In a standard Tailscale ARC setup, you’d install Tailscale directly on your RoonServer machine and on your phone. However, RoonOS machines like Nucleus and ROCK can’t support third-party installations. It’s impossible to install Tailscale directly onto your ROCK or Nucleus.
Instead, the workaround is to set up a Tailscale subnet router on another computer in your network. By advertising a network path to the Tailscale-connected machine, you can then tether your Nucleus/ROCK to the Tailscale subnet you’ve created, allowing ARC to see your Nucleus/ROCK through Tailscale. To Tailscale, this second computer acts like a router, connecting your RoonOS machine to your own Tailscale network.
STEP ONE
Install Tailscale on a Mac, Windows, Linux computer, or an Apple TV.
If you’re new to Tailscale, you’ll first need to create a free Tailscale account.
Next, you’ll need to set up Tailscale on another computer connected to the internet using the same router (and the same subnet) as your Nucleus or ROCK. This can be a MacOS, Windows, or Linux computer, a Synology NAS, or even an Apple TV.
See Tailscale’s installation page here and click the link for your specific operating system..
STEP TWO
Install Tailscale on iOS/Android
On the phone you use for ARC, download the Tailscale app and install it.
iOS: https://tailscale.com/download/ios
Android: https://tailscale.com/download/android
STEP THREE
Create a Single Tailscale Subnet
Tailscale will automatically generate an IP address for each device on which you’ve installed the app. You’ll need to verify that these IP addresses are in the same subnet range.
On the second computer you've just used to instal Tailscale, open the Tailscale Administration Settings page in Tailscale → Settings → Accounts → Administration or by visiting this URL and logging in: https://login.tailscale.com/admin/machines
Next, scroll down to where you see your devices listed under the Machines tab.
Check the IP addresses listed. The numbers should match up through the third period.
For instance:
100.127.106.129 and 100.127.106.127 are on the same Tailscale subnet. These two machines can connect from anywhere, even on separate WiFi and cellular networks.
100.127.106.129 and 100.124.124.128 are on separate Tailscale subnets and will not connect unless they share a separate internet connection outside Tailscale.
If the IP addresses for your RoonServer machine and phone are on different subnets, then click the three dots on the right of the table and select “Edit Machine IPv4” for either device.
Copy and paste the IP address from the other machine and then change the last digit.
Now they should have matching subnet addresses. Now, your IPs should look like this:
STEP FOUR
Set up a Subnet Router for your RoonOS Machine to Connect
You've now successfully configured a Tailscale subnet that includes your phone and a second computer on your home network. Next, you need to point RoonServer at this second computer so it can reach the Tailscale Subnet, too.
See below for a step-by-step guide, complete with screenshots, for each operating system. If you have questions about setting up a subnet, we recommend engaging Tailscale support directly.
STEP FIVE
Test your Tailscale Subnet Router and connect RoonServer to ARC.
Restart RoonServer and ARC on your ROCK/Nucleus and your phone respectively.
Disable the port forward in Roon → Settings → ARC by entering “0” in the port value. If 0 is not available, try entering any integer that causes a “Not Ready” status
If you haven’t performed your initial library sync with ARC, we recommend syncing for the first time using a WiFi connection. Next, turn on cellular data only (disable WiFi) and test the Tailscale connection.
If you’re still having difficulty using ARC with Tailscale, please post on Roon Community in the #tinkering category, where users are accumulating Tailscale/ARC expertise.
Community Resources:
As of this writing, the best source of knowledge on Community for subnet routing in Tailscale lives here: https://community.roonlabs.com/t/tailscale-implementation-on-rock-nuc-to-circumnavigate-isp-cgnat-for-arc/215356