Use exit nodes

1. Download and install the Tailscale client.

2. Open a terminal session on the device and enable IP forwarding.

   If your Linux system has a /etc/sysctl.d directory, use:

   echo 'net.ipv4.ip_forward = 1' | sudo tee -a /etc/sysctl.d/99-tailscale.conf
   echo 'net.ipv6.conf.all.forwarding = 1' | sudo tee -a /etc/sysctl.d/99-tailscale.conf
   sudo sysctl -p /etc/sysctl.d/99-tailscale.conf
   

   Otherwise, use:

   echo 'net.ipv4.ip_forward = 1' | sudo tee -a /etc/sysctl.conf
   echo 'net.ipv6.conf.all.forwarding = 1' | sudo tee -a /etc/sysctl.conf
   sudo sysctl -p /etc/sysctl.conf
   

3. In the terminal session, advertise the device as an exit node.

   sudo tailscale up --advertise-exit-node
   

4. Go to the Machines page of the admin console.

5. Locate the device in the list. It should display the Exit Node badge.

6. Select the menu, then select Edit route settings.

7. Check the Use as exit node box, then select Save.

Run tailscale set with the --exit-node= flag, passing the Tailscale 100.x.y.z IP address of the exit node.

sudo tailscale set --exit-node=<exit-node-ip>

You can find the IP address for the device from the admin console or by running tailscale status.

Alternatively, set --exit-node-allow-lan-access to true to allow direct access to your local network when routing traffic through an exit node.

sudo tailscale set --exit-node=<exit-node-ip> --exit-node-allow-lan-access=true

To stop using an exit node, run the --exit-node flag without passing in an IP address.

sudo tailscale up --exit-node=