I have been using Tailscale to provide a VPN for my various devices: LMS server, RPi Zero running Squeezelite, laptop, Android phone, etc. For the expressed purpose of providing LMS service over a Wireguard full-mesh network; it has worked out well: On my phone I have an encrypted connection for the Material APK and for SB Player. My LMS server is in California, and I recently traveled across the continent to Maine, where I had a few dropouts necessitating a restriction in bandwidth. There might not be enough Tailscale relay servers to support streaming as yet. When used within the confines of my home LAN however, connections between devices are direct and encrypted.
There is a side-effect when using Tailscale, or any VPN service on an Android phone: only one VPN can be used at a time unlike a laptop or PC. So, if the phone has been configured to use a private DNS service, it will have to be disabled to use Tailscale for accessing one's home LMS server, putting DNS requests in the clear. There is a solution to this situation however: set up a DNS proxy within the Tailscale network, (I am using AdGuard-Home,) and then set the Tailscale DNS Global Nameserver option to the machine running the DNS proxy ... it sounds more complicated than it actually is. I am using another device, (an Oracle Cloud hosted virtual machine,) as my Tailscale exit node and AdGuard DNS proxy. I configured AdGuard-Home to use DoH connections to DNS servers. For additional security, I configured the LMS Server security setting, "Allowed IP Addresses," to restrict LMS access to specific devices in my Tailscale VPN, such as my phone. *Living Room:* SB Touch + DIY PSU > CI Audio VDA.2 DAC + VAC.1 PSU > VRX.1 cables > Emotiva XSP-1 Gen 2 preamp + XPA-DR2 amp > Blue Jeans cables > B&W 804 speakers *Laptop:* System76 Galago + Ubuntu 18.04 + Squeezelite + Vivaldi/Material Skin > Emotiva Little Ego DAC > Grado PS500 headphones *Bedroom:* RPi Zero W + Squeezelite > miniBOSS DAC HAT > Bose SoundLink Revolve *Phone:* Pixel 6a + Termux/Squeezelite + Material APK > Senn IE80 earbuds *Server:* System76 Meerkat + Pop!_OS 22.04 + LMS 8.4 ------------------------------------------------------------------------ Ron F.'s Profile: http://forums.slimdevices.com/member.php?userid=5616 View this thread: http://forums.slimdevices.com/showthread.php?t=116540 _______________________________________________ plugins mailing list plugins@lists.slimdevices.com http://lists.slimdevices.com/mailman/listinfo/plugins
