为越狱 Kindle 提供的更多 Tailscale 使用技巧
More Tailscale tricks for your jailbroken Kindle

原始链接: https://tailscale.com/blog/jailbroken-kindle-proxy-tun-modes

社区开发者已大幅提升了越狱 Kindle 及其他电子书阅读器的 Tailscale 使用体验。此前的版本仅限于基础连接,而新更新为高级用户提供了更强大的功能。 主要改进包括: * **Tailscale SSH:** 默认开启 SSH 访问,无需繁琐的 USB 网络配置。 * **代理模式 (Proxy Mode):** 允许 KOReader 等应用通过 SOCKS5 或 HTTP CONNECT 与你的 tailnet 中的其他设备(如 Calibre 或 Wallabag 服务器)通信。 * **完整 TUN 模式:** 在兼容硬件上提供设备级的网络支持。 对于专注于阅读的用户,新增的专用 KOReader 插件可自动配置这些代理连接,从而更轻松地将内容从内部服务器同步到设备。虽然安装这些非官方工具需要越狱设备并具备一定的技术耐心,但它们将普通的 Kindle 转变为功能更强的联网瘦客户端。无论是用于同步书库还是构建自定义电子纸设置,这些社区驱动的更新都为折腾电子阅读器带来了新的可能。

Hacker News 最新 | 过往 | 评论 | 提问 | 展示 | 招聘 | 提交 登录 更多 为越狱版 Kindle 准备的 Tailscale 新技巧 (tailscale.com) 34 点,发布者:Error6571,41 分钟前 | 隐藏 | 过往 | 收藏 | 讨论 | 帮助 指南 | 常见问题 | 列表 | API | 安全 | 法律 | 加入 YC | 联系 搜索:
相关文章

原文

If you managed to put Tailscale on a jailbroken Kindle before it updated too far ahead, you got something pretty great, even if it wasn't the full Tailscale experience. But good things come to those who wait (or dig around on GitHub).

Open-source developers have improved the Tailscale experience on one of the weakest computers you own. If your Kindle is jailbroken, an updated version of Mitanshu Sukhwani's Tailscale implementation offers a few new things:

  • Tailscale SSH enabled by default, so you don't have to enable USBnetworking SSH and its very obvious default user/password
  • A proxy mode that lets apps like KOReader to reach other nodes on your tailnet, like a Calibre/OPDS or Wallabag server
  • A full TUN mode that, on some Kindles, can make Tailscale networking work at the device level

Let’s dig into each one and how to set them up. As before, this is community code working on a very unofficial device state; bring your patience along.

An Amazon Kindle, open to the Tailscale KUAL plug-in, showing three modes: "Standard (Userspace)," "Proxy Mode (SOCKS5/HTTP)," and "Kernel TUN (if supported)". Proxy mode is selected; inlaid text on the screen shows "Tailscaled started OK (proxy: localhost:1055)"

The last time we wrote about Tailscale on a Kindle, the client was basic, but it worked. The Kindle showed up on your tailnet, complete with a green dot in the web admin console. You could reach the Kindle by its Tailscale IP address. You could even SSH into the Kindle over Tailscale, which was handy for further tinkering.

But “reachable via Tailscale” is not the same as “routing all incoming and outgoing traffic across your tailnet,” it turns out. Tailscale on a jailbroken Kindle is typically forced to run in userspace mode, which means it cannot use the device's own network routing layer, known as TUN mode. You could start Tailscale, and then start an app like KOReader, but when you tried to connect to another Tailscale device, like your Calibre server at 100.x.y.z, it would go like this:

  • KOReader (or any app) asks the Kindle’s root OS how to reach 100.x.y.z
  • The Kindle, lacking Tailscale routing, cannot reach that Tailscale IP address
  • KOReader drops the connection

An update to the Kindle KUAL app by greywolf1499 provides different modes that work around this. Now, when you try to reach another Tailscale IP address on your Kindle, it can go like this:

  • You start Tailscale in proxy mode
  • You set up KOReader or another app's proxy settings to connect to 127.0.0.1:1055
  • KOReader tells the proxy it wants to reach 100.x.y.z
  • Tailscale’s daemon tailscaled, listening on port 1055, routes the connection through Tailscale
  • E-books, articles, and other data flows between your Tailscale-running Kindle and other Tailscale devices

This Tailscale proxy offers two modes, SOCKS5 and HTTP CONNECT, for apps that may prefer one or the other. This opens up a good bit more utility for your more-connected Kindle.

A Kindle, opened to KOReader, with the "Tools" menu selected. On the screen, a toast message reads "Received a list of 5 articles."

A few wild ideas, depending on how dug in you want to get:

Is that last one all that practical? Not really. But is there a pleasant warmth, knowing that you've added the least likely thin client to your what-if kit? For some types, types I know quite well: yes.

If you don’t really need any Tailscale powers outside the highly capable KOReader app, check out this Tailscale KOReader plugin. It doesn’t make your Kindle accessible over your tailnet, like the KUAL-based app. But it does automatically create the proxy interfaces that are needed for reaching your content servers from your KOReader-running Kindle—or your Kobo device, or your PocketBook.

I haven't been able to really try this extension out myself; my 11th-generation standard Kindle doesn't play well with it at the moment. It's been "Tested on Kindle PW5/PW6, Kobo, and PocketBook"—it's nice to see Tailscale come to some other KOReader-friendly devices, too.

Installation is not too hard, at least if you made it this far into jailbreaking already. You copy the plugin into KOReader’s plugins directory, trigger an “Install/Update Tailscale” from KOReader’s menu, copy a Tailscale key into a directory, then toggle Tailscale on in the KOReader menu. From there, you configure KOReader with one of its proxy addresses (127.0.0.1:1055 for SOCKS5, :1056 for HTTP CONNECT), then give other plugins the Tailscale IP addresses you need to reach.

Victoria Riley Barnett’s repository notes that the plugin works great with a SyncThing plugin for KOReader. KOReader is like its own separate OS for jailbroken Kindles at this point,

So now you’ve got a lot more options and weird projects available to you, through this already quite-strange little slab. If you’ve worked up a weirdly useful Tailscale setup on your Kindle, Kobo, or other e-paper device, we’d love to hear about it. Let us know on RedditDiscordBlueskyX, Mastodon, or LinkedIn.

联系我们 contact @ memedata.com