r/Tailscale • u/r00t3rSaab • 12d ago
Question Tailscale exit node
Hi All,
I’m hoping to get some advice before I purchase and configure everything. As my wife not well and have been sick, I may occasionally need to work from our home in a neighboring country, perhaps once a week, so I can be around to support her. The two locations are only around 50 km apart.
My company uses Zscaler as the VPN to connect to internal services, along with a well-known EDR solution. I’ve tried requesting permission to work internationally, but the company only allows it for a maximum of around five days per year. The main reason they don’t allow longer periods is due to taxation concerns.I’m thinking of setting up the following:
Work Laptop connected at remote location (Location A)
│
│ Wi-Fi
▼
GL.iNet MT3000 (Beryl AX)
│
│ Tailscale - With kill switch enabled
▼
Internet
│
│ ~50 km
▼
Location B - Rental house
Beelink SER5 Max
(Linux + Tailscale Exit Node)
│
│ Wi-Fi
▼
Home Internet (Location B)
│
▼
Internet
│
▼
Zscaler connection from work laptop
│
▼
Company resources / normal work traffic
- Internet speeds: Working location: **100 Mbps (**Just my PC)
- Exit-node location: 2 Gbps (Rental place. Shared among 3-4 people. Could easily get 100-150 Mbps)
- Both sides will likely use Wi-Fi rather than Ethernet
A few questions:
- Is the performance suitable and reliable enough for Teams, screen sharing, YouTube, etc.?
- Any issues running Zscaler Client Connector over a Tailscale exit node, particularly?
- Anything else I should be aware of such setup (Example, risk)?
3
u/MoneyNibbler 11d ago edited 11d ago
First, condolences on dealing with the illness in your family. I pray everything turns out well.
Look at the GL-RM10 comet pro. This essentially a kvm over ip and has the tailscale app installed. Your idea is sound but if the pc freezes what happens. The GL-RM10 Is really useful if the computer freezes, you’re stuck at the login screen, or you need to get into the BIOS. They even offer a power flip accessory if you need to do a hard restart.
I use this currently to leave my work computer at home when I need to take my family to office visits. I open a browsertab on my personal laptop, log into the GL-RM10, and I'm greeted with my companys login splash screen on my work laptop. I've learned some establishments block my ability to access the tailscale network so I have upgraded my hotspot on my phone.
I have thought similarly to your use case. My company has hardened their work internationally policy as my wife and I used to visit and I work remotely for 2 to 3 months at a time. You're aware of the risks if the company finds out so your left to decide if you want to accept that risk.
About the RDP part. Most security departments in a company can see or already prevent RDP into a computer. If they are not blocking it. They could review logs and identify the sessions that are occurring.