I believe we actually had a feature like exit nodes before Tailscale released theirs :) Our is called an "egress gateway" and it acts in pretty much the same way.
Thanks for your reply, I will try to deploy Netmaker alongside Tailscale and compare for my needs!
The "hardest" part is managing the tailscale installation on the router, since the OpenWRT packages seem to be quite old. I went old-fashioned and just download the ARM tarballs and uncompress them.
I lifted the init.d script from someone else's blog post [0] and adjusted the path to the binaries.
After that I've pretty much just followed the official docs to implement LAN routing [1] and the exit node [2], then set the router's cert so it doesn't expire, which is done on the Tailscale GUI.
Install the app on the devices, connect everything to the tailnet and Bob's your uncle.
[0] https://willangley.org/how-i-set-up-tailscale-on-my-wifi-rou... [1] https://tailscale.com/kb/1019/subnets/ [2] https://tailscale.com/kb/1103/exit-nodes/
A couple questions from me, if you don't mind.
I currently use Tailscale for my home lab. My current model is similar to old-school road warrior VPNing, where I have my router as a node that routes to the LAN using the internal (non-meshed) IPs. Does your solution support that? How easy is it to deploy and configure it in that way?
Another feature I use is "exit nodes", i.e. my router as a gateway to the Internet, similar to what consumer VPNs (Mullvad, PrivateInternetAccess, etc) do. This offers me 2 things: more security when I'm on insecure networks (airport or other public WiFi, etc); and allows me to access things as though I'm at home when I'm traveling abroad. This is a one-time configuration and I can easily switch it on and off on demand via the desktop or phone app. Is this an option in your product?
Edit: s/customer/consumer/