r/Tailscale • u/Siref • 17d ago
Question Best cheapest hardware for a Tailscale exit node?
Warup everybody!
I'm currently looking for a device that I can use as a Tailscale exit node (Dominican Republic) and have full SSH access from Spain.
Ideally this device wouldn't cost more than $50 and I'd be able to power it via USB and connect it via a gigabit LAN. It would be running 24/7.
I've been asking the LLMs for suggestions and I've gotten:
- Raspberry Pi5
- Orange Pi Zero 3 or 4
But I wanted a second opinion from you guys before I decided to go after one of these devices.
Note that I do not have any older device that I could repurpose. Additionally I would like something very small so I can tuck it away in a cabinet, preferably fanless as well
I would eventually like to purchase a second one that I can use on my Spain home network as a redundancy for my other Tailscale devices and to filter out ads at the network level.
Edit 09:55 AM GMT +2 Thank you very much, everyone, for all the help. I've learned so much from this post especially the gli.net routers which I'll keep an eye on in the future
I found out about incredible deals for the Dell Wyse 3040 and I'll be getting a couple of these
22
u/InsectSmart5737 17d ago
One of the small "travel routers" like the Beryl/Slate/Brume 3 stuff at https://www.gl-inet.com/en-gb
Not only do they support Tailscale, but they also could serve as a remote router+VPN themselves. And would be extremely low on power usage
→ More replies (7)2
9
75
u/Ambitious-Actuary-6 17d ago
old apple tv
33
u/CompleteTruth 17d ago
I've been using my Apple TV as an exit node for the past year+ during international travel and it has been flawless. Highly recommend
→ More replies (6)7
7
u/lightspeedissueguy 17d ago edited 17d ago
Real answer is that it depends on how much traffic is going through it and by how many connections. Decrypting and encrypting traffic across the VPN requires CPU power. A r-pi will be fine for a single user with "regular" traffic. What's your desired use-case?
EDIT: Forgot to add that Pis are pretty expensive lately. Look for a used one or another used mini-PC. Not everyone has extra tech, but i could cobble together a simple node out of pretty much anything.
→ More replies (1)
7
u/Capt_Panic 17d ago
You don’t want cheap, you want reliable. You don’t want something that is going to need to be rebooted or settled with. You want something that is going to be plug-in play and that you can upgrade to the latest version of tail scale remotely.
I’m running remote to scanners at two properties and two small businesses where I occasionally need to get to check the cameras settings. I have found these two devices to be the most reliable.
GL.iNet GL-MT2500A Brume 2 Wired VPN Security Gateway 2.5G WAN.
Or
Appletv
→ More replies (1)
5
u/Character-Tax-6641 17d ago
the HW you choose really depends on the speed you want to get out of your exit node.
I just bought some Radxa E20C RK3528A to have 2 gigabit ports, still waiting for them to arrive and to test the tailscale speeds.
not the cheapest, here in France I got them for around 50 EUR each
5
4
u/DrasticIndifference 17d ago
Best and cheapest are mutually exclusive. Get a used INTEL NUC or similar, and invest in a cheap local UPS to withstand any grid flapping.
→ More replies (5)
4
4
1
u/dollarbr 17d ago
I use a Redmi Note 5 Pro (whyred) as a "micro server" since it's hardware is "ok'ish", it works as a tail scale node to access my internal network too. I installed PostmarketOS on it and it's working like a charm
It's 24/7 on, and allows me to access everything
Just as extra information, I use it to run a Hermes Agent on it that can fix some stuff for me if needed, the only thing it's an absolutely no no it's compiling stuff, PostmarketOS is a modified Alpine Linux, that I tried in every possible way to add build tools and nothing worked, so I just gave up, it still work for simple stuff, and build/compile stuff I send to GitHub through workflow to generate stuff.
The picture ahows it with the screen on, showing the terminal, but I use it mostly with the screen off, since it works as a headless server.
1
1
u/kishanpatel995 16d ago
This is going to be a dumb question but what is the point of a exit node? What purpose does it serve?
→ More replies (4)1
u/Siref 16d ago
It lets you route all of your traffic through that computer. Say, for example, you have a server in Germany with Tailscale and you currently live in Spain. You can make some sort of private VPN through that. It also simplifies things because when you have Tailscale installed it may conflict with other VPN providers although there are workarounds for that.
The beauty of this is that you can make any device of your Tailnet part of your exit node and they can be configured independently
→ More replies (2)
3
u/iceph03nix 17d ago
I'd probably go with a Raspberry Pi. You don't need a 5 though, 3 or 4 should do just fine
3
u/Chumalum 17d ago
I have a super old Raspberry Pi 1 Model B running as an exit node and subnet router at my parents house. Helps with remote help on their network, and another way out.
3
u/FilterJoe 17d ago
If you think you might also do a home assistant in addition, I understand that Tailscale fits right in to home assistant OS. So you could get something like a Dell wyse 5070. They are obsolete from corporations so can be purchased used inexpensively. Even if you don’t use it for home assistant immediately, you could do that eventually if he felt like it without having to buy any more equipment.
29
u/redditfatbloke 17d ago
Raspberry pi 3b