Tag: mihomo

The Naked Swimmer of the fake-IP Strait: The DialPlan of tailscaled, the Disabled SNI Sniffing, and Two Postures of Crossing a TUN

The investigation of an unresponsive Tailscale login after a reboot pinned the full causal chain of a superimposed routing conflict: tailscaled obtained the controlplane bare IPs (192.200.0.x) through its built-in bootstrap DNS, bypassing the Ninja fake-ip domain mapping; bare-IP traffic entering ninja-tun met an mihomo with sniff: false that could see no domain (the TLS SNI unread too) and routed by IP rules blindly; the controlled experiment nailed it — .103 of the same segment connected in one second, .115 stalled for ten; a dedicated HTTPS_PROXY for the Tailscale service still failed because the internal DialPlan (a bare-IP list containing the stuck .115) preferentially dials those directly, bypassing the proxy path. The roads out: temporarily drop TUN to log in directly, then choose among enabling sniff in Ninja, adding a tailscale direct rule, or a permanent service-level proxy config.