Is subnet routing supported? about headscale

[willzhang]

dont give up

查看注册的节点列表

/ # headscale nodes ls
ID | Name        | NodeKey | Namespace        | IP addresses                  | Ephemeral | Last seen           | Online | Expired
1  | will-laptop | [YC7fY] | myfirstnamespace | fd7a:115c:a1e0::1, 100.64.0.1 | false     | 2022-06-29 11:36:12 | online | no     
2  | willpc      | [VLyBR] | myfirstnamespace | fd7a:115c:a1e0::2, 100.64.0.2 | false     | 2022-06-29 11:36:42 | online | no     

删除节点

# headscale nodes delete -i 2

查看客户端发布的subnet

/ # headscale nodes routes list -i 2
Route           | Enabled
192.168.72.0/24 | false  
192.168.93.0/24 | false 

启用客户端发布的subnet

/ # headscale nodes routes enable -i 2 -r 192.168.93.0/24,192.168.72.0/24
Route           | Enabled
192.168.72.0/24 | true   
192.168.93.0/24 | true

[juanfont]

@Probotect0r yep, it is supported. You have to use the CLI client.

headscale -n NAMESPACE routes list NODENAME
headscale -n NAMESPACE routes enable NODENAME ROUTE

Can you give it a try?

[Probotect0r]

@juanfont
Thanks for the response. Unfortunately it's not working for me. Here is what I have done:

Enable the route and start headscale server:

headscale -n myfirstnamespace routes enable NODENAME 10.1.0.0/16
headscale serve

Run tailscale:

sudo tailscale up --login-server http://localhost:8080 --advertise-routes=10.1.0.0/16

Run MacOS client. It connects successfully.

/Applications/Tailscale.app/Contents/MacOS/Tailscale up -login-server http://myserver:8080 --accept-routes --authkey myauthkey

Then I am trying to run this from my Mac, but it is not responding. This same command works when I run it on the EC2 instance running Tailscale.

curl http://10.1.16.253:4000/

Note that Tailscale and Headscale are running on the same EC2 instance, hence the use of localhost for login-server when starting tailscale.

Any ideas what I am doing wrong?

[Probotect0r]

I seem to be able to ping the host via tailscale:

/Applications/Tailscale.app/Contents/MacOS/Tailscale ping 10.1.16.253
pong from ip-10-1-71-161 (100.64.0.1) via 18.117.81.172:41641 in 32ms

Do I have to do something in the Tailscale client to specifically connect to the EC2 instance?

Edit:
Actually, I can't even seem to connect to the EC2 instance itself via SSH over Tailscale, so maybe something else is not working.

[a1ad]

I don't have this issue. Do you still have this? Are you running tailscale and headscale on the same server? (sudo tailscale up --login-server http://localhost:8080) using localhost on the client suggest just that?

[juanfont]

I am going to close this. We haven being able to replicate it.

[Probotect0r]

I couldn't get it working so I abandoned my efforts.

[lqqkk]

I had the same problem. Changed route to TRUE as follows:

Route | Enabled
0.0.0.0/0 | false
::/0 | false
192.168.50.0/24 | true

But the subnet still doesn't work. What else needs to be configured?

[iamid0]

Need to enable ip_forward on the server which advertises the custom route.

[Nothend]

thanks a lot buddy ! I have a question , my headscale is installed in docker-compose , when i send the command "docker exec -it headscale headscale nodes routes list -i 2" , it shows "Error: unknown shorthand flag: 'i' in -i"

but when i send the command " docker exec -it headscale headscale nodes ls" ，it works right .

and the command "docker exec -it headscale /bin/sh " , it shows "OCI runtime exec failed: exec failed: unable to start container process: exec: "/bin/sh": stat /bin/sh: no such file or directory: unknown" .

it seems the command "routes" is not supportted in docker ?

please help me , thanks a lot

[unknown1818]

thanks a lot buddy ! I have a question , my headscale is installed in docker-compose , when i send the command "docker exec -it headscale headscale nodes routes list -i 2" , it shows "Error: unknown shorthand flag: 'i' in -i"

but when i send the command " docker exec -it headscale headscale nodes ls" ，it works right .

and the command "docker exec -it headscale /bin/sh " , it shows "OCI runtime exec failed: exec failed: unable to start container process: exec: "/bin/sh": stat /bin/sh: no such file or directory: unknown" .

it seems the command "routes" is not supportted in docker ?

please help me , thanks a lot

you need to use
sudo docker exec headscale headscale routes list
command
or to enable by ID 1
sudo docker exec headscale headscale routes enable -r 1