Tailscale funnels for remote access?

[muzicman0 84]

Hey everyone, 

I use Tailscale both personally and for my office.  They have a new feature called Funnels that allow a device on your Tailnet to be accessed from the public internet via https.  I am curios if anyone has tried using it for Emby.  I have been using Cloudflare tunnels for about a year, but that may not last forever, so I am looking for an alternative.

[Luke 42077]

@pir8radio have you heard of funnels?

[pir8radio 1312]

On 3/2/2023 at 2:59 PM, Luke said:

@pir8radio have you heard of funnels?

no, but sounds cool..   quick google sounds very similar to cloudflare tunnels. 

[muzicman0 84]

The only downside for some would be you can't use your own domain.  But in my case, that wouldn't be an issue.  I would just set the URL in the Emby settings and let Emby Connect handle it from there.

[muzicman0 84]

I was finally able to test this, and while it does work, the bandwidth is just too low.  A remote user was able to stream great at 1 Mbps, but even at 5 Mbps, it won't work.

With that said, Using Tailscale without funnels would work fine as long as it is a direct connection, and not relayed.  It just requires that both sides are logged into Tailscale on the same Tailnet (or shared).  It could be a good option for those with a Shield (which can run Tailscale natively), or using PC's as a remote computer, etc.

[Mundoemby2 0]

una consulta el Taliscale y cloudflare se necesita instalar un cliente en la pc remota o smat tv?.

el que ahora no me permite usar un cliente en la p'c remota es NGRok pero solo puedo acceder por web con link que me da el NGrok, pero en la aplicación de emby no se puede porque me pide un puerto y si pongo el l ink que me da ngrok y el puerto 80 o 443 que es por donde crear el tunel no me permite conectar el aplicativo emby

 

[Luke 42077]

@muzicman0 may have some tips on that. Thanks.

[muzicman0 84]

10 hours ago, Mundoemby2 said:

una consulta el Taliscale y cloudflare se necesita instalar un cliente en la pc remota o smat tv?.

el que ahora no me permite usar un cliente en la p'c remota es NGRok pero solo puedo acceder por web con link que me da el NGrok, pero en la aplicación de emby no se puede porque me pide un puerto y si pongo el l ink que me da ngrok y el puerto 80 o 443 que es por donde crear el tunel no me permite conectar el aplicativo emby

 

Cloudflare Tunnels requires a client on the Emby side.  It does not have to be on the PC running Emby, but in my case it is.  Then the Emby server is accessible from the public internet.  I would use firewall rules to limit my public exposure.  Cloudflare will also require a domain name registered with Cloudflare, so this is not a free option.

Tailscale is a mesh VPN based on Wireguard, so generally there is a client running on either side.  In my case, I use what is called a subnet router on my home side where the emby server is so that I don't have to have Tailscale installed on all of my devices inside my home network (just one), but it would require remote users to have Tailscale on their device.

I would say Tailscale would be my choice as long as I am accessing from something that can run the Tailscale client.  It is a direct/encrypted connection in most cases.  There are free plans available that should give you all the features you would need to set up.  I use Tailscale for many things and can't say enough good things about them!

[Xeeks91 0]

How to set up funnel I have been trying unable to do it yet.

[Luke 42077]

8 hours ago, Xeeks91 said:

How to set up funnel I have been trying unable to do it yet.

Hi there, what exactly have you done so far?

[pwhodges 2012]

10 hours ago, Xeeks91 said:

How to set up funnel I have been trying unable to do it yet.

Have you gone through the Tailscale setup page?  If so, where do things go wrong for you?

https://tailscale.com/kb/1017/install

Paul

[Xeeks91 0]

Was able to set this up, worked fine for a while and then speed dropped now using VPS to bypass CGNAT

[tedfroop21 86]

On 28/01/2024 at 15:43, muzicman0 said:

Tailscale is a mesh VPN based on Wireguard, so generally there is a client running on either side.  In my case, I use what is called a subnet router on my home side

  That's the way to do it.  Once you add the subnet router it effectively as they say:

" Subnet routers let you extend your Tailscale network (known as a tailnet) to include devices that don't or can't run the Tailscale client."

So devices like a Roku are covered even without the client installed.  It does one other important thing which is allow local routing for your Tailscale devices.  Without it everything goes through their DSU, so out to their DSU, back to a second device, which makes things slow.