Frequently Asked Question

Why Tailscale?

• Tailscale is a ZERO Trust VPN.
  • This means that only YOU (or anyone you grant access to) can connect to your computer.
  • Devices running Tailscale only exchange their public keys. Private keys never leave the device. All traffic is end-to-end encrypted, always.
• Tailscale is ZERO Config!
  • Install the client, authenticate, and your computer, phone, etc are now on YOUR private Tailscale Network ( tailnet ).
• Your VPN traffic does NOT (normally) go through any 3rd party server
  • Tailscale does run a server that helps your computers find each other.
  • After that, your VPN traffic flows between only your two computers, not through theirs.
    Note: In some extreme situations where this computer to computer connection cannot be established, Tailscale does offer a server to facilitate your traffic. This is exceptionally rare, and much slower than normal operation.
• You can always use the VPN IP, even when on the same network with the other device!
  • Since the VPN traffic is direct between the two computers, it won't go out over your internet connection when the two devices are on the same network.
• It's FREE for up to 100 computers on your account!
  https://tailscale.com/pricing/
• You can share access to any computer with other collaborators.
  https://tailscale.com/kb/1084/sharing/
• It works on basically EVERY operating system, including mobile devices, Raspberry Pi, Network Attached Storage (NAS), etc.

Sign-up and Initial Installation

1. Sign up for an account, using your preferred authentication provider:
   https://login.tailscale.com/start
2. Once complete with the Sign-up Process, download and install the Tailscale client for your local computer:
   https://tailscale.com/download/
3. After installation, you will get a notice of needing to log in. Click that prompt to open a new browser window. Be sure to sign-in with the same authentication provider as used in Step 1.
   – Do NOT – use the normal 'email' sign-in process as it won't match. You must click the proper 'Sign-in with' button that matches what you used in Step 1.
4. Once you complete the sign-in, you'll be notified that the window can be closed. Feel free to do so.
5. You can see the computers that are signed in under your account using:
   https://login.tailscale.com/admin/machines
   Note: This can always be reached by clicking the 'Log In' button at the top right from
   https://tailscale.com
6. Follow Steps 2 through 4 on your remote computer. This can typically be performed via something like RustDesk, TeamViewer, Chrome Remote Desktop, Anydesk or other similar remote access solutions.
7. More detailed step-by-step: https://tailscale.com/kb/1017/install/

Post installation recommended configuration

After your remote computer is online, I recommend a few settings changes to maximize availability of the remote computer.

1. Disable key expiry for the remote computer - otherwise, you will be required to re-authenticate it periodically.
   https://tailscale.com/kb/1028/key-expiry/
2. Enable 'Run unattended' - this will allow Tailscale to run when the computer boots, before you log into the system.
   https://tailscale.com/kb/1088/run-unattended/
   1. Right-click the Tailscale logo on your task-bar
   2. Mouse over the 'Preferences' menu item
   3. Click the 'Run unattended' option to place a check-mark beside it.
   4. Click 'Yes' in the pop-up confirmation dialog.
      

Obtaining the IP of a computer to which you have access

1. Right-click the Tailscale logo on your task-bar
   
2. Mouse over the 'Network Devices' menu item:
   
3. Then mouse over the 'My Devices' menu item
   Note: If you're granted access to anyone else's computers, in addition to the 'My Devices' menu item, you will also see an entry for each other person who has granted you access.
   
   
4. Click the name of the computer for which you need the IP. Upon click, the IP address of the computer will be copied to your clipboard.

Ways to use the IP of your remote computer

This remote IP is usable just as if you were on the local network with the
computer. You could do things like:

• Connect for remote screen viewing using:
  • RustDesk (Strongly Recommended!)
    • You must set 'Enable Direct IP Access' in the RustDesk settings on the remote computer:
      • From the 'Settings' page, click 'Security' -> 'Unlock Security Settings'
      • Ensure the 'Enable Direct IP Access' option is checked.
      • Don't change the 'Port' value for easiest future use.
    • Also, select 'Use permanent password', then 'Set permanent password' for ease of unattended remote access.
  • Microsoft Remote Desktop
    • Only available if the remote computer is running Windows 'Pro' or 'Enterprise' edition. Remote desktop must be enabled on the remote computer before it will allow connections.
    • Use the VPN IP in the 'Computer' field of 'Remote Desktop Connection'.
  • TeamViewer
    • You must set 'Incoming LAN connections' to 'accept' in TeamViewer on the remote computer:
      Click 'Extras' -> 'Options' -> 'General' -> Under 'Network Settings' header, click on the drop-down beside 'Incoming LAN connections' and pick 'accept', then click 'OK' to save the change.
    • Note that this VPN IP use will completely bypass any 'Commercial Use' checks which commonly trip up legitimate non-commercial users.
  • RealVNC
• Use Windows File Sharing to access the storage on the remote computer.
• Access any Web interface provided by NINA ( Web History Viewer plugin, Touch'n'Stars plugin ), Voyager, or other software.
• Use the remote computer's astronomy gear via ASCOM Alpaca Server