Post #2730132
2026-05-11 10:39 UTC
You register a new device on your tailnet and advertise it as an [exit node](https://tailscale.com/docs/features/exit-nodes). When other devices on your tailnet use the exit node all of their traffic goes through that device. If that exit node has a wireguard connection setup, all other devices using it will also use that same connection. The only tricky part was making sure wg-quick’s systemd service starts before tailscaled’s does (mentioned that in my op).
Tailscale offers [this as a service](https://tailscale.com/docs/features/exit-nodes/mullvad-exit-nodes) but I dont use tailscale directly. I basically set this up manually and use headscale as my control server instead of using tailscale’s control servers.
Replies (1)
-
@eightys3v3n@lemmy.ca 2026-05-11 15:41
Okay, now it makes sense. For my purposes, I would only teed the headscale part for inter device communication. It makes sense though, rather than paying for a VPN for multiple devices (on those that charge per device) I could route traffic via tailscale / wireguard to a single VPN'd device.