tailscale / tailscale

The easiest, most secure way to use WireGuard and 2FA.
https://tailscale.com
BSD 3-Clause "New" or "Revised" License
16.84k stars 1.28k forks source link

FR: Enable Tailscale Connection Relay for Improved Latency and Stability #11879

Open zsio opened 3 weeks ago

zsio commented 3 weeks ago

What are you trying to do?

I am trying to find a solution for routing connections between machines in a Tailscale network when direct connections are not possible.

How should we solve this?

I suggest exploring the possibility of utilizing existing Tailscale nodes for connection relay, without the need for setting up a dedicated DERP server. This would involve automatically routing the connection between machines through a Tailscale node that is accessible to both parties, improving latency and stability.

What is the impact of not solving this?

Failure to address this issue has a significant impact, especially for users located in China. The current reliance on official DERP nodes for connection routing results in high latency and instability between machines in the Tailscale network. This hinders effective communication and collaboration, impacting productivity and user experience. By not providing an alternative solution, Tailscale users in China face ongoing challenges in establishing reliable and low-latency connections between machines. Resolving this issue would greatly improve the usability and performance of Tailscale in China and similar network environments.

Anything else?

No response

zsio commented 3 weeks ago

Additionally, I would like to highlight a specific situation I encountered. While attempting to address this issue, I initially set up a self-hosted DERP server. Recently, I noticed a peculiar scenario where the tailscale netcheck command showed that my self-hosted DERP server had the lowest latency. However, when using the tailscale status command, it indicated that it was unable to connect to this DERP server. I also attempted to ping between two nodes that were unable to connect, even though other DERP connections provided by Tailscale were functioning properly. Unfortunately, I am unsure how to troubleshoot this issue and determine the underlying cause preventing successful connection to the self-hosted DERP server.

Resolving this issue would not only address the challenges faced by Tailscale users in China but also provide clarity and guidance on troubleshooting self-hosted DERP server connectivity issues.

Thank you for considering these additional details, and I look forward to any insights or suggestions on how to resolve this matter.

bradfitz commented 2 weeks ago

It is not Tailscale's goal to be a Great Firewall of China circumvention tool. Tailscale is designed to work on the Internet.

And even if that were a goal, we have no means of testing it.

zsio commented 2 weeks ago

It is not Tailscale's goal to be a Great Firewall of China circumvention tool. Tailscale is designed to work on the Internet.

And even if that were a goal, we have no means of testing it.

I appreciate the response from the development team. I apologize if my previous message was misunderstood. I would like to clarify that my intention is not to use Tailscale as a tool to circumvent network censorship or restrictions.

My main objective is to find a solution that allows for automatic traffic routing through a mutually accessible node, which can help improve latency and stability in certain network environments. This is particularly relevant in situations where connecting to foreign DERP nodes results in high latency.

I understand that Tailscale is designed to work on the Internet and not specifically as a circumvention tool. My request is solely focused on optimizing the routing of traffic within the Tailscale network to ensure better performance and reliability.

I hope this clarification helps to convey my intentions accurately. I appreciate the team's consideration and any guidance or suggestions they can provide to achieve the desired outcome.

Thank you for your attention to this matter.