Teleport to a Gateway Ultra in another country?

I’m an expat in the US - and run Ubiquiti in my home.

My folks are still back in the UK, and I’ve often missed access to local apps (BBC iPlayer), but not enough to subscribe to a commercial VPN for.

But with my Dad complaining about the wifi in his house, and an upcoming trip, I wondered what it would take to move him over to Ubiquiti, and how I could do it so I could use the Teleport functionality to route through his network - gaining access to iPlayer again.

If I setup a Cloud Gateway Ultra (and a couple of APs for him) on his home ISP - then sent myself a Teleport invite - is that enough to do the job? It seems simple, but I’ve not done it before, so figured I’d check before i buy him hardware I’ll be responsible for installing and supporting forever more :slight_smile:

Hello! Thanks for posting on r/Ubiquiti!

This subreddit is here to provide unofficial technical support to people who use or want to dive into the world of Ubiquiti products. If you haven’t already been descriptive in your post, please take the time to edit it and add as many useful details as you can.

Ubiquiti makes a great tool to help with figuring out where to place your access points and other network design questions located at:

If you see people spreading misinformation or violating the “don’t be an asshole” general rule, please report it!

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

Split tunnel VPN is your best option.

This should work, but Teleport will be tunneling all traffic to the U.K.

As far as I know, Teleport does not support application aware or policy based routing. If you’re just using the BBC app, that should be fine. If you’re going to be multitasking while doing so, you may have performance and/or access issues.

Given your use case, I would probably recommend a commercial VPN. They are going to be more flexible, and won’t require you supporting a network stack in a different country.

Or you could get them an Apple TV and put Tailscale on it, have it be an “exit node” and then tunnel to it when needed. https://youtu.be/C8XoZYJcFtI?feature=shared

It’s going to take about a decade of subscriptions for a commercial VPN to equal that of replacing his network with Unifi equipment, so it’s crazy to me that you don’t miss it enough to subscribe but willing to spend the money, unless you plan to have your parents pay for it all.

And I don’t see how using his exiting Apple TV or any appliance on his network instead is going to help with his complaints about the WiFi in his house. If anything, it’s going to make it worse.

So like, you really need to decide what you want to solve first.

To be fair, if dad ends up buying the router I’ll likely be supporting it anyway :joy:

Oh, hmmm. That’s perfect. He even has an AppeTV already. I wonder, does the UK side decide need to be dedicated to tailscale, or can it just be his regular appletv. Looks like I’m going down a rabbit hole today

To be fair, his WiFi problems are his, and I figured I could piggy back on fixing them and get something else in there at the same time. I generally don’t go for the monthly subscription route when I can do something else - but the world is changing!

Like he says in the video, the Apple TV in the UK is an exit node, meaning any of your Tailscale clients can “exit” out that device. I doesn’t affect the day to day operation of the Apple TV there.

Personally if he is willing to pay for the equipment (and I agree with the reasoning) then that is the way I would go instead of loading tailscale on his Apple TV and making his connection worse.

There’s no reason to do both.

I’m thinking the same - I can help him fix his own issues, and scratch my bbc itch - even if it’s just on my phone or iPad - every now and then.

Tailscale on the appletv looks like a fun homelab project, but may be more invasive for them than it needs ti be - and who knows if Apple will let it continue forever