Source
Access model & connectivity — found from sitemap — Tailscale
Checked for Tailscale on 5 Nov 2026
- Page
- https://tailscale.com/docs/features/subnet-routers
- Checked
- 5 Nov 2026, 14:29 UTC
- How we may use it
- Public page, crawling permitted
Technical details
- type
- page
- http status
- 200
- content hash
- sha256:0ceed1ba7066c14bcd82ab7390bcd0c31fbb9670e1c7dcb4fb59c2a2b3010f55
- permission
- robots_ok
- screenshot
- Screenshot on file (internal exhibit, not published)
Cited by
Facts read from this source
-
Subnet routers all plans Report an error
“Subnet routers are available for all plans.”
-
Subnet routers purpose Report an error
“Subnet routers let you extend your Tailscale network (known as a tailnet) to include devices that don't or can't run the Tailscale client.”
-
Devices behind subnet router not counted Report an error
“devices behind subnet routers don't count toward your pricing plan's device limit.”
-
Subnet routers snat default Report an error
“Subnet routers use Source Network Address Translation (SNAT) by default.”
-
Subnet router vs exit node Report an error
“subnet routers provide access to specific private subnets. They enable tailnet devices to reach non-Tailscale devices within those subnets, but don't affect internet traffic routing.”
-
Subnet routes autoapprovers Report an error
“If the device is authenticated by a user who can advertise the specified route in autoApprovers, the subnet router's routes will automatically be approved.”
-
Subnet routes route approval separate from access rules Report an error
“Access rules control which traffic is permitted, while route approval controls which routes are injected into client routing tables. These are separate mechanisms.”
-
Subnet routes linux accept routes Report an error
“By default, Linux devices only discover Tailscale IP addresses. To enable automatic discovery of new subnet routes on Linux devices, use the --accept-routes flag:”
-
Subnet router high availability Report an error
“You can set up high availability to ensure your network is connectable even if one subnet router goes offline.”
-
Subnet router overlapping routes Report an error
“Tailscale supports advertising overlapping subnet routes with different prefix lengths from multiple subnet routers. When traffic is sent to a destination IP address, Tailscale uses longest prefix matching (LPM) to select the most specific route available.”
-
Subnet router no fallback to less specific route Report an error
“Tailscale does not fall back to a less-specific route when the subnet router for a more-specific route goes offline.”
-
Subnet router snat disable linux only Report an error
“You can disable SNAT by using the --snat-subnet-routes=false flag (Linux only) with the tailscale up command.”
-
Subnet router split dns Report an error
“You can use an internal DNS server on your subnet by configuring split DNS in the DNS page of the admin console.”
-
Subnet router expired key fail close Report an error
“When a connector's (such as, app connector, subnet router, exit node) key expires, the connector's advertised routes remain configured on other devices but become unreachable (known as "fail close" policy).”
-
Subnet router visual policy editor Report an error
“You can use the visual policy editor to manage your tailnet policy file.”
-
Subnet router tags key expiry Report an error
“If you use tags, key expiry is disabled by default.”
-
Subnet router site to site Report an error
“Connect two or more subnets using site-to-site networking.”
1 fact read from this page is not shown because it could not be confirmed on the page as captured.
Scores citing this record
- The DevOps Engineer Access model & connectivity
- The IT Lead Access model & connectivity
- The MSP Technician Access model & connectivity
- The Operations Manager Access model & connectivity
- The Information Security Officer Access model & connectivity
- The Skeptic Access model & connectivity