Skip to content

Releases: RemoteToHome-io/gl-tailscale-fix

v1.0.19

24 Apr 07:35

Choose a tag to compare

v1.0.18

28 Mar 08:34

Choose a tag to compare

Full Changelog: v1.0.17...v1.0.18

v1.0.17

22 Mar 09:50

Choose a tag to compare

Full Changelog: v1.0.16...v1.0.17

v1.0.16

22 Mar 09:21

Choose a tag to compare

Full Changelog: v1.0.15...v1.0.16

v1.0.15

13 Mar 03:20

Choose a tag to compare

Full Changelog: v1.0.14...v1.0.15

v1.0.14

12 Mar 20:42

Choose a tag to compare

Full Changelog: v1.0.13...v1.0.14

v1.0.13

10 Mar 05:09

Choose a tag to compare

Subnet Routing Fix

Automatically enables masquerade on the tailscale0 firewall zone, providing defense-in-depth for cross-subnet LAN routing between GL routers sharing subnets via Tailscale.

Problem: After disabling and re-enabling Tailscale (or after a daemon restart), cross-subnet traffic from LAN clients can break — even though Tailscale shows "Running" and subnet routes are approved. Router-to-router traffic (SSH, ping from the router itself) continues working, but forwarded traffic from devices on the LAN does not. This primarily affects fw3 (iptables) routers.

Root cause: Tailscale's built-in source NAT (--snat-subnet-routes) can fail to reinitialize after a daemon restart on fw3 kernels. The cleanup: list tables: netlink receive: invalid argument error during tailscaled cleanup correlates with this failure.

Fix: The plugin now sets firewall.tailscale0.masq=1, adding a standard firewall-level MASQUERADE rule as a fallback. This is applied automatically when Tailscale is active, re-applied after every restart, and removed cleanly on teardown. No user action required.

Other changes

  • Beryl 7 (GL-MT3600BE) added to compatibility table (community-verified)

Install / Upgrade

scp -O gl-tailscale-fix_1.0.13_all.ipk root@<router-ip>:/tmp/
ssh root@<router-ip> opkg install /tmp/gl-tailscale-fix_1.0.13_all.ipk

v1.0.12

08 Mar 21:23

Choose a tag to compare

Features

  • Routing Kill Switch — policy routing rules that block LAN/guest→WAN traffic at the kernel routing layer, independent of tailscaled. Persists through daemon crashes, OOM kills, reboots, and service restarts.
  • Advertise as Exit Node — GUI toggle for tailscale set --advertise-exit-node.
  • Guest Network Access — bidirectional firewall forwardings, guest subnet advertisement, and policy route fixup for full guest network Tailscale integration.
  • Tailscale Version Manager — one-click update with space-optimized combined binaries, factory restore.
  • Plugin Update Notification — checks GitHub for newer releases and shows an update badge.
  • Zero modification — never touches GL-owned files. Clean install and removal.

Install

scp -O gl-tailscale-fix_1.0.12_all.ipk root@<router-ip>:/tmp/
ssh root@<router-ip> opkg install /tmp/gl-tailscale-fix_1.0.12_all.ipk

Full setup guide: https://remotetohome.io/gl-tailscale-fix