tailscale-exit-proxy

Configure Tailscale exit nodes as local SOCKS5 proxies for IP rotation.

Updated Sep 5, 2026
One-click install
npx skills add https://github.com/SillyHippy/zo-skills --skill tailscale-exit-proxy-sillyhippy
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: tailscale-exit-proxy
Source: https://github.com/SillyHippy/zo-skills/tree/main/skills/tailscale-exit-proxy
Command: npx skills add https://github.com/SillyHippy/zo-skills --skill tailscale-exit-proxy-sillyhippy

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve? Rotating outbound IP addresses across multiple devices requires manually managing separate Tailscale daemon instances, SOCKS5 ports, and exit node assignments, which is error-prone and hard to keep running across reboots. ## Core Features & Use Cases - Multi-Device Proxy Pools: Run isolated tailscaled instances in userspace-networking mode, each exposing a local SOCKS5 port routed through a different Android phone, Windows laptop, or direct VPS connection. - Automated Proxy Provisioning: The add-proxy.sh script starts a new tailscaled instance, handles authentication, sets the exit node, verifies the exit IP, and generates a boot script. - Status Monitoring: The status.sh script checks every proxy port and reports the current exit IP for each device. - Use Case: Add a new phone as a proxy exit point by running the add script with a port, device name, and Tailscale IP, then register it as a managed service and add it to a 9Router round-robin pool. ## Quick Start Set up a new phone as a Tailscale exit node proxy on port 1061 and verify its exit IP.

Frequently Asked Questions about tailscale-exit-proxy

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I set up a Tailscale exit node as a SOCKS5 proxy?▼

Start a tailscaled instance with --tun=userspace-networking and --socks5-server=127.0.0.1:PORT, then set the exit node with tailscale set --exit-node=DEVICE_IP. Verify by curling ifconfig.me through the SOCKS5 port.

How do I add a new phone as a proxy exit point?▼

Enable 'Use as exit node' in the phone's Tailscale app and approve it in the admin console. On the VPS, run add-proxy.sh with a free port, device name, and the phone's 100.x Tailscale IP to start the daemon and generate a boot script.

Can a Windows laptop be used as a Tailscale exit node?▼

Yes. Install Tailscale, sign in, and run 'tailscale set --advertise-exit-node' in an elevated PowerShell, then approve it in the admin console. Its exit IP will be the home router's IP unless a VPN is connected first.

Why does the Tailscale admin console not show my SOCKS5 proxy port?▼

The admin console only shows hostname, IPs, OS, and connection status. SOCKS5 ports are local tailscaled settings on the device itself, so check them with tailscale serve status or the app's Serve section.

Why does my exit node proxy fail with 'node is not advertising an exit node'?▼

The device's exit node advertisement has not synced to the tailnet. Toggle the exit node setting off and on in the device's Tailscale app and confirm the 'Exit Node' badge appears in the admin console.

What happens to a proxy pool when the phone disconnects from Tailscale?▼

That proxy pool fails until Tailscale is reconnected on the device. Other pools keep working, and a round-robin router like 9Router should skip the failed pool automatically.