Tailscale; website unreachable error

[crawfordlong]

Routes

/youtube/

Full routes

/youtube/user/@AdamNeely (but could be anyone)

Related documentation

n/a

What is expected?

I am migrating my rsshub installation from a publicly accessible installation to a private tailscale network.

I can browse directly to rsshub from another machine on the tailscale network, e.g., https://rsshub.$my.$domain/youtube/user/@AdamNeely, and see the resulting RSS feed. If I leave the tailscale network, I can no longer browse to the rsshub resource. This is expected.

If I subscribe to an rsshub feed from miniflux, I should see the feed in my reader (this was working properly with the public-facing installation of each).

What is actually happening?

If I subscribe to an rsshub link in miniflux, any attempt to refresh times out with:
[ERROR] [UI:RefreshFeed] This website is unreachable (original error: "dial tcp 100.$x.$y.$z: i/o timeout")

Deployment information

Self-hosted

Deployment information (for self-hosted)

OS: Ubuntu 22.10; Docker 20.10.16

Additional info

I cannot figure out a way to troubleshoot this. I figure there's a decent chance this error is occurring in miniflux (in which case feel free to close this error). 

What seems to be happening is that, somewhere in the chain, a resource outside my tailscale network is attempting to access the rsshub. The only thing outside the network that I can think is involved in any transaction with rsshub is youtube -- is the youtube API call doing some sort of reverse transaction that requires that it be able to resolve and access the resource that is making the call?

This is not a duplicated issue

• I have searched existing issues to ensure this bug has not already been reported

[github-actions]

Searching for maintainers:

• /youtube/: Route not found

To maintainers: if you are not willing to be disturbed, list your username in scripts/workflow/test-issue/call-maintainer.js. In this way, your username will be wrapped in an inline code block when tagged so you will not be notified.

如果有任何路由无法匹配，issue 将会被自动关闭。如果 issue 和路由无关，请使用 NOROUTE 关键词，或者留下评论。我们会重新审核。
If there is any route not found, the issue will be closed automatically. Please use NOROUTE for a route-irrelevant issue or leave a comment if it is a mistake.

[crawfordlong]

I may have misunderstood what was being requested regarding the term 'route'. Apologies if so.

[TonyRL]

This is really a tailscale-related issue.

You have to make sure your RSSHub instance:

1. can visit the internet
2. can be visited through your tailscale network

and make sure your miniflux instance:

1. can visit your RSSHub instance through your tailscale network

[crawfordlong]

That’s the thing: as far as I can tell, the answer to all 3 of your questions is “yes”. For example, I don’t have any issue “seeing” the rsshub container from within the miniflux instance. This is perhaps useless but anecdotal, but several other containers are communicating with exactly the same setup, eg various containers hitting a Postgres or redis container without any issues. As near as I can tell, the only application having any trouble, and only in this peculiar case, is miniflux (or rsshub, but the error is showing up in miniflux logs), and I can’t see any user error reason why this would be the case.

…

On Mar 10, 2023 at 2:30 PM, <Tony ***@***.***)> wrote: This is really a tailscale-related issue. You have to make sure your RSSHub instance: can visit the internet can be visited through your tailscale network and make sure your miniflux instance: can visit your RSSHub instance through your tailscale network — Reply to this email directly, view it on GitHub (#12071 (comment)), or unsubscribe (https://github.com/notifications/unsubscribe-auth/ATWGBHLSTDFCJGNU6BLE5XDW3N6OVANCNFSM6AAAAAAVVV6ZJM). You are receiving this because you authored the thread.Message ID: ***@***.***>