Tailscale allows remote security camera viewing but I don't know why

This is likely a pretty odd question but… I have HA running as a virtual machine on my QNAP NAS. HA also has Tailscale VPN installed. I learned just enough about HA to view my Reolink security cameras on my home computer monitor. The Reolink cameras work well for me but you cannot install Tailscale on them and therefore no Tailscale IP address is assigned to them. However, when I am away from home, if I turn on the Tailscale app on my iPhone, I can view a live feed of my cameras on my phone’s Reolink app. I don’t understand why though, not that I am complaining. It’s just that the camera’s have not been assigned a Tailscale IP address. I assume this is something that HA is doing by creating some sort of link.

Can anyone explain this to me because I don’t want to mess it up by flipping a switch somewhere that I shouldn’t

Most likely you configured your tailscale client on HA to act as subnet router. This functionality allows ANY of your tailnet devices to see your entire home LAN via internal IP addresses, therefore you can access your cameras. No need to use Tailscale assigned IP addresses - these are only for clients. This is Tailscale functiopnality, not HA.

Hello @DavidJMo,
Your HA VM acts as a Tailscale relay—since it’s on the same LAN as your Reolink cameras, it bridges access through its Tailscale IP. When you connect via Tailscale on your phone, HA forwards requests to the cameras locally. No need for Tailscale on the cameras themselves. Just avoid changing HA’s network or firewall settings that might block LAN routing. MyAarpMedicare

Best Regards,
Kevin London

YES. Thank you for clearing up the mystery. That is exactly what happened.