Would love to figure this out too. When I was using Wireguard it was as simple as adding a Firewall rule, the "Tailscale" tab within the firewall section doesn't appear to work the same way unfortunately.

@Klaus2314 I had another case today. My appliance as hot as a frying pan when I came in this morning and Tailscale was hung. Logs show the temp went up at 3AM to almost 100°C. 3AM is usually the time when my ISP does a short dis/reconnect. Any idea how to fix this other than disabling Tailscale?

@jonsed, very sorry I can not help with this but I'm running into the exact same issue. I would also like to get to the Tailscale 100. addresses from machines behind my pfsense router, pfsense can get to them from a shell just fine but none of the edge clients. Good luck.

Hello, I would also like to try to use pfsense to connect systems behind it and itself to an exitnode for internet access. Is this possible somehow? I only found this post but assigning the interface broke my pfsense, since on every reboot it will reassign the interfaces now, since it does not find tailscale0 when booting. Assigning the IF is exactly what NOT to do according to: https://youtu.be/Fg_jIPVcioY?t=1182 Where can I create a Feature Request for this, since it would be crucial for us to use tailscale on pfSense?

@m7infratec Silly question maybe but does Site B have correct routes and NAT rules to Site A? In other words are the configs a mirror of each other?

@dobby_ of course this shouldn’t be a replacement. The current tailscale module already has support for using a headscale server instead of a tailscale server. What’s missing is the ability to host a tailscale server on a pfSense box.

@twcory I got the same issue. Wondering is this is related to free version that just allow 1 subnet? The firewall rules interface don't have any function, I had establish some tunnels and no rules on that interface and I can access the network behind pfsense(home office). Regards!!!

@rcoleman-netgate Not sure what you are suggesting? All of the other packages show up fine on my appliance. It looks like it has been pulled for the SG-3100 for now after reviewing Redmine: https://redmine.pfsense.org/issues/14064#note-3

@wavesound You're correct, My mistake, I guess I hadn't applied the patch mentioned here --> https://redmine.pfsense.org/issues/13963#note-5 Once I did this, reboot, added Tailscale from the package manager and it worked.

@chudak start tailscale with: sudo tailscale up --accept-routes otherwise, tailscale is behaving as designed as a point-to-point VPN and the endpoints can only see each other