Problems connecting to server through Tailscale

[flymetothemoon]

Hey there! I've been trying to find solution to this for hours now and can't figure it out what to do.

So I can't connect to my server through tailscale.

I tried installing it again, didn't work. I tried changing <IsStartupWizardCompleted> from true to false to run the first setup wizard again and it's not running and the value stays as "false". I tried disabling firewall or adding rules and it didn't work. 

In the log I can see this line - "Jellyfin.Networking.Manager.NetworkManager: Filtered interface addresses"
I don't have this line in any other jellyfin servers I run on other machines and I can't find a way to get rid of this, is this what's causing it to not be able to connect? One of the ips on this line is the Tailscale ip

I can connect to it fine using localhost and local machine ip on the server machine itself. But with the tailscale ip it can't find the server. I made sure that the machines can see each other through tailscale and they can.

[TheDreadPirate]

What OS is the server running? And can you share your full Jellyfin logs via pastebin?

[flymetothemoon]

Windows 10

I believe these are the important lines, the rest is media related

[2024-09-29 11:30:48.099 +03:00] [INF] [1] Main: Jellyfin version: "10.9.11"
[2024-09-29 11:30:48.134 +03:00] [INF] [1] Main: Environment Variables: ["[JELLYFIN_LOG_DIR, C:\Users\******\AppData\Local\Jellyfin\log]"]
[2024-09-29 11:30:48.138 +03:00] [INF] [1] Main: Arguments: ["C:\Program Files\Jellyfin\Server\jellyfin.dll", "--datadir", "C:\Users\******\AppData\Local\Jellyfin"]
[2024-09-29 11:30:48.143 +03:00] [INF] [1] Main: Operating system: "Microsoft Windows 10.0.19045"
[2024-09-29 11:30:48.146 +03:00] [INF] [1] Main: Architecture: X64
[2024-09-29 11:30:48.147 +03:00] [INF] [1] Main: 64-Bit Process: True
[2024-09-29 11:30:48.148 +03:00] [INF] [1] Main: User Interactive: True
[2024-09-29 11:30:48.149 +03:00] [INF] [1] Main: Processor count: 6
[2024-09-29 11:30:48.150 +03:00] [INF] [1] Main: Program data path: "C:\Users\*****\AppData\Local\Jellyfin"
[2024-09-29 11:30:48.151 +03:00] [INF] [1] Main: Log directory path: "C:\Users\*****\AppData\Local\Jellyfin\log"
[2024-09-29 11:30:48.152 +03:00] [INF] [1] Main: Config directory path: "C:\Users\*****\AppData\Local\Jellyfin\config"
[2024-09-29 11:30:48.153 +03:00] [INF] [1] Main: Cache path: "C:\Users\******\AppData\Local\Jellyfin\cache"
[2024-09-29 11:30:48.154 +03:00] [INF] [1] Main: Web resources path: "C:\Program Files\Jellyfin\Server\jellyfin-web"
[2024-09-29 11:30:48.155 +03:00] [INF] [1] Main: Application directory: "C:\Program Files\Jellyfin\Server\"
[2024-09-29 11:30:48.883 +03:00] [INF] [1] Emby.Server.Implementations.AppBase.BaseConfigurationManager: Setting cache path: "C:\Users\*****\AppData\Local\Jellyfin\cache"
[2024-09-29 11:30:49.186 +03:00] [INF] [1] Emby.Server.Implementations.ApplicationHost: Loading assemblies
[2024-09-29 11:30:49.752 +03:00] [INF] [1] Emby.Server.Implementations.Plugins.PluginManager: Loaded assembly "Jellyfin.Plugin.Discogs, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null" from "C:\Users\*****\AppData\Local\Jellyfin\plugins\Discogs_1.0.0.0\Jellyfin.Plugin.Discogs.dll"
[2024-09-29 11:30:49.831 +03:00] [INF] [1] Emby.Server.Implementations.Plugins.PluginManager: Loaded assembly "Jellyfin.Plugin.OpenSubtitles, Version=20.0.0.0, Culture=neutral, PublicKeyToken=null" from "C:\Users\******\AppData\Local\Jellyfin\plugins\Open Subtitles_20.0.0.0\Jellyfin.Plugin.OpenSubtitles.dll"
[2024-09-29 11:30:50.771 +03:00] [INF] [1] Emby.Server.Implementations.Plugins.PluginManager: Loaded assembly "BouncyCastle.Cryptography, Version=2.0.0.0, Culture=neutral, PublicKeyToken=072edcf4a5328938" from "C:\Users\*****\AppData\Local\Jellyfin\plugins\Webhook_15.0.0.0\BouncyCastle.Cryptography.dll"
[2024-09-29 11:30:50.781 +03:00] [INF] [1] Emby.Server.Implementations.Plugins.PluginManager: Loaded assembly "Handlebars, Version=2.1.6.0, Culture=neutral, PublicKeyToken=22225d0bf33cd661" from "C:\Users\******\AppData\Local\Jellyfin\plugins\Webhook_15.0.0.0\Handlebars.dll"
[2024-09-29 11:30:50.785 +03:00] [INF] [1] Emby.Server.Implementations.Plugins.PluginManager: Loaded assembly "Jellyfin.Plugin.Webhook, Version=15.0.0.0, Culture=neutral, PublicKeyToken=null" from "C:\Users\*******\AppData\Local\Jellyfin\plugins\Webhook_15.0.0.0\Jellyfin.Plugin.Webhook.dll"
[2024-09-29 11:30:50.799 +03:00] [INF] [1] Emby.Server.Implementations.Plugins.PluginManager: Loaded assembly "MailKit, Version=4.7.0.0, Culture=neutral, PublicKeyToken=4e064fe7c44a8f1b" from "C:\Users\******\AppData\Local\Jellyfin\plugins\Webhook_15.0.0.0\MailKit.dll"
[2024-09-29 11:30:50.811 +03:00] [INF] [1] Emby.Server.Implementations.Plugins.PluginManager: Loaded assembly "MimeKit, Version=4.7.0.0, Culture=neutral, PublicKeyToken=bede1c8a46c66814" from "C:\Users\******\AppData\Local\Jellyfin\plugins\Webhook_15.0.0.0\MimeKit.dll"
[2024-09-29 11:30:50.817 +03:00] [INF] [1] Emby.Server.Implementations.Plugins.PluginManager: Loaded assembly "MQTTnet, Version=4.3.6.1152, Culture=neutral, PublicKeyToken=fdb7629f2e364a63" from "C:\Users\******\AppData\Local\Jellyfin\plugins\Webhook_15.0.0.0\MQTTnet.dll"
[2024-09-29 11:30:50.820 +03:00] [INF] [1] Emby.Server.Implementations.Plugins.PluginManager: Loaded assembly "MQTTnet.Extensions.ManagedClient, Version=4.3.6.1152, Culture=neutral, PublicKeyToken=fdb7629f2e364a63" from "C:\Users\******\AppData\Local\Jellyfin\plugins\Webhook_15.0.0.0\MQTTnet.Extensions.ManagedClient.dll"
[2024-09-29 11:30:51.399 +03:00] [INF] [1] Jellyfin.Networking.Manager.NetworkManager: Defined LAN subnets: ["127.0.0.1/8", "10.0.0.0/8", "172.16.0.0/12", "192.168.0.0/16"]
[2024-09-29 11:30:51.402 +03:00] [INF] [1] Jellyfin.Networking.Manager.NetworkManager: Defined LAN exclusions: []
[2024-09-29 11:30:51.403 +03:00] [INF] [1] Jellyfin.Networking.Manager.NetworkManager: Used LAN subnets: ["127.0.0.1/8", "10.0.0.0/8", "172.16.0.0/12", "192.168.0.0/16"]
[2024-09-29 11:30:51.406 +03:00] [INF] [1] Jellyfin.Networking.Manager.NetworkManager: Filtered interface addresses: ["tailscale ip", "192.168.0.101", "192.168.232.1", "192.168.253.1", "127.0.0.1"]
[2024-09-29 11:30:51.409 +03:00] [INF] [1] Jellyfin.Networking.Manager.NetworkManager: Bind Addresses ["0.0.0.0"]
[2024-09-29 11:30:51.410 +03:00] [INF] [1] Jellyfin.Networking.Manager.NetworkManager: Remote IP filter is "Allowlist"
[2024-09-29 11:30:51.411 +03:00] [INF] [1] Jellyfin.Networking.Manager.NetworkManager: Filtered subnets: []
[2024-09-29 11:30:54.690 +03:00] [INF] [1] Emby.Server.Implementations.Plugins.PluginManager: Loaded plugin: "Discogs" "1.0.0.0"
[2024-09-29 11:30:54.705 +03:00] [INF] [1] Emby.Server.Implementations.Plugins.PluginManager: Loaded plugin: "Open Subtitles" "20.0.0.0"
[2024-09-29 11:30:54.709 +03:00] [INF] [1] Emby.Server.Implementations.Plugins.PluginManager: Loaded plugin: "Webhook" "15.0.0.0"
[2024-09-29 11:30:54.711 +03:00] [INF] [1] Emby.Server.Implementations.Plugins.PluginManager: Loaded plugin: "TMDb" "10.9.11.0"
[2024-09-29 11:30:54.713 +03:00] [INF] [1] Emby.Server.Implementations.Plugins.PluginManager: Loaded plugin: "Studio Images" "10.9.11.0"
[2024-09-29 11:30:54.714 +03:00] [INF] [1] Emby.Server.Implementations.Plugins.PluginManager: Loaded plugin: "OMDb" "10.9.11.0"
[2024-09-29 11:30:54.768 +03:00] [INF] [1] Emby.Server.Implementations.Plugins.PluginManager: Loaded plugin: "MusicBrainz" "10.9.11.0"
[2024-09-29 11:30:54.770 +03:00] [INF] [1] Emby.Server.Implementations.Plugins.PluginManager: Loaded plugin: "AudioDB" "10.9.11.0"
[2024-09-29 11:30:54.866 +03:00] [INF] [1] Main: Kestrel is listening on "0.0.0.0"
[2024-09-29 11:30:55.724 +03:00] [INF] [1] Emby.Server.Implementations.ApplicationHost: Running startup tasks

[2024-09-29 11:31:04.655 +03:00] [INF] [18] Emby.Server.Implementations.HttpServer.WebSocketManager: WS "127.0.0.1" request
[2024-09-29 11:31:05.111 +03:00] [INF] [18] Emby.Server.Implementations.ScheduledTasks.TaskManager: "Update Plugins" Completed after 0 minute(s) and 6 seconds
[2024-09-29 11:31:07.105 +03:00] [INF] [18] Jellyfin.Api.Auth.CustomAuthenticationHandler: "CustomAuthentication" was not authenticated. Failure message: "Invalid token."
[2024-09-29 11:31:07.110 +03:00] [ERR] [18] Jellyfin.Api.Middleware.ExceptionMiddleware: Error processing request: "Invalid token". URL "GET" "/socket".
[2024-09-29 11:31:07.136 +03:00] [INF] [6] Emby.Server.Implementations.ScheduledTasks.TaskManager: "Scan Media Library" Completed after 0 minute(s) and 8 seconds
[2024-09-29 11:31:07.136 +03:00] [INF] [18] Emby.Server.Implementations.IO.LibraryMonitor: Watching directory "T:\movies"
[2024-09-29 11:31:07.849 +03:00] [INF] [16] Emby.Server.Implementations.ScheduledTasks.TaskManager: "Webhook Item Added Notifier" Completed after 0 minute(s) and 0 seconds
[2024-09-29 11:31:08.214 +03:00] [INF] [8] Emby.Server.Implementations.HttpServer.WebSocketManager: WS "127.0.0.1" request
[2024-09-29 11:31:11.245 +03:00] [INF] [19] Emby.Server.Implementations.HttpServer.WebSocketManager: WS "127.0.0.1" request
[2024-09-29 11:31:13.531 +03:00] [INF] [8] Emby.Server.Implementations.HttpServer.WebSocketManager: WS "127.0.0.1" closed
[2024-09-29 11:31:14.021 +03:00] [INF] [9] Emby.Server.Implementations.HttpServer.WebSocketManager: WS "127.0.0.1" request
[2024-09-29 11:31:14.377 +03:00] [INF] [6] Jellyfin.Api.Auth.CustomAuthenticationHandler: "CustomAuthentication" was not authenticated. Failure message: "Invalid token."
[2024-09-29 11:31:14.381 +03:00] [ERR] [6] Jellyfin.Api.Middleware.ExceptionMiddleware: Error processing request: "Invalid token". URL "GET" "/socket".

[TheDreadPirate]

Did you enable remote connections in Dashboard > Networking? If not, your options are to enable remote connections or add your tailscale subnet to the LAN subnets configuration.

[flymetothemoon]

I don't want to enable remote connections tbh (it worked before without it) but I tried it and adding tailscale subnet but both didn't work. Still can't access it.

I tried setting IgnoreVirtualInterfaces to false and still not working.

When I try to open the page with the tailscale ip:8096 it shows "Select Server No servers have been found using the automatic server discovery."

Don't know if this matters but used netstat -o -a and it shows this:
local address - foreign address
TCP - 0.0.0.0:8096 - server pc:0 - LISTENING - 9828
TCP - server pc tailscale ip:8096 - client pc tailscale ip:2799 - FIN_WAIT_2 - 9828
TCP - 127.0.0.1:8096 - server pc:9424 - ESTABLISHED - 9828

[TheDreadPirate]

What address did you put in "LAN networks"? Tailscale uses the 100.64.0.0/10 address space and that is what should be in "LAN Networks". Also, this change requires restarting Jellyfin, if you have not done so already.

And Tailscale is running BEFORE Jellyfin starts, correct?

[flymetothemoon]

Yes, I used that address along with all the others from the log file just in case. Been restarting it after everything I try. Yes, I start Tailscale first before I start anything else.

[flymetothemoon]

So if I have this

100.64.0.0/10,127.0.0.1/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16

in the LAN Networks field the server is supposed to be discoverable on the local network and any device connected to the tailscale network and will not be exposed to the internet right?

I haven't used the Networking tab like ever because everything used to just work out of the box.

[TheDreadPirate]

The LAN networks field is simply for determining what clients are "remote" and which ones are "local". Making this distinction is important for two reasons: If a client is "remote" (not in the LAN list) and you disabled remote connections they would be blocked, and for bit rate throttling for "remote" clients whereas local clients don't have any bit rate restrictions.

If you have physically remote clients, but you've defined their address space in LAN Networks (which we did for tailscale), those physically remote clients are now considered local. They are allowed to connect, even if remote connections is disabled, and no bit rate restriction is applied.

I'm not sure if the service discovery function will be broadcast on tailscale. I'm pretty sure that will only work on your actual LAN.

I'm not a Tailscale expert, so I may be missing something if the issue is with the Tailscale config.

[flymetothemoon]

Thank you for the detailed information. Something must have changed even though I haven't touched any settings, it used to just work without touching any settings.

So using those addresses in the LAN networks field now, restarted and it's able to connect through tailscale. Idk, I don't understand it. At least it works now ^^

Thank you for the help!