Cloudflare WARP と Tailscale を同時に動かす
どちらかが先に動いていると、もう片方が有効化できない時の対処。
下記のように、Cloudflare WARP の設定にて Tailscale 関連のドメインと Tokyo region の IP を全部無視するようにする。
"derp map" というのが Tailscale が各国に置くエッジの一覧を指すっぽい。
I've got it working by the following steps:
- disabling all but the closest two regions via derpMap in my ACL (for easier IP range allow list handling, so I don't need to add all regions)
- in cloudflare warp admin settings (in my zero trust dashboard: Settings -> Warp Client -> Device Settings -> -> Split Tunnels -> Exclude IPs and domains) I have added *.tailscale.com as well as 100.64.0.0/10 and the 3 ipv4 and 3 ipv6 from the derp map as entries there - also added my TS domain in there, so it's not getting resolved by CF
- reconnected cloudflare warp
- restarted tailscale