Let Non-Tailscale Devices Access Your Tailnet with this Subnet Router Trick

Tailscale subnet routers are great for connecting devices that can’t run Tailscale—but what if you need those devices to initiate connections back into your tailnet? In this video, we walk through how to make that possible by rethinking how subnet routers work. You’ll learn what happens under the hood with SNAT, why it limits bidirectional communication, and how disabling it unlocks new capabilities. We’ll also cover how to configure return paths using static routes (at the OS, DHCP, or VPC level), so non-Tailscale devices—like e-readers, IoT devices, or cloud instances—can reach services inside your tailnet. This is the first video in a series exploring more advanced Tailscale subnet router use cases to help you build more flexible and powerful networks.