tailscale: Timeout with `ping` but not with `tailscale ping`; suspect local firewall

What is the issue?

During this period, I was not able to SSH to the device. However

❯ tailscale ping asterisk-dev
pong from asterisk-dev (100.69.169.87) via DERP(blr) in 244ms
pong from asterisk-dev (100.69.169.87) via DERP(blr) in 244ms
pong from asterisk-dev (100.69.169.87) via DERP(blr) in 241ms
^C2022/03/16 13:08:29 context canceled

❯ ping 100.69.169.87
PING 100.69.169.87 (100.69.169.87): 56 data bytes
Request timeout for icmp_seq 0
Request timeout for icmp_seq 1
Request timeout for icmp_seq 2
Request timeout for icmp_seq 3
Request timeout for icmp_seq 4
^C
--- 100.69.169.87 ping statistics ---
6 packets transmitted, 0 packets received, 100.0% packet loss

Timestamp: 2022/03/16 13:08:29 GMT+4

Steps to reproduce

This is a sporadic issue that gets resolved after a few minutes automatically but I’ve been noticing it about once a day since last week.

Are there any recent changes that introduced the issue?

OS

macOS

OS version

macOS 12.1 21C52 x86_64

Tailscale version

1.20.4

Bug report

BUG-e9c77880ef37ffcfcc8c61b5ad7904f829ff9865c4f3e0e97cc69c3cf16b592f-20220316102104Z-91d929cf9066ded2

About this issue

Original URL
State: open
Created 2 years ago
Reactions: 5
Comments: 15 (7 by maintainers)

Most upvoted comments

DERP servers in different regions don’t communicate between themselves.

A node picks one region as its home, and when two nodes set up a Wireguard tunnel they settle on one of their DERP homes to facilitate the connection.

DentonGentry on Dec 20, 2023

Had the same problem, it turned out to be a local VPN client which blocked all traffic except through the VPN

redbaron on Jul 21, 2022