Jailbroken Kindles get proxy and TUN modes for Tailscale via community code

Open-source developers have significantly expanded what Tailscale can do on jailbroken Kindles. Earlier community builds got a Kindle onto your tailnet and let you SSH into it, but they couldn’t route app traffic because Tailscale is forced into userspace mode and can’t touch the device’s TUN routing layer. That meant apps like KOReader couldn’t actually reach other tailnet nodes. An updated KUAL app from greywolf1499, building on Mitanshu Sukhwani’s implementation, works around this with a proxy mode: tailscaled listens on port 1055, and you point apps at 127.0.0.1:1055 (SOCKS5) or :1056 (HTTP CONNECT) to route connections through the tailnet. It also enables Tailscale SSH by default and adds a full TUN mode that works at the device level on some Kindle models.

The payoff is practical self-hosting reach from an e-reader: KOReader can now pull from Calibre/OPDS, Wallabag, Audiobookshelf, or a self-hosted RSS feed, and sync reading progress across devices. A separate Tailscale plugin for KOReader offers the same proxy interfaces without exposing the device on the tailnet, and notably extends support to Kobo and PocketBook readers, broadening the effort beyond Amazon hardware.

The significance is less about the Kindle specifically and more about how far community tinkering can push a locked-down, underpowered consumer device into a legitimate thin client on a private mesh network. It remains unofficial, model-dependent, and fiddly to set up—the author’s own 11th-gen Kindle wouldn’t cooperate with the plugin—so this stays firmly in enthusiast territory rather than a supported feature.