asvow / luci-app-tailscale

LuCI support for tailscale
GNU General Public License v3.0
110 stars 18 forks source link

子网互通开关无法启用 #23

Closed acnixuil closed 2 weeks ago

acnixuil commented 2 weeks ago

固件:imm23.05 防火墙:fw4 勾选子网互通后,使用手机数据可以正常访问其他网段的数据,但本地的设备就无法做到,手动执行tailscale down和tailscale up一次后,子网互通又正常了

asvow commented 2 weeks ago

问题同 #22 ,可能由于路由未即时生效,本机测试环境下同样无法复现。

临时解决方案:在勾选选择其他的节点名称作为出口节点使用 以及 子网互通等涉及路由相互操作后,通过基础设置启用开关对tailscale进行关闭和再次启动。

该问题可能由于插件冲突导致,目前观察到的冲突有:

  1. OpenClash(dns fight导致MagicDNS无法正常使用;路由表无法正常生效)。改用mihomo后问题解决。
  2. passwall2 开启路由器本机代理后无法正常打洞。见#19
  3. iptables 或 iptables-nft等,当前OpenWrt主线已默认使用nftables,同时使用iptables规则可能导致防火墙设置冲突。

由于插件冲突引起问题将不做修复,请自行取舍。本插件已尽量仅使用uci命令对路由表、防火墙、网络接口进行操作以规避冲突。

acnixuil commented 2 weeks ago

使用的插件只有mihomotproxy,已在规则添加tailscale相关域名走direct。 1.尝试使用临时方案,手动关闭-打开开关,还是无法访问。 2.关闭除tailscale以外的插件,正常配置好,勾选子网互通后重启,还是无法访问。

日志太长,我截取一段

Oct 17 - 06:00:00 [ cron.err ] - pid 10294 cmd /etc/tailscale-restart.sh
Oct 17 - 06:00:00 [ StdErr ] - EditPrefs: MaskedPrefs{WantRunning=false}
Oct 17 - 06:00:00 [ StdErr ] - control: setPaused(true)
Oct 17 - 06:00:00 [ StdErr ] - Switching ipn state Running -> Stopped (WantRunning=false, nm=true)
Oct 17 - 06:00:00 [ StdErr ] - health(warnable=wantrunning-false): error: Tailscale is stopped.
Oct 17 - 06:00:00 [ StdErr ] - control: authRoutine: awaiting unpause
Oct 17 - 06:00:00 [ StdErr ] - magicsock: SetPrivateKey called (zeroed)
Oct 17 - 06:00:00 [ StdErr ] - magicsock: closing connection to derp-3 (zero-private-key), age 5m33s
Oct 17 - 06:00:00 [ StdErr ] - control: updateRoutine: awaiting unpause
Oct 17 - 06:00:00 [ StdErr ] - control: mapRoutine: paused
Oct 17 - 06:00:00 [ StdErr ] - control: mapRoutine: awaiting unpause
Oct 17 - 06:00:00 [ StdErr ] - magicsock: 0 active derp conns
Oct 17 - 06:00:00 [ StdErr ] - wgengine: Reconfig: configuring userspace WireGuard config (with 0/0 peers)
Oct 17 - 06:00:00 [ StdErr ] - wgengine: Reconfig: configuring router
Oct 17 - 06:00:00 [ StdErr ] - router: addr del failed: get input chain: chain filter not found in table ts-input
Oct 17 - 06:00:00 [ StdErr ] - router: addr del failed: get input chain: chain filter not found in table ts-input
Oct 17 - 06:00:00 [ StdErr ] - Reconfig(down): multiple errors:
Oct 17 - 06:00:00 [ StdErr ] - chain: chain filter not found in table ts-input
Oct 17 - 06:00:00 [ StdErr ] - addr failures; first was: get input chain: chain filter not found in table ts-input
Oct 17 - 06:00:05 [ StdErr ] - EditPrefs: MaskedPrefs{WantRunning=true}
Oct 17 - 06:00:05 [ StdErr ] - transitioning to running; doing Login...
Oct 17 - 06:00:05 [ StdErr ] - control: client.Login(0)
Oct 17 - 06:00:05 [ StdErr ] - control: setPaused(false)
Oct 17 - 06:00:05 [ StdErr ] - Switching ipn state Stopped -> Starting (WantRunning=true, nm=true)
Oct 17 - 06:00:05 [ StdErr ] - control: doLogin(regen=false, hasUrl=false)
Oct 17 - 06:00:05 [ StdErr ] - control: RegisterReq: onode= node=[D/zyb] fup=false nks=false
Oct 17 - 06:00:05 [ StdErr ] - magicsock: SetPrivateKey called (init)
Oct 17 - 06:00:05 [ StdErr ] - magicsock: private key changed, reconnecting to home derp-3
Oct 17 - 06:00:05 [ StdErr ] - wgengine: Reconfig: configuring userspace WireGuard config (with 2/6 peers)
Oct 17 - 06:00:05 [ StdErr ] - health(warnable=wantrunning-false): ok
Oct 17 - 06:00:05 [ StdErr ] - health(warnable=warming-up): error: Tailscale is starting. Please wait.
Oct 17 - 06:00:05 [ StdErr ] - magicsock: adding connection to derp-3 for home-keep-alive
Oct 17 - 06:00:05 [ StdErr ] - magicsock: 1 active derp conns: derp-3=cr0s,wr0s
Oct 17 - 06:00:05 [ StdErr ] - wgengine: Reconfig: configuring router
Oct 17 - 06:00:05 [ StdErr ] - derphttp.Client.Recv: connecting to derp-3 (sin)
Oct 17 - 06:00:05 [ StdErr ] - wgengine: Reconfig: configuring DNS
asvow commented 2 weeks ago

我尝试了你仓库最新x86-64固件问题依旧无法复现,路由、子网互通设置可实时生效。 IMG_2579