Trying to find a way to connect to my home server as well as my VPN at the same time. Doesn’t seem like tailscale can. I’ve started looking at pangolin, has anyone had any luck with this issue?

Thank you

  • frongt@lemmy.zip
    link
    fedilink
    English
    arrow-up
    6
    arrow-down
    2
    ·
    4 months ago

    VPN to home, then route outbound traffic over the other VPN.

  • Taasz/Woof@lemmy.blahaj.zone
    link
    fedilink
    English
    arrow-up
    3
    ·
    4 months ago

    Maybe run the public VPN at home with NAT enabled, and use it as the default gateway in the private VPN. Never done it but I think I’ve seen some guides on that concept.

  • PortNull@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    2
    ·
    4 months ago

    Yes. Run a tailscale exit node which connects to the internet via said VPN. Connect to tailscale on android and select the exit node

    Now you are routing android to tailscale and exiting via the vpn.

    Not sure about pangolin on this front

    • Cousin Mose@lemmy.hogru.ch
      link
      fedilink
      English
      arrow-up
      2
      ·
      edit-2
      4 months ago

      I do this more or less, while the VPS itself doesn’t route over a VPN I have traffic forwarded between Tailscale and a commercial VPN.

      It’s actually much more complicated and involved than that involving four double hop VPN tunnels, two that stay 100% in my country then two that bounce around other countries routed over the first two. This way my traffic exits the country without it appearing that way.

    • philanthropicoctopus@thelemmy.clubOP
      link
      fedilink
      English
      arrow-up
      1
      ·
      4 months ago

      This seems like the way forward for me.

      Just so I understand properly. I set up one of my home machines as an exit node and all my traffic from my android goes through that home machine?

      How do I connect my VPN to tailscale on the home machine? Its not mulvad unfortunately

  • tiptoes@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    2
    ·
    4 months ago

    Depends on what threat you’re protecting against IMHO.

    If you’re trying to be anonymous, connecting to your home IP first is a dead giveaway to who you are. Both your home ISP and whichever ISP you’re connnected to will know.

    Only easy way to maintain some anonymity right now would be to use Tailscale’s Mullvad integration……Tailscale to connect your servers, Mullvad for anonymize/country changing.

    Other way might be to ONLY use Tailscale/Mullvad, and set up an alternative auth front door to your own network. Complicated and doesn’t work as nicely tho.

    • pleksi@sopuli.xyz
      link
      fedilink
      English
      arrow-up
      1
      ·
      4 months ago

      This.

      And graphene actually makes things very easy for you: every profile can have regular and private version of any given app.

      The private side is essentially a different user with its own set of vpn options but you can easily navigate in between provate and normal apps.

      Im using the regular profile for staying connected to home. All traffic is routed to home and then to proton.

      Everything in the private section goes through regular proton vpn(the app on the phone) so any traffic to the web also has a different exit node to my “home” traffic (albeit a proton one).

      I then have a separate profile called incognito with only proton pass, vpn and onion browser on it.

  • Decronym@lemmy.decronym.xyzB
    link
    fedilink
    English
    arrow-up
    1
    ·
    4 months ago

    Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I’ve seen in this thread:

    Fewer Letters More Letters
    ISP Internet Service Provider
    NAT Network Address Translation
    VPN Virtual Private Network
    VPS Virtual Private Server (opposed to shared hosting)

    [Thread #33 for this comm, first seen 29th Jun 2026, 14:50] [FAQ] [Full list] [Contact] [Source code]

    • halcyoncmdr@piefed.social
      link
      fedilink
      English
      arrow-up
      1
      arrow-down
      1
      ·
      4 months ago

      If only pangolin supported 0.0.0.0 routing. It’s been requested for months but instead of doing that… They’ve been courting paid enterprise usage.