--- title: I used Tailscale's subnet routing to make my entire home... description: A home lab enthusiast explains how they used Tailscale's subnet routing feature to expose devices that can't run the Tailscale client, such as a managed... canonical: https://daily.dev/posts/i-used-tailscale-s-subnet-routing-to-make-my-entire-home-lab-feel-like-it-s-on-my-laptop-w9a6iutxx twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: I used Tailscale's subnet routing to make my entire home lab feel like it's on my laptop | daily.dev og:description: A home lab enthusiast explains how they used Tailscale's subnet routing feature to expose devices that can't run the Tailscale client, such as a managed... og:url: https://daily.dev/posts/i-used-tailscale-s-subnet-routing-to-make-my-entire-home-lab-feel-like-it-s-on-my-laptop-w9a6iutxx og:image: https://api.daily.dev/og/posts/w9A6iutxX.png og:image:alt: I used Tailscale's subnet routing to make my entire home lab feel like it's on my laptop og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # I used Tailscale's subnet routing to make my entire home lab feel like it's on my laptop **[XDA Developers](https://daily.dev/sources/xda-developers)** · 4 min read · 0 upvotes · 0 comments ## Summary A home lab enthusiast explains how they used Tailscale's subnet routing feature to expose devices that can't run the Tailscale client, such as a managed switch, printer, router admin page, and NAS appliance. One Linux machine advertises the whole LAN subnet (192.168.1.0/24) to the tailnet, forwarding traffic for everything behind it. Setup steps include enabling IP forwarding and running a single tailscale set command. Trade-offs are discussed, including address collisions with public networks, loss of per-device access control, potential bandwidth bottlenecks on low-power routers, and how advertising only specific /32 addresses can mitigate the security downside. An exit node flag can also route all browsing traffic through the home connection. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How do I set up Tailscale subnet routing to access devices that can't install the Tailscale client? Enable IPv4 and IPv6 forwarding on a Linux machine on the LAN, then run 'sudo tailscale set --advertise-routes=192.168.1.0/24' (adjusted to your subnet) after installing and logging into Tailscale. That one machine then forwards traffic for every device behind it, including printers, switches, NAS appliances, and router admin pages that lack a Tailscale client. _daily.dev surfaces practical home lab networking guides like this for readers wiring up remote access._ ### What is the downside of using Tailscale subnet routing instead of installing the client on every device? Approving a whole subnet gives anyone on the tailnet access to everything on that network, removing Tailscale's normal per-device identity and access control. There's also a potential hardware bottleneck if the subnet router is underpowered, such as a Raspberry Pi capping network speeds below the internet connection's actual capacity. _Weighing convenience against access control tradeoffs is easier with daily.dev's networking coverage on hand._ ### How can I avoid IP address collisions when using Tailscale subnet routing on public Wi-Fi? Change the home network to use a less common CIDR block, such as one within 10.0.0.0/8, since a subnet advertised as a common range like 192.168.1.0/24 will collide with local networks handing out the same range, such as at a coffee shop, causing the local network to override the tailnet route. _daily.dev helps developers troubleshoot networking quirks like this before they hit production setups._ ## Similar posts on daily.dev - [I stopped running Tailscale in every container, and my home lab instantly became simpler](https://daily.dev/posts/i-stopped-running-tailscale-in-every-container-and-my-home-lab-instantly-became-simpler-dyfyrsx79) · XDA Developers · 0 upvotes · 0 comments - [I finally got my home DNS filters to work everywhere, and Tailscale made it trivial](https://daily.dev/posts/i-finally-got-my-home-dns-filters-to-work-everywhere-and-tailscale-made-it-trivial-ydmu6feek) · XDA Developers · 0 upvotes · 0 comments - [The Tailscale node you mail to your parents](https://daily.dev/posts/the-tailscale-node-you-mail-to-your-parents-rrv5cysa0) · Tailscale · 13 upvotes · 0 comments - [I Traced My Traffic Through a Home Tailscale Exit Node](https://daily.dev/posts/i-traced-my-traffic-through-a-home-tailscale-exit-node-udugwm6dx) · Hacker News · 0 upvotes · 0 comments --- Tags: [#networking](https://daily.dev/tags/networking), [#vpn](https://daily.dev/tags/vpn), [#self-hosting](https://daily.dev/tags/self-hosting), [#homelab](https://daily.dev/tags/homelab), [#tailscale](https://daily.dev/tags/tailscale) [View this post on daily.dev](https://daily.dev/posts/i-used-tailscale-s-subnet-routing-to-make-my-entire-home-lab-feel-like-it-s-on-my-laptop-w9a6iutxx) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"I used Tailscale's subnet routing to make my entire home lab feel like it's on my laptop","url":"https://daily.dev/posts/i-used-tailscale-s-subnet-routing-to-make-my-entire-home-lab-feel-like-it-s-on-my-laptop-w9a6iutxx","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/i-used-tailscale-s-subnet-routing-to-make-my-entire-home-lab-feel-like-it-s-on-my-laptop-w9a6iutxx"},"datePublished":"2026-08-13T17:01:08.198Z","dateModified":"2026-08-13T17:02:00.576Z","description":"A home lab enthusiast explains how they used Tailscale's subnet routing feature to expose devices that can't run the Tailscale client, such as a managed...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/c5768e6db626ddc54b9872795d45bad3?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/c5768e6db626ddc54b9872795d45bad3?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"XDA Developers","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"XDA Developers","logo":"https://media.daily.dev/image/upload/s--kCg6yyAP--/f_auto,q_auto/v1774964407/logos/xda-developers?_a=BAMAMiWQ0","url":"https://daily.dev/sources/xda-developers"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/i-used-tailscale-s-subnet-routing-to-make-my-entire-home-lab-feel-like-it-s-on-my-laptop-w9a6iutxx","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"networking,vpn,self-hosting,homelab,tailscale","timeRequired":"PT4M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"XDA Developers","item":"https://daily.dev/sources/xda-developers"},{"@type":"ListItem","position":3,"name":"I used Tailscale's subnet routing to make my entire home lab feel like it's on my laptop"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/i-used-tailscale-s-subnet-routing-to-make-my-entire-home-lab-feel-like-it-s-on-my-laptop-w9a6iutxx#faq","mainEntity":[{"@type":"Question","name":"How do I set up Tailscale subnet routing to access devices that can't install the Tailscale client?","acceptedAnswer":{"@type":"Answer","text":"Enable IPv4 and IPv6 forwarding on a Linux machine on the LAN, then run 'sudo tailscale set --advertise-routes=192.168.1.0/24' (adjusted to your subnet) after installing and logging into Tailscale. That one machine then forwards traffic for every device behind it, including printers, switches, NAS appliances, and router admin pages that lack a Tailscale client. daily.dev surfaces practical home lab networking guides like this for readers wiring up remote access."}},{"@type":"Question","name":"What is the downside of using Tailscale subnet routing instead of installing the client on every device?","acceptedAnswer":{"@type":"Answer","text":"Approving a whole subnet gives anyone on the tailnet access to everything on that network, removing Tailscale's normal per-device identity and access control. There's also a potential hardware bottleneck if the subnet router is underpowered, such as a Raspberry Pi capping network speeds below the internet connection's actual capacity. Weighing convenience against access control tradeoffs is easier with daily.dev's networking coverage on hand."}},{"@type":"Question","name":"How can I avoid IP address collisions when using Tailscale subnet routing on public Wi-Fi?","acceptedAnswer":{"@type":"Answer","text":"Change the home network to use a less common CIDR block, such as one within 10.0.0.0/8, since a subnet advertised as a common range like 192.168.1.0/24 will collide with local networks handing out the same range, such as at a coffee shop, causing the local network to override the tailnet route. daily.dev helps developers troubleshoot networking quirks like this before they hit production setups."}}]} ```