>_ PRIVATE INFRASTRUCTURE
PUBLIC FALLBACK
ROUTE_MISMATCH / PUBLIC_ENDPOINT

Oops, wrong side of
the internet.

Well, this is awkward. You're supposed to be inside the tailnet, but somehow you've ended up at our public doorstep.

Don't worry, your apps are probably doing just fine. Your DNS might just be a little confused.

Find your way back

01
Check your Tailscale connection

Make sure you're connected to the right tailnet.

tailscale status
02
Enable Tailscale DNS

On Linux, allow Tailscale to apply your tailnet's DNS settings.

sudo tailscale set --accept-dns=true

On Windows or macOS, enable Tailscale DNS in the app's settings.

03
Refresh and try again

Still here? Check split DNS, resolver settings, and cached DNS answers. Seeing this page doesn't necessarily mean your VPN is disconnected.

A valid TLS certificate doesn't guarantee you're reaching the intended endpoint. DNS-01 certificates work on both sides of this setup.