starred/headscale
1
0
Fork 0
mirror of https://github.com/juanfont/headscale.git synced 2026-01-11 20:00:28 +01:00
Code Issues 98 Packages Projects Releases 10 Wiki Activity

log.tailscale.io DNS queries #337

New Issue
Closed
opened 2025-12-29 01:27:18 +01:00 by adam · 4 comments
adam commented 2025-12-29 01:27:18 +01:00
Owner
Copy Link

Originally created by @marijnv2000 on GitHub (Sep 26, 2022).

Issue description

I'm seeing DNS queries to log.tailscale.io with logging disabled in the headscale config.
image

I have not checked if it's actually sending logs, and I'm unsure if this is expected, but didn't find any previous reports.

I expected setting the logtail configuration to false in headscale meant this would be disabled.

To Reproduce

Install headscale, connect a client, wait, check DNS logs

Context info
Headscale v0.16.4
Tailscale 1.30.2 on Windows 10
Tailscale 1.20.2 on Android 12

Logtail configuration in config.yaml file on Headscale server:

# Logtail configuration
# Logtail is Tailscales logging and auditing infrastructure, it allows the control panel
# to instruct tailscale nodes to log their activity to a remote server.
logtail:
  # Enable logtail for this headscales clients.
  # As there is currently no support for overriding the log server in headscale, this is
  # disabled by default. Enabling this will make your clients send logs to Tailscale Inc.
  enabled: false
Originally created by @marijnv2000 on GitHub (Sep 26, 2022). <!-- Headscale is a multinational community across the globe. Our common language is English. Please consider raising the issue in this language. --> <!-- If you have a question, please consider using our Discord for asking questions --> **Issue description** I'm seeing DNS queries to log.tailscale.io with logging disabled in the headscale config. ![image](https://user-images.githubusercontent.com/17097054/192324479-ff7b35ca-1386-460b-8c33-26274d5705bb.png) I have not checked if it's actually sending logs, and I'm unsure if this is expected, but didn't find any previous reports. I expected setting the logtail configuration to `false` in headscale meant this would be disabled. **To Reproduce** Install headscale, connect a client, wait, check DNS logs **Context info** Headscale v0.16.4 Tailscale 1.30.2 on Windows 10 Tailscale 1.20.2 on Android 12 Logtail configuration in config.yaml file on Headscale server: ``` # Logtail configuration # Logtail is Tailscales logging and auditing infrastructure, it allows the control panel # to instruct tailscale nodes to log their activity to a remote server. logtail: # Enable logtail for this headscales clients. # As there is currently no support for overriding the log server in headscale, this is # disabled by default. Enabling this will make your clients send logs to Tailscale Inc. enabled: false ```
adam added the bugneeds investigation labels 2025-12-29 01:27:18 +01:00
adam closed this issue 2025-12-29 01:27:18 +01:00
adam commented 2025-12-29 01:27:19 +01:00
Author
Owner
Copy Link

@kradalby commented on GitHub (Sep 27, 2022):

I am not familiar with the internal mechanism of the client here, it would be helpful if you tried to inspect and check what the payload is.

@kradalby commented on GitHub (Sep 27, 2022): I am not familiar with the internal mechanism of the client here, it would be helpful if you tried to inspect and check what the payload is.
adam commented 2025-12-29 01:27:19 +01:00
Author
Owner
Copy Link

@marijnv2000 commented on GitHub (Oct 1, 2022):

I'm not sure how to go about that. I left a pcap running on Windows 10 with Tailscale running and filtered on traffic from/to the IP log.tailscale.io resolved to, but of course it's all encrypted so not particularly helpful. It does show data is continuously sent after the lookup.

log.tailscale.io resolves to 34.229.201.48, which points to an amazon ec2 instance.

image

I can provide more details, I'm just not sure what or how.

@marijnv2000 commented on GitHub (Oct 1, 2022): I'm not sure how to go about that. I left a pcap running on Windows 10 with Tailscale running and filtered on traffic from/to the IP log.tailscale.io resolved to, but of course it's all encrypted so not particularly helpful. It does show data is continuously sent after the lookup. log.tailscale.io resolves to 34.229.201.48, which points to an amazon ec2 instance. ![image](https://user-images.githubusercontent.com/17097054/193411239-42fa8f8d-7aa0-49b1-b21a-c5bb46d4265a.png) I can provide more details, I'm just not sure what or how.
adam commented 2025-12-29 01:27:19 +01:00
Author
Owner
Copy Link

@huskyii commented on GitHub (Oct 22, 2022):

@marijnv2000 could you try start tailscaled with environment variable TS_NO_LOGS_NO_SUPPORT set? and check

  1. if tailscaled still try to connect to log.tailscale.io?
  2. if taiscaled logged You have disabled logging. Tailscale will not be able to provide support.
@huskyii commented on GitHub (Oct 22, 2022): @marijnv2000 could you try start tailscaled with environment variable `TS_NO_LOGS_NO_SUPPORT` set? and check 1. if tailscaled still try to connect to `log.tailscale.io`? 2. if taiscaled logged `You have disabled logging. Tailscale will not be able to provide support.`
adam commented 2025-12-29 01:27:19 +01:00
Author
Owner
Copy Link

@kradalby commented on GitHub (Apr 19, 2023):

I will close this as it go no more new response. Reopen if it is to be investigated again.

@kradalby commented on GitHub (Apr 19, 2023): I will close this as it go no more new response. Reopen if it is to be investigated again.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
CLI
DERP
DNS
Nix
OIDC
SSH
bug
database
documentation
duplicate
enhancement
faq
good first issue
grants
help wanted
might-come
needs design doc
needs investigation
no-stale-bot
out of scope
performance
policy 📝
pull-request
Mirrored from GitHub Pull Request
 question
regression
routes
stale
tags
tailscale-feature-gap
well described ❤️
wontfix
No Label bug needs investigation
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
adam
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/headscale#337
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?