like adam:ONE to listen on separated by a
comma, press <ENTER> to skip [2,3]: 2,3,4
Further, I cannot say whether this does or does not work with DTTS.
It depends on from what aspect you’re asking the question. Tailscale is using WireGuard under the hood, so the protocol security aspect would be the same. The main difference is the orchestration aspect of it. When you run your own VPN server, you are responsible for transferring keys, provisioning new keys, etc. But with Tailscale you are using their cloud based system to do this all for you.
So the security may be better, or worse depending on how it compares to your own security practices of managing the keys.
The aspect that gives a solution such as Tailscale an advantage, is the mesh feature, instead of giving users access to an entire network, you can grant by user, access to specific hosts and even ports. So there’s a lot more control than a traditional router based VPN.
