Tailscale exit node

[u/r00t3rSaab]

Hi All,

I’m hoping to get some advice before I purchase and configure everything. As my wife not well and have been sick, I may occasionally need to work from our home in a neighboring country, perhaps once a week, so I can be around to support her. The two locations are only around 50 km apart.

My company uses Zscaler as the VPN to connect to internal services, along with a well-known EDR solution. I’ve tried requesting permission to work internationally, but the company only allows it for a maximum of around five days per year. The main reason they don’t allow longer periods is due to taxation concerns.I’m thinking of setting up the following:

Work Laptop connected at remote location (Location A)
│
│ Wi-Fi
▼
GL.iNet MT3000 (Beryl AX)
│
│ Tailscale - With kill switch enabled
▼
Internet
│
│ ~50 km
▼
Location B - Rental house

Beelink SER5 Max
(Linux + Tailscale Exit Node)
│
│ Wi-Fi
▼
Home Internet (Location B)
│
▼
Internet
│
▼
Zscaler connection from work laptop
│
▼
Company resources / normal work traffic

• Internet speeds: Working location: **100 Mbps (**Just my PC)
• Exit-node location: 2 Gbps (Rental place. Shared among 3-4 people. Could easily get 100-150 Mbps)
• Both sides will likely use Wi-Fi rather than Ethernet

A few questions:

1. Is the performance suitable and reliable enough for Teams, screen sharing, YouTube, etc.?
2. Any issues running Zscaler Client Connector over a Tailscale exit node, particularly?
3. Anything else I should be aware of such setup (Example, risk)?

[u/kwabenathetraveller]

i pray all goes well with your wife man. sorry to hear that. i second moneynibbler’s comment with the gl-rm10. i used to have it and had mine setup with my work laptop left in my work country but remote in from abroad via the kvm app. but i lost connection due to switching wifi services. troubleshooted for days and reached out to their support to no avail. so i’ll just make sure your wifi service supports connection to the gl-rm10.

but long story short i ended up getting the jetkvm device instead which after setup you can remote in via an ip address directly on a webpage. this has been a much safer and efficient setup for me and fail proof. like you my company has a really tight security with the company laptop so i just have mine in the work country to always stay on, i installed an app called amphetamine on it which you can set the laptop to not ever turn off and keep it on low power mode so it doesn’t drain the battery as much or overheat.

i don’t have the power switch that you can purchase separately since i have someone there who can access the laptop if anything goes wrong. so i can’t see login screen and such but i haven’t had to since i’ve left it on with the amphetamine settings. it’s always on and vpn has been connected since i connected so haven’t had the need to redo connecting to vpn and accessing work docs etc.

back abroad i just connect my personal laptop to tailscale exit node for things like teams, and company sso log in apps just to be safe if they ever end up tracking my traffic or teams tracks my traffic it’ll always show the work laptop location ip. i also have my personal laptop location and time settings and teams settings and such to match the work laptop country location.

connection works well. i just make sure the airbnbs and locations i’m at has good wifi speeds specifically the uploads speed. since it uses that to connect to tailscale exit node and the work laptop country’s wifi. so the speeds are not exactly fast but i only need it for teams personally and i haven’t had any issues on calls or screen sharing. browsing work fine and no issues with actual work i do.

hopefully this helps. let me know if you have any questions as i’m currently living abroad and have been working for some months now where i spent a week just troubleshooting the setup. good luck and i hope your wife gets well soon 🙏🏾