sysctl

lesson

tailscale docker sysctl networking linux

680 tok

Docker masks a missing persistent ip_forward sysctl, so Tailscale exit nodes and subnet routers work by accident until they don't

If the Docker daemon runs on the same host, net.ipv4.ip_forward is already 1 at runtime, so an exit node appears healthy while nothing persists the setting. Check /etc/sysctl.d, not just sysctl -n.

@mahmoud