# Remote access via Tailscale Wireguard **URL:** \ **Category:** Ignition\ **Tags:** perspective, ignition81\ **Created:** [March 10, 2022, 12:47am UTC](https://forum.inductiveautomation.com/t/remote-access-via-tailscale-wireguard/57041 "2022-03-10T00:47:26Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![AliE](https://avatars.discourse-cdn.com/v4/letter/a/13edae/32.png) [@AliE](https://forum.inductiveautomation.com/u/AliE)\ **Post date:** [March 10, 2022, 12:47am UTC](https://forum.inductiveautomation.com/t/remote-access-via-tailscale-wireguard/57041/1 "2022-03-10T00:47:26Z")
Hi, I’m trying to access a Perspective project remotely. I have installed and configured Tailscale on the server and the remote client. When the VPN connection is up, I can use RDP to remotely connect to the server from the client. I can also use the VPN-assigned IP in file explorer to access the file system on the server. However, when I launch a browser and use the VPN-assigned IP and port 8043, all I get is a line of characters on a blank page. I reached out to Tailscale support and this their response: " That the browser managed to connect to [100.xxx.xxx.xxx], did not timeout nor get a connection error, implies that the connection across the Tailscale network did work. My guess would be that the application listening on port 8043 has been configured to only allow connections from certain addresses, like probably the loopback address and the local LAN. If it is interpreting the connection from a 100.x.y.z Tailscale client as something from the Internet, the weird characters may be the attempt to send an error like 403 (and perhaps the error page is broken)." I don’t remember white-listing IPs on the Gateway. Other computers on the same network can access the SCADA without any issues. ![ts](https://us1.discourse-cdn.com/inductiveautomation/original/3X/d/d/ddbf094cce1bd257de4ea148ceb6f9ccdf4358c2.jpeg) ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [March 10, 2022, 1:03am UTC](https://forum.inductiveautomation.com/t/remote-access-via-tailscale-wireguard/57041/2 "2022-03-10T01:03:07Z")
Hmm. There’s no whitelist in Ignition itself. Do you have Python on that server? Can you run a simple HTTP server and see if it’s accessible from the same remote client? Python 2: ```auto python -m SimpleHTTPServer ``` Python 3: ```auto python -m http.server ``` You should then be able to reach the server at `remoteip:8000` from the client and it will have a directory content listing of whatever directory you ran it in. ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [March 10, 2022, 1:05am UTC](https://forum.inductiveautomation.com/t/remote-access-via-tailscale-wireguard/57041/3 "2022-03-10T01:05:33Z")
Another possibility is a problem with your SSL/TLS setup or certificates, or maybe a nosy MITM appliance or proxy. The “lock” icon in your browser looks unhappy about something… ---
**Author:** ![AliE](https://avatars.discourse-cdn.com/v4/letter/a/13edae/32.png) [@AliE](https://forum.inductiveautomation.com/u/AliE)\ **Post date:** [March 10, 2022, 4:30pm UTC](https://forum.inductiveautomation.com/t/remote-access-via-tailscale-wireguard/57041/4 "2022-03-10T16:30:55Z")
I can access the python server remotely from the client. ![pserver](https://us1.discourse-cdn.com/inductiveautomation/original/3X/5/a/5aaecc647794e1989856e6f3f3107059fdf27025.jpeg) ---
**Author:** ![AliE](https://avatars.discourse-cdn.com/v4/letter/a/13edae/32.png) [@AliE](https://forum.inductiveautomation.com/u/AliE)\ **Post date:** [March 10, 2022, 4:41pm UTC](https://forum.inductiveautomation.com/t/remote-access-via-tailscale-wireguard/57041/5 "2022-03-10T16:41:07Z")
I used the self-signed certificate option in the Gateway to create the certificate. ![pserver2](https://us1.discourse-cdn.com/inductiveautomation/original/3X/3/0/30abc5d69fc94dcc85d6e1bd61cdeb5a915edf91.jpeg) ![pserver3](https://us1.discourse-cdn.com/inductiveautomation/original/3X/8/a/8a97412d7d78c211e1210812e3fc6be117171e73.jpeg) ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [March 10, 2022, 4:42pm UTC](https://forum.inductiveautomation.com/t/remote-access-via-tailscale-wireguard/57041/6 "2022-03-10T16:42:59Z")
Why is the URL in your browser using HTTP and not HTTPS? ---
**Author:** ![AliE](https://avatars.discourse-cdn.com/v4/letter/a/13edae/32.png) [@AliE](https://forum.inductiveautomation.com/u/AliE)\ **Post date:** [March 10, 2022, 4:53pm UTC](https://forum.inductiveautomation.com/t/remote-access-via-tailscale-wireguard/57041/7 "2022-03-10T16:53:35Z")
I never use HTTPS:// explicitly and let the browser take care of it. I added the prefix and voila, it’s working now 😀 Thank you very much for your help. ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [March 10, 2022, 4:54pm UTC](https://forum.inductiveautomation.com/t/remote-access-via-tailscale-wireguard/57041/8 "2022-03-10T16:54:35Z")
That works when you’re actually talking directly to the web server, but you’re talking to your VPN’s client endpoint here or something, which is dutifully talking to Ignition on the HTTPS port, but serving you that traffic over HTTP.