Jump to content

Converting an old Windows XP laptop to Linux for use as a VPN with Tailscale

Hi I'm completely new to this and I want to download Tailscale on an old windows XP laptop that has 1gb of ram and a 32bit processor. Of course I have to install Linux so is there any suggestion as to which of the supporting Linux distro's should I use? 
Thank you in advance!

Link to comment
Share on other sites

Link to post
Share on other sites

6 hours ago, CKoup said:

Hi I'm completely new to this and I want to download Tailscale on an old windows XP laptop that has 1gb of ram and a 32bit processor. Of course I have to install Linux so is there any suggestion as to which of the supporting Linux distro's should I use? 
Thank you in advance!

windowsXP is (very) unsafe for use as it has not received any security updates for over a decade.

Many Linux systems have discontinued 32 bit support.

1GB RAM is also problematic because you often don't use a mouse on a laptop and a window manager is therefore often less useful.

You can use FreeBSD with LXQt

https://www.freshports.org/security/tailscale/

If you don't mind screen tearing then Alpine Linux with XFCE is also ideal as Alpine uses very little RAM.

You can use MX Linux + fluxbox (or XFCE)

Devuan and XFCE/LXQt may also work well.

I have a very cheap and old netbook that cost less than 200 EUR and how Devuan runs on it is nothing short of phenomenal.

 

 

Those are technically the most optimal choices for slow hardware.

OS: FreeBSD 13.3  WM: bspwm  Hardware: Intel 12600KF -- Kingston dual-channel CL36 @6200 -- Sapphire RX 7600 -- BIOSTAR B760MZ-E PRO -- Antec P6 -- Xilence XP550 -- ARCTIC i35 -- 980 PRO 500GB

Link to comment
Share on other sites

Link to post
Share on other sites

Can I ask why? I'm a tailscale user myself and the way it's supposed to work is that you download tailscale onto every device and then it creates a peer to peer mesh network.

 

So I have it on my phone, my iPad, my gaming PC, my cloud VPS, my Mac, etc etc. Then the devices communicate with each other directly and you don't need a central machine managing the traffic, which it sounds like you're trying to create here.

Link to comment
Share on other sites

Link to post
Share on other sites

What I'm trying to do is this 

So I want this laptop to run at my home and connect all the other devices to it.  

Link to comment
Share on other sites

Link to post
Share on other sites

Okay, then this is a bad choice of machine. You'll be limited to how fast this old 32bit laptop can get the traffic from Netflix, encrypt in the VPN, and then send it out to the end user. I can't imagine it'll have the horse power for even 1 720p stream, let alone multiple streams at any resolution.

 

The instructions in that video are correct. And the steps are mostly identical for Linux as the exit node.

Link to comment
Share on other sites

Link to post
Share on other sites

17 hours ago, maplepants said:

Okay, then this is a bad choice of machine. You'll be limited to how fast this old 32bit laptop can get the traffic from Netflix, encrypt in the VPN, and then send it out to the end user. I can't imagine it'll have the horse power for even 1 720p stream, let alone multiple streams at any resolution.

 

The instructions in that video are correct. And the steps are mostly identical for Linux as the exit node.

And yet that laptop is still likely more powerful in margins of 2 to 3x compared to the OPs home router. It's not even coming close to transcoding which is the work load your talking about. The laptop should work fine.

 

OP to answer your question on which distro, just pick one, Tailscale works on basically anything out there.

Link to comment
Share on other sites

Link to post
Share on other sites

On 6/24/2023 at 9:52 AM, 10leej said:

And yet that laptop is still likely more powerful in margins of 2 to 3x compared to the OPs home router. It's not even coming close to transcoding which is the work load your talking about. The laptop should work fine.

 

OP to answer your question on which distro, just pick one, Tailscale works on basically anything out there.

It might smoke his router in generic benchmarks, but that doesn't matter for this specific workload. 

 

Otherwise, you're right that any flavour of Linux will do this job equally well. So I'd say he should just pick something like Debian, Ubunt, or Fedora. Something that has loads of good guides to help new users, and that's popular enough that he can be sure any problem he has was already asked and answered on some stack exchange board.

Link to comment
Share on other sites

Link to post
Share on other sites

windows xp, 1gb of ram and probably an age old processor for vpn I don't think it would even meet minimum requirements and on top of that 32 bit this would be a very slow vpn I recommend getting a second hand raspberry pi(it will be way faster and easier to manage) and use that as a vpn. If I may know, why not use openvpn instead of tailscale it is way faster since it is self hosted.

Link to comment
Share on other sites

Link to post
Share on other sites

40 minutes ago, goatedpenguin said:

windows xp, 1gb of ram and probably an age old processor for vpn I don't think it would even meet minimum requirements and on top of that 32 bit this would be a very slow vpn I recommend getting a second hand raspberry pi(it will be way faster and easier to manage) and use that as a vpn. If I may know, why not use openvpn instead of tailscale it is way faster since it is self hosted.

It wouldn;t be that slow, the standard PCI interface was specced for it and most Core 2 32 bit systems can achieve it. Even then if it's for a exit node over an internet connection is very unlikely that the OP's internet connection is even 10% of their local network speeds in the US.

Tailscale will route over the local network, the central server is just for verification. Tailscale uses Wireguard's Mesh protocol and will check every access node in the path to the authority server if anything connected to the VPN network is connected and fall back to the most local option to the destination.

 

As in OP starts the tailscale daemon, it connects to tailscale's authority which says which public IP each other client is at, your client will then check every device on the same public IP first which usually is... your home. And your gateway/dhcp/dns server (aka your router) will do the rest in routing the traffic.

 

OpenVPN in this case will work, but I would rather use tailscale (or if you really wanna self host Headscale) as you wont need to worry about opening up any kind of port forwarding.

Link to comment
Share on other sites

Link to post
Share on other sites

Ag

26 minutes ago, 10leej said:

It wouldn;t be that slow, the standard PCI interface was specced for it and most Core 2 32 bit systems can achieve it. Even then if it's for a exit node over an internet connection is very unlikely that the OP's internet connection is even 10% of their local network speeds in the US.

Tailscale will route over the local network, the central server is just for verification. Tailscale uses Wireguard's Mesh protocol and will check every access node in the path to the authority server if anything connected to the VPN network is connected and fall back to the most local option to the destination.

 

As in OP starts the tailscale daemon, it connects to tailscale's authority which says which public IP each other client is at, your client will then check every device on the same public IP first which usually is... your home. And your gateway/dhcp/dns server (aka your router) will do the rest in routing the traffic.

 

OpenVPN in this case will work, but I would rather use tailscale (or if you really wanna self host Headscale) as you wont need to worry about opening up any kind of port forwarding.

Agreed but having windows xp as an os would be insecure and would not be using the computer to its fullest capabilities so installing a lightweight linux distro like centos or arch linux (since it is very minimal and you have the power to install the necessary packages that are needed)would do good a job.

Link to comment
Share on other sites

Link to post
Share on other sites

8 hours ago, goatedpenguin said:

Ag

Agreed but having windows xp as an os would be insecure and would not be using the computer to its fullest capabilities so installing a lightweight linux distro like centos or arch linux (since it is very minimal and you have the power to install the necessary packages that are needed)would do good a job.

Quote

Of course I have to install Linux so is there any suggestion as to which of the supporting Linux distro's should I use? 

OP is already aware of that

Link to comment
Share on other sites

Link to post
Share on other sites

  • 1 month later...

I suggest Debian or rather LMDE, Linux Mint debian edition, with XFCE and once you get it setup how you want, set it up to only boot to command-line first, where it will only use 150-200MB of memory, and cache the rest into available memory.  Running XFCE will take up more memory when you aren't using it.

 

Enjoy re-using computer tools that still work, it's all just 1 and 0.

: JRE #1914 Siddarth Kara

How bad is e-waste?  Listen to that Joe Rogan episode.

 

"Now you get what you want, but do you want more?
- Bob Marley, Rastaman Vibration album 1976

 

Windows 11 will just force business to "recycle" "obscolete" hardware.  Microsoft definitely isn't bothered by this at all, and seems to want hardware produced just a few years ago to be considered obsolete.  They have also not shown any interest nor has any other company in a similar financial position, to help increase tech recycling whatsoever.  Windows 12 might be cloud-based and be a monthly or yearly fee.

 

Software suggestions


Just get f.lux [Link removed due to forum rules] so your screen isn't bright white at night, a golden orange in place of stark 6500K bluish white.

released in 2008 and still being improved.

 

Dark Reader addon for webpages.  Pick any color you want for both background and text (background and foreground page elements).  Enable the preview mode on desktop for Firefox and Chrome addon, by clicking the dark reader addon settings, Choose dev tools amd click preview mode.

 

NoScript or EFF's privacy badger addons can block many scripts and websites that would load and track you, possibly halving page load time!

 

F-droid is a place to install open-source software for android, Antennapod, RethinkDNS, Fennec which is Firefox with about:config, lots of performance and other changes available, mozilla KB has a huge database of what most of the settings do.  Most software in the repository only requires Android 5 and 6!

 

I recommend firewall apps (blocks apps) and dns filters (redirect all dns requests on android, to your choice of dns, even if overridden).  RethinkDNS is my pick and I set it to use pi-hole, installed inside Ubuntu/Debian, which is inside Virtualbox, until I go to a website, nothing at all connects to any other server.  I also use NextDNS.io to do the same when away from home wi-fi or even cellular!  I can even tether from cellular to any device sharing via wi-fi, and block anything with dns set to NextDNS, regardless if the device allows changing dns.  This style of network filtration is being overridden by software updates on some devices, forcing a backup dns provuder, such as google dns, when built in dns requests are not connecting.  Without a complete firewall setup, dns redirection itself is no longer always effective.

Link to comment
Share on other sites

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×