Tell HN: Tailscale is giving 451s within Russia

Posted by Humorist2290 on Wednesday October 02, 2024 @01:31AM
from the self-post dept.

A friend who lives in Russia was using Tailscale to connect to an exit node placed elsewhere to communicate with family via Signal etc. Now when they connect to the control server the requests give a 451 'unavailable for legal reasons' error. Probably a self-hosted control server like Headscale might circumvent this censorship for some time, but the friend is not technical enough (and understandably afraid) to manage this.

( 12 comments | 4 points | on HN )

Re:Tell HN: Tailscale is giving 451s within Russia by atlasduo on Wednesday October 02, 2024 @02:58AM (#41717921)

This has been going on for a while. A year or so ago I remember Tailscale was blocking downloads of their applications from Russian IPs. HTTP 451 means "unavailable for legal reasons" so I imagine this is Tailscale trying to cover its soft spots.

[ Parent | on HN ]

Re:Tell HN: Tailscale is giving 451s within Russia by chupasaurus on Wednesday October 02, 2024 @09:41AM (#41720576)

They deployed the 451 during the last 2 days of August 2023 [1][2].

[1] https://github.com/tailscale/tailscale/issues/9158

[2] https://www.reddit.com/r/Tailscale/comments/1672n6k/

[ Parent | on HN ]

Re:Tell HN: Tailscale is giving 451s within Russia by dipierro on Wednesday October 02, 2024 @10:24AM (#41720989)

DERP and login/control servers reply with 451 since yesterday. Previously, only pkgs were affected.

[ Parent | on HN ]

Re:Tell HN: Tailscale is giving 451s within Russia by bez00m on Wednesday October 02, 2024 @02:53AM (#41717887)

Can confirm. Many paid VPNs are not reliable enough as Roskomnadzor is successfully targeting them. I though that by deploying Tailscale exit node on my own server I could overcome this. Alas, not anymore.

[ Parent | on HN ]

Re:Tell HN: Tailscale is giving 451s within Russia by u_sama on Wednesday October 02, 2024 @05:11AM (#41718638)

For a functional VPN with all the telecom companies you should set up a v2ray/Xray node on a close VPS in a country near your area.

It is functional as I had to set up some for some people, if you need help I can guide you through it as there are not many good English guides.

[ Parent | on HN ]

Re:Tell HN: Tailscale is giving 451s within Russia by bez00m on Wednesday October 02, 2024 @10:33AM (#41721056)

Thanks for an advice, I'll have a look. Was planning to setup a Wireguard server, but things are moving in this area.

[ Parent | on HN ]

Re:Tell HN: Tailscale is giving 451s within Russia by borschkharcho on Thursday October 03, 2024 @02:28PM (#41733454)

I successfully got Headscale working on a digital ocean droplet and all is back to normal for me. It’s not too difficult lmk if you need tips.

[ Parent | on HN ]

Re:Tell HN: Tailscale is giving 451s within Russia by denis0 on Friday October 04, 2024 @10:30AM (#41741817)

Me too, but I cannot find a field for Alternate Coordination Server on client Tailscale for IOS 1.74.0

[ Parent | on HN ]

Re:Tell HN: Tailscale is giving 451s within Russia by borschkharcho on Friday October 04, 2024 @03:57PM (#41745035)

I have 1.74.2 and it’s in the actual Tailscale app settings (not iOS settings) under Login -> top right toolbar button

[ Parent | on HN ]

Re:Tell HN: Tailscale is giving 451s within Russia by randomopining on Wednesday October 02, 2024 @01:50PM (#41723234)

Wait so can't you just use an encrypted connection to a physical host somewhere outside of russia and then basically haave access to everything?

[ Parent | on HN ]

Re:Tell HN: Tailscale is giving 451s within Russia by chupasaurus on Wednesday October 02, 2024 @02:24PM (#41723592)

DPI there detects and blocks a good number of VPN protocols.

[ Parent | on HN ]

Re:Tell HN: Tailscale is giving 451s within Russia by Humorist2290 on Wednesday October 02, 2024 @09:38PM (#41726519)

Sometimes this is possible, but generally VPNs are illegal (at least that's what I was told) in Russia. The government has become increasingly active in identifying and locking users out of them, and of course users risk being dragged into the Russian criminal system.

Doing some sort of SSH tunnel to a VPS hosted elsewhere might work, might not. Plain old wireguard might work, might not. Consumer tools for technically novice users seem to be the government's priority.

[ Parent | on HN ]