Make always use DERP option configurable

tailscale/DOCS.md

@@ -72,6 +72,7 @@ advertise_routes:
   - local_subnets
   - 192.168.1.0/24
   - fd12:3456:abcd::/64
+always_use_derp: false
 exit_node: 100.101.102.103
 log_level: info
 login_server: "https://controlplane.tailscale.com"
@@ -165,6 +166,20 @@ More information: [Subnet routers][tailscale_info_subnets]
 The app by default will advertise routes to your subnets on all supported
 interfaces by adding `local_subnets` to the list.
 
+### Option: `always_use_derp`
+
+When enabled forces all peer communication over DERP by disabling the use of
+UDP.
+
+This option is disabled by default.
+
+Basically you will never want to enable this option. Try to enable it only, when
+you experience that connections to your Home Assistant device regularly freeze
+(even when you can ping the device, the web page or the Home Assistant app is
+unresponsive), and you have to reload the web page or force stop the Home
+Assistant app to make them work again. The root cause can be that your ISP
+erroneously drops UDP packets on certain conditions.
+
 ### Option: `exit_node`
 
 This option allows you to specify another Tailscale instance as an exit node for

tailscale/config.yaml

@@ -33,6 +33,7 @@ options:
   advertise_connector: true
   advertise_routes:
     - local_subnets
+  always_use_derp: false
   log_level: info
   login_server: "https://controlplane.tailscale.com"
   share_homeassistant: disabled
@@ -49,6 +50,7 @@ schema:
   advertise_connector: bool
   advertise_routes:
     - "match(^(?:local_subnets|(?:(?:25[0-5]|(?:2[0-4]|1\\d|[1-9]?)\\d)\\.){3}(?:25[0-5]|(?:2[0-4]|1\\d|[1-9]?)\\d)\\/(?:3[0-2]|[12]?\\d)|[a-fA-F\\d.:]+:[a-fA-F\\d.:]+\\/(?:12[0-8]|(?:1[01]|[1-9]?)\\d))$)"
+  always_use_derp: bool
   exit_node: "match(^(?:(?:(?:25[0-5]|(?:2[0-4]|1\\d|[1-9]?)\\d)\\.){3}(?:25[0-5]|(?:2[0-4]|1\\d|[1-9]?)\\d)|[a-fA-F\\d.:]+:[a-fA-F\\d.:]+|[a-fA-F\\d]{8}(?:-[a-fA-F\\d]{4}){3}-[a-fA-F\\d]{12}|auto:any)$)?"
   log_level: list(trace|debug|info|notice|warning|error|fatal)
   login_server: url

tailscale/rootfs/etc/s6-overlay/s6-rc.d/tailscaled/run

@@ -33,6 +33,12 @@ if bashio::config.true "userspace_networking"; then
   options+=(--tun=userspace-networking)
 fi
 
+# If always_use_derp enabled, set TS_DEBUG_ALWAYS_USE_DERP=true
+if bashio::config.true "always_use_derp"; then
+  export TS_DEBUG_ALWAYS_USE_DERP=true
+  bashio::log.notice "You have enabled always_use_derp, all traffic will be routed via DERP servers"
+fi
+
 # Run Tailscale
 # If exists, resolv.dnsmasq.conf pointing to the dummy dnsmasq will be mounted in place of the real resolv.conf only for tailscaled
 # This will prevent the DNS at 100.100.100.100 to call back to hassio_dns causing a loop

tailscale/translations/en.yaml

@@ -34,6 +34,12 @@ configuration:
       your device is connected to) to other clients on your tailnet.
       The app by default will advertise routes to your subnets on all supported
       interfaces by adding `local_subnets` to the list.
+  always_use_derp:
+    name: Always use DERP connection
+    description: >-
+      When enabled forces all peer communication over DERP by disabling the use of
+      UDP.
+      This option is disabled by default.
   exit_node:
     name: Use exit node
     description: >-