{
  "id": 5736704,
  "title": "Tailscale VPN Exit Node with Split-Tunneling using WireGuard and Namespaces",
  "url": "https://urgent.news/2026/09/05/tailscale-vpn-exit-node-with-split-tunneling-using-wireguard-and",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-09-05T07:25:59.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/nevon/tailscale-vpn-exit-node-with-split-tunneling-using-wireguard-and-namespaces-2lkj"
  },
  "original_language": "en",
  "account": "The author of this article runs a personal computer that functions as a media server, content acquisition system, and gaming device. Previously, they utilized Tailscale along with Mullvad as their VPN provider, which worked well but had two drawbacks: all traffic had to pass through a Mullvad exit node and the Mullvad co-founder funded a far-right party. To rectify these issues, the author decided to enhance their setup and eliminate Mullvad while achieving three goals: exposing services within their Tailnet with MagicDNS, allowing any device in their Tailnet to exit via VPN, and routing any selected device's traffic through a VPN using WireGuard and namespaces. The author initially established a VPN namespace using the Split tunneling using Wireguard and namespaces guide, which enabled running Qbittorrent-nox inside the namespace, ensuring that Qbittorrent's traffic passed through the VPN. After setting up Tailscale on their desktop, enabling it automatically configured the Tailscale resolver, making MagicDNS a seamless experience. The author then created a Tailscale exit node within their VPN namespace by running a second instance of tailscaled inside the VPN namespace, effectively turning their desktop into two devices in Tailscale: one as a regular client and the other as an exit node. By selecting the exit node device, the author can route all traffic through the VPN and IVPN, addressing the initial concerns with Mullvad.",
  "summary": "Like all other mid-thirties nerds, I run a janky homelab out of my living room. In addition to being my daily driver for gaming and coding, my trusty desktop computer also serves as a media server and content acquisition system . In a previous iteration, I had been using Tailscale with Mullvad as a VPN provider. This was extremely easy to set up and worked pretty great, but it came with two…",
  "key_points": [
    "Author replaces Mullvad VPN with Tailscale and WireGuard for improved privacy",
    "Sets up VPN namespace with WireGuard to route selected device traffic through VPN",
    "Enables MagicDNS for seamless service exposure within Tailnet"
  ],
  "editors_take": "This development allows the author to route select devices' traffic through a VPN while maintaining exposure of internal services, effectively decoupling their internet traffic from a single VPN provider's constraints.",
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}