Derper is a self hosted DERP (Designated Encrypted Relay for Packets) server, designed to be used with Tailscale. This snap provides a simple and secure way to run your own DERP servers to route your tailscale traffic through your own relay servers.
Please refer to the upstream documentation for more information:
Usage
Install the snap:
sudo snap install derper
This installs the DERP server and starts it automatically. You will likely need to configure the service:
Configuration
You can modify configuration options with sudo snap set. The following configuration options are currently supported:
hostname: LetsEncrypt host name, if addr's (a) port is :443. (default if unset: "derp.tailscale.com")a: server HTTP/HTTPS listen address, in form ":port", "ip:port", or for IPv6 "[ip]:port". If the IP is omitted, it defaults to all interfaces. Serves HTTPS if the port is 443 and/or certmode is manual (default certmode is "letsencrypt"), otherwise HTTP. (default if unset: ":443")stun-port: The UDP port on which to serve STUN. The listener is bound to the same IP (if any) as specified in the a option. (default if unset: "3478")verify-clients: Verify clients to this DERP server through a local tailscaled instance. Must be "true" or "false". (default if unset: "false")The config options correspond to the similarly named command line flags for derper.
Options that don't have support to be configured through the snap will be left on their default.
See the derper command source code at https://github.com/tailscale/tailscale/tree/main/cmd/derper for more technical information on options.
Example of setting an option:
sudo snap set derper hostname=myderper.mydomain.com
To view the available config options and their current values:
$ sudo snap get derper
Key Value
hostname
a 127.0.0.1:443
verify-clients false
...
Derper must be restarted manually for the changed config to take affect:
sudo snap restart derper
To run in verify-clients mode, the tailscale snap must also be installed,
and the two snaps connected over the custom content interface so the control socket is shared:
sudo snap install derper
sudo snap install tailscale
sudo snap connect derper:tailscale-socket tailscale:socket
sudo snap set derper verify-clients=true
sudo snap restart derper
Security
See https://github.com/canonical/derper-snap/blob/main/docs/security-reference.md for security and hardening documentation.
This snap is maintained by Canonical, and is not necessarily endorsed or officially maintained by the upstream developers.
You are about to open
Do you wish to proceed?
Thank you for your report. Information you provided will help us investigate further.
There was an error while sending your report. Please try again later.
Snaps are applications packaged with all their dependencies to run on all popular Linux distributions from a single build. They update automatically and roll back gracefully.
Snaps are discoverable and installable from the Snap Store, an app store with an audience of millions.
Snap can be installed from the command line on openSUSE Leap 15.x and Tumbleweed.
You need first add the snappy repository from the terminal. Choose the appropriate command depending on your installed openSUSE flavor.
Tumbleweed:
sudo zypper addrepo --refresh https://download.opensuse.org/repositories/system:/snappy/openSUSE_Tumbleweed snappy
Leap 15.x:
sudo zypper addrepo --refresh https://download.opensuse.org/repositories/system:/snappy/openSUSE_Leap_15.6 snappy
If needed, Swap out openSUSE_Leap_15. for, openSUSE_Leap_16.0 if you’re using a different version of openSUSE.
With the repository added, import its GPG key:
sudo zypper --gpg-auto-import-keys refresh
Finally, upgrade the package cache to include the new snappy repository:
sudo zypper dup --from snappy
Snap can now be installed with the following:
sudo zypper install snapd
You then need to either reboot, logout/login or source /etc/profile to have /snap/bin added to PATH.
Additionally, enable and start both the snapd and the snapd.apparmor services with the following commands:
sudo systemctl enable --now snapd
sudo systemctl enable --now snapd.apparmor
To install DERP Server for Tailscale, simply use the following command:
sudo snap install derper
Browse and find snaps from the convenience of your desktop using the snap store snap.
Interested to find out more about snaps? Want to publish your own application? Visit snapcraft.io now.