Skip to main content
The router advertises subnets of the Network to the tailnet as subnet routes. After the subnet routes are approved, devices behind the router reach those subnets. These ranges are reserved by Telnyx and cannot be advertised. The API rejects a route that overlaps any of them:
  • 0.0.0.0/8, and with it the default route
  • 127.0.0.0/8, loopback
  • 169.254.0.0/16, link-local
  • 224.0.0.0/3, multicast and reserved
  • 100.64.0.0/10, Tailscale’s own addresses
  • 172.27.254.0/24 and 198.18.0.0/20, the router’s own addresses
A PATCH with a new advertised_routes list replaces the advertisement. The router keeps its machine on the tailnet.

​
For the Tailnet Admin

  • Approve each route in the admin console, or let autoApprovers approve it.
  • Grant access to the routes with an access rule. Approval puts a route on devices. Access rules decide which traffic passes. The route injection reference covers both.
  • Android, iOS, macOS, tvOS, and Windows devices pick up the routes automatically. Linux devices need tailscale set --accept-routes.