Tailscale subnet routing enables remote access to local network devices via an Android TV box

Tailscale's subnet routing feature allows users to access local network devices from remote locations by configuring a client device, such as an Android TV box, to act as a router. This setup creates a secure tunnel to the local network without requiring port forwarding or exposing devices directly to the internet. By installing the Tailscale client on a device that is always powered on, such as a streaming box, users can route traffic to other local hardware like printers or TV tuners. The process involves enabling subnet routing in the Tailscale application settings on the client device, specifying the local network's CIDR range, and approving the route in the Tailscale admin console. While the performance is limited by the client device's network interface—often 100 Mbps for budget streaming boxes—it provides a reliable and secure method for remote management. This approach is particularly effective for accessing non-Tailscale-compatible devices, provided the user knows the device's local IP address, as the service does not support broadcast traffic.

Tech4K StaffVideo report

Tailscale's subnet routing feature allows users to access local network devices from remote locations by configuring a client device, such as an Android TV box, to act as a router. This setup creates a secure tunnel to the local network without requiring port forwarding or exposing devices directly to the internet. By installing the Tailscale client on a device that is always powered on, such as a streaming box, users can route traffic to other local hardware like printers or TV tuners. The process involves enabling subnet routing in the Tailscale application settings on the client device, specifying the local network's CIDR range, and approving the route in the Tailscale admin console. While the performance is limited by the client device's network interface—often 100 Mbps for budget streaming boxes—it provides a reliable and secure method for remote management. This approach is particularly effective for accessing non-Tailscale-compatible devices, provided the user knows the device's local IP address, as the service does not support broadcast traffic.

Tailscale's subnet routing feature allows remote access to devices on a local network that cannot run the Tailscale client directly. Users must configure the Tailscale app on a client device to act as a router and approve the route in the admin console.

Ethernet is recommended over Wi-Fi for the router device to ensure network reliability and reduce congestion during high-bandwidth tasks. The performance of the subnet routing is constrained by the network interface speed of the device acting as the router.

Subnet routing does not support broadcast traffic, requiring users to know the specific local IP address of the target device. This method provides a secure, low-cost alternative for remote access without the need for complex firewall configurations.

Chapter guide

Introduction to Tailscale subnet routingAn overview of using Tailscale as a personal VPN to access home network devices remotely.Tailscale pricing and featuresA brief look at the free and paid tiers of the Tailscale service.Configuring the Android TV boxStep-by-step instructions for enabling subnet routing on an Android TV device.Approving the route in the admin consoleHow to finalize the subnet routing setup through the Tailscale web-based management interface.Testing the connectionDemonstrating remote access to a local HD HomeRun tuner from a mobile device.Limitations and performance considerationsDiscussion on the lack of broadcast support and the impact of hardware limitations on bandwidth.

Worth noting

  • The creator explicitly states this video is not a paid sponsorship from Tailscale.
  • The performance of the subnet routing is limited by the 100 Mbps Ethernet port on the specific Android TV box used in the demonstration.
  • The methodology relies on the user knowing the local IP address of the target device, as broadcast traffic is not supported.

Watch the original video ↗