tailscale-udm VS split-vpn

you can install tailscale directly on a udm (https://github.com/SierraSoftworks/tailscale-udm) which is what i do. it removes the complexity of installing on all of my internal hosts and then i advertise the routes for my network. i prefer tailscale vs teleport due to the "always-on" type of connectivity you get with tailscale. you can also create more granular controls than you can with teleport.

I was able to get Tailscale installed on my UDM with RC 3.0.20 and even before on 2.5.17, and I can get to my subnets via an android phone on Tailscale following the install directions here: https://github.com/SierraSoftworks/tailscale-udm

I want to use the UDM Pros I have in the sites with [this project.](https://github.com/SierraSoftworks/tailscale-udm)

See https://github.com/SierraSoftworks/tailscale-udm

I can vouch for Tailscale as I use it behind CG nat with Metronet. There’s even a docker built to run on the UDM Pro https://github.com/SierraSoftworks/tailscale-udm

Tailscale is about the easiest thing to use if you are all under the same email domain. Install on a Linux PC or a pi, and even right on the udm. https://github.com/SierraSoftworks/tailscale-udm

With Router side VPN it shows up in the DPI.

yes i as well think this is sad that such things are not passible "easy" through the frontend. you can look at https://github.com/peacey/split-vpn to see if you can get such working but its then not an out of the box solution again.

Honestly just use this, it works wonderfully with wireguard vpn providers and you can assign a specific subnet, VLAN, or interface to the VPN tunnel.

This is what I use. I have a wifi and connected to a separate vlan that routes through my openvpn connection provided by expressvpn. Any device connected to that wifi goes through the VPN connection. https://github.com/peacey/split-vpn

I use wireguard on the UDM Pro unofficially to route as a client, and here's some extensive performance testing I did. Typically, the UDMP/SE is perfectly able to saturate a 1 Gbps connection up and down through wireguard.