tailscale-dev/tclip

Funnel not exposed to internet

Closed this issue · 5 comments

I deployed the code with Funnel to Fly and it could not be accessed from the internet from outside of my Tailnet.

I noticed that the DNS did not even resolve so there's no way it could even try to connect.

Tailscale has a green note saying FUNNEL.

Xe commented

That's weird. Do you have the right node attribute set on that node?

@Xe are you referring to the following?
Safari-2023-08-23 at 13 59 10@2x

Reviewing crt.sh, I found that ts.net had not issued any certificates since 2022?

Safari-2023-08-23 at 14 20 32@2x

Xe commented

Is your tclip node tagged? If it's tagged it won't match autogroup:member.

Yep it’s tagged but I also put tag:pastebin in the ACL and also on the pastebin box.

Doesn’t even resolve an IP.

It also has the green funnel tag and everything. But if the host.domain-domain.ts.net doesn’t even resolve to an IP outside of my tailnet there’s no way it can connect.

Hi @vysecurity - sorry for the delay here. I'm going to close this issue for now as it's been a while, however if you are still having this issue on the latest version of tclip could you reopen and share more details here on your setup so we can reproduce? Adding -tsnet-verbose / TSNET_VERBOSE may also help surface more logs.
On the other hand if this is an issue with your tailnet / not specifically tclip, please feel free to open a ticket with support and we can take a look!