How to update to the latest Tailscale version?
-
@johnpoz Thanks for the quick reply and the clarification! I will hence wait for the update :)
-
@johnpoz Who would I need to poke to get the right versions updated? Looking at the provided link, only the quarterly versions are stuck on 1.26.1, where latest FreeBSD 12 has the lastest tailscale 1.30.1 release.
Currently exit nodes in pfsense on versions prior to 1.30.1 fully break all browsing on chrome based browsers, so it's quite important for me to get this updated somehow.
-
@zerozshadow I know it’s not advised but I was having problems with the old version and chrome so I switched to the freeBSD repo and upgraded to 1.30.2 and then switched back to the pfSense repo without any issues.
The update has also solved my problems.!
-
@jimbojack Thanks for the suggestion, but I'd rather wait for a propper solution.
I'm a bit disappointed that there was so much talk about the tailscale packing being on pfSense when it came out, to the point we literally have it's own sub forum here. And then it was completely dropped.
I've started a chat with the port maintainer to see if all FreeBSD versions can be upgrade to 1.30.2, since only the i386 version is up to date atm. Lets hope pfSense picks it back up after everything is up to date, so that tailscale can be fully functional again.
-
@zerozshadow which version are you after? I'm using FreeBSD:12:amd64 1.30.2
-
@jimbojack It does seem that, just today, the amd64 version has been updated to 1.30.2
Now I just have to figure out how to upgrade, as i'm not familiar with FreeBSD at all
-
1.32 is out now with support for NextDNS (which I am also using).
Just giving this post another ping with the hope that pfSense will soon update the package. :)
-
@mcding It seems this just isn't going to happen until 23.01
They have been consitently updating the package on thedevelbranch, but none of these upgrade get backported to main.
See https://github.com/pfsense/FreeBSD-ports/commits/devel/security/tailscale -
@johnpoz said in How to update to the latest Tailscale version?:
https://www.freshports.org/security/tailscale/
This appears to have been updated to 1.32.1. Any reason why pfSense is not updating its packages?
I have a Netgate 3100 running ARM and all the packages for FreeBSD-12 appear to be there and up-to-dote? There doesn't appear to be any package there for ARM...who built the tailscale package for pfSense that I am running?
-
@jimbojack Would you mind sharing some instructions on how you changed the repo to FreeBSD update tailscale and then back to pfsense?
Thanks. -
=========
2024 update:
Get the link for the FreeBSD 14 package, SSH into the firewall and run:pkg add -f "URL"
Replace "URL" with the URL of the latest version of the package.
=========
@tariqali
I found how!Disclaimer: It seems to work but do at your own risk!
- Uninstall Tailscale from pfSense. (No configurations will be lost)
- Connect to the firewall with SSH.
- Select option 8.
- Enter "pkg add https://pkg.freebsd.org/FreeBSD:12:amd64/quarterly/All/tailscale-1.32.2.pkg"
(Package Source: https://freebsd.pkgs.org/12/freebsd-amd64/tailscale-1.32.2.pkg.html)
(Netgate guide: https://docs.netgate.com/pfsense/en/latest/recipes/freebsd-pkg-repo.html#installing-packages) - Now Tailscale 1.32.2 will be installed but you won't have any way to control it from the pfSense WebGUI.
- Reinstall Tailscale as you would normally from the pfSense package manager.
- The install process will install everything pfSense need but will skip the Tailscale 1.26.2 installation as a newer version is already installed.
- Go to the Tailscale settings in pfSense and enable it back on.
- Go to the Tailscale webportal and you should see that your pfSense client is now on 1.32.2
-
@mhache
Fantastic, thanks for sharing, I really appreciate it. -
I did the upgrade, did anyone notice who uses NextDNS that you get a ton of hits for
api.bgpview.io? -
@johnpoz There appear to be updated packages available here:
https://freebsd.pkgs.org/12/freebsd-aarch64/tailscale-1.32.2.pkg.html
https://freebsd.pkgs.org/12/freebsd-amd64/tailscale-1.32.2.pkg.htmlIs there anything else holding this up?
-
@wavesound said in How to update to the latest Tailscale version?:
Is there anything else holding this up?
You would have to ask the developers - working on the new versions of pfsense would be my guess. Some pretty big changes coming with the move to new version of freebsd, etc.
It might be possible that the snapshots for 2.7 or 23.01 have updated their package for tailscale??
But looks like @mhache posted a method on getting 1.32.2 via a work around.
-
EXCELLENT! @mhache that worked perfectly!
updated my amd64 install to v1.34.1...
-- check the latest version available on the repository for FreeBSD 12 for your architecture (e.g. amd64) and change the .pkg file name in the "pkg add ...:" command
so... "pkg add ..... /All/tailscale-1.34.1.pkg" worked for meALSO, I was able to use the "Command Prompt" option under the Diagnostics menu instead of using SSH. (while logged in as "admin"). (that's instead of steps 2 & 3 in mhache's instructions
-
Awesome. Thanks @mhache Works on 1.34.2 as well.
https://pkg.freebsd.org/FreeBSD:12:amd64/quarterly/All/tailscale-1.34.2.pkg -
Tailscale binary has been updated in our ports tree. No need to side-load the binary package :)
-
Thank you!
Any chance we'll get 1.36.0 also released today? They made some significant improvements to Wireguard throughput:
https://tailscale.com/blog/throughput-improvements/
https://github.com/tailscale/tailscale/wiki/1.36.0 -
@wavesound Not necessary for the old pfSense versions on FreeBSD12 as those would have to be backported or provided from upstream. Latest upstream is IMHO 1.34.2 as posted above. No .35 or .36 there (yet?). So you have to wait until it drops into the official ports/packages. Besides that, their blog mentions that those changes were to wireguard-go and the linux implementation. So BSD variant will most likely take a bit time.
