· I use a single personal router not provided by my ISP
ARC Status
· ARC is *Ready*
Describe the issue
I am trying to setup a Tailscale VPN. ARC will not connect outside of my local network. I believe everything is configured correctly. All Tailscale machines are logged in as the same user and connected. The Roon Server is running in a container on a QNAP NAS (TS673A running QuTS Hero) and Tailscale was installed from the QNAP app menu. I am trying to connect via an iPhone 17 Pro. The container is running in Host network mode and the ARC port is set to zero. I do have poor cell service in my house and have seen ARC connect to the Tailscale cloud but never complete the connection to the Roon host container when disconnected from the local network. ARC works fine when my local network is connected on the phone..
Describe your network setup
ISP: Sonic fiber, runs near 1 gbps in both directions.
Router: Netgear Nighthawk RAXE500. UPnP is disabled.
Roon Server running on QNAP NAS TS683A in a Docker container in Host network mode.
I am trying to setup a Tailscale VPN connection (this is where the problem is). It was installed on the above NAS from the QNAP app menu.
ARC is running on my iPhone 17 Pro and works inside my local network. ARC port is set to zero.
Thank you for reaching out and providing such a detailed breakdown of your network setup. It looks like you have configured everything perfectly on paper—running the Docker container in Host network mode, setting the ARC port to zero, and ensuring all Tailscale machines are logged in under the same user.
To isolate where the block is happening, could you please try running a direct ping test over the Tailscale network from your iPhone?
Here is how to do that:
Find your Tailscale IP: Log into the Tailscale admin console on their website and locate the specific Tailscale IP address assigned to your QNAP NAS.
Get a Ping Tool: Since iOS does not have a built-in network terminal, please download a free network utility app from the App Store (searching for “Ping” will bring up several free, simple options).
Test the Connection: Disconnect your iPhone from your local Wi-Fi so you are strictly on cellular data, and make sure the Tailscale VPN profile is active.
Ping the NAS: Open the ping app and try to ping the QNAP’s Tailscale IP address.
Are you able to successfully ping the NAS over cellular, or do the requests time out completely?
This result will tell us exactly whether we need to troubleshoot Tailscale routing or adjust the QNAP/Docker network permissions. Looking forward to your reply!
I’ve verified that the VPN is active and working on my iPhone but the packets sent from it through the Tailscale VPN are timing out when sent to the Roon Server and work fine to 8.8.8.8 with help from Tailscale support. They have indicated the WireGaurd tunnel is functioning as expected. It appears ARC is still using port 55002 even after setting the zero in the ARC setting. Here’s how things look using SSH to interigate the QNAP server (192.168.1.19 is my iPhone on the local network and 100.103.199.66 is the address Tailscale assigned to my QNAP server machine:
The problem is QNAP supplies an old problematic version of Tailscale in its app center. I pull the most recent stable image and it worked out of the box
