How to update to the latest Tailscale version?

elvisimprsntr

@brinkmann I personally am not running 2.8.0 yet, but yes.

smurph82

Over on https://www.freshports.org/security/tailscale. The chart that had the different version is gone, as of 2025-06-26. Also with pfSense CE moving to FreeBSD 15, I guess the repos are trying to consolidate. However, I used the chart to pick up the url to install Tailscale from. The last working url I had was https://pkg.freebsd.org/FreeBSD:15:amd64/latest/All/tailscale-1.82.5.pkg, but simply changing 1.82.5 to 1.84.2 is no longer working. Has anyone been able to upgrade to 1.84.2 and if so what was your url. Thank you.

dsp3

@smurph82
pkg add -f https://pkg.freebsd.org/FreeBSD:15:amd64/latest/All/tailscale-1.84.0.pkg
Latest

veddy254

@smurph82 I just upgraded to PfSense CE 2.8.0 and made sure to reupdate the Tailscale package myself. Here's the command I used to update: pkg add -f https://pkg.freebsd.org/FreeBSD:15:amd64/latest/All/tailscale-1.84.2.pkg
It still gives the kernel version mismatch but it's still fine to ignore.

elvisimprsntr

Anyone else get the following notification from Tailscale?

And what, if anything, do we need to do?

Screenshot 2025-07-09 at 1.15.45 PM.png

TommyMoo

@elvisimprsntr I got this mail too, an hour ago, also dont know, what we have to do right now...didnt had time yet to read full instructions and what consequences it will bring for us

veddy254

@elvisimprsntr they're updating the backend control structure to use new IP addresses. If you use tailscale's own servers for management instead of a self-hosted Headscale instance, you just need to make sure that your pfsense firewall does not block connections to those IP ranges. By default, both ranges would be allowed so unless you've added restrictive rules, you don't need to do anything. I'd still recommend verifying that they're not blocked first though.

TommyMoo

@veddy254 Thank you, got it

elvisimprsntr

@veddy254

Thanks

ping 192.200.0.1
PING 192.200.0.1 (192.200.0.1): 56 data bytes
64 bytes from 192.200.0.1: icmp_seq=0 ttl=45 time=120.432 ms
64 bytes from 192.200.0.1: icmp_seq=1 ttl=45 time=129.154 ms
64 bytes from 192.200.0.1: icmp_seq=2 ttl=45 time=121.636 ms
64 bytes from 192.200.0.1: icmp_seq=3 ttl=45 time=132.175 ms

elvisimprsntr

Updated CE 2.7.2 to 1.84.2_1

Changelog

pkg add -f https://pkg.freebsd.org/FreeBSD:14:amd64/latest/All/tailscale-1.84.2_1.pkg

Freshports

TommyMoo

@elvisimprsntr said in How to update to the latest Tailscale version?:

pkg add -f https://pkg.freebsd.org/FreeBSD:14:amd64/latest/All/tailscale-1.84.2_1.pkg

Thanks!

luckman212

For 25.07 RC, this worked for me (run sh first)

[25.07-RC][root@r1.lan]/root: sh
# export IGNORE_OSVERSION=yes
# pkg add https://pkg.freebsd.org/FreeBSD:15:amd64/latest/All/tailscale-1.84.2.pkg
# service tailscaled restart
# tailscale up

# tailscale version
1.84.2
  go version: go1.24.4
# tailscaled -version
1.84.2
  go version: go1.24.4

elvisimprsntr

Updated CE 2.7.2 to 1.86.0, but I see there is already a 1.86.2. So you might want to hold off.

Note: Tailscale halted the rollout of version 1.86.0 for macOS on July 25, 2025, and for all other platforms on July 28, 2025, due to multiple regressions.

Changelog

pkg add -f https://pkg.freebsd.org/FreeBSD:14:amd64/quarterly/All/tailscale-1.86.0.pkg

Freshports

TommyMoo

@elvisimprsntr Thanks, just updated, works fine!

elvisimprsntr

Updated CE 2.7.2 to 1.86.2

Changelog

pkg add -f https://pkg.freebsd.org/FreeBSD:14:amd64/quarterly/All/tailscale-1.86.2.pkg

Freshports

lbm_

Any ideas to why I get this error? Im running pfsense CE 2.8.0-RELEASE (amd64)

pkg add https://pkg.freebsd.org/FreeBSD:15:amd64/latest/All/tailscale-1.84.2_1.pkg
pkg: An error occured while fetching package

veddy254

@lbm_ said in How to update to the latest Tailscale version?:

https://pkg.freebsd.org/FreeBSD:15:amd64/latest/All/tailscale-1.84.2_1.pkg
pkg: An error occured while fetching package

I would recommend verifying the DNS settings in PfSense and verifying date/time is correct. Barring that, try again later and see if it still fails. I was able to successfully run the command on my 2.8.0 install (I didn't install it because I've already installed it) so it seems localized.

lbm_

@veddy254 said in How to update to the latest Tailscale version?:

@lbm_ said in How to update to the latest Tailscale version?:

https://pkg.freebsd.org/FreeBSD:15:amd64/latest/All/tailscale-1.84.2_1.pkg
pkg: An error occured while fetching package

I would recommend verifying the DNS settings in PfSense and verifying date/time is correct. Barring that, try again later and see if it still fails. I was able to successfully run the command on my 2.8.0 install (I didn't install it because I've already installed it) so it seems localized.

Interesting. After I (reinstalled) tailscale the /etc/resolv.conf was overwritten. So I just readded the DNS entries in the Pfsense WebUI, and not it worked.

pkg add -f https://pkg.freebsd.org/FreeBSD:15:amd64/latest/All/tailscale-1.84.2_1.pkg
Fetching tailscale-1.84.2_1.pkg: 100%   11 MiB  11.9MB/s    00:01
Installing tailscale-1.84.2_1...
Newer FreeBSD version for package tailscale:
To ignore this error set IGNORE_OSVERSION=yes
- package: 1500054
- running kernel: 1500029
Ignore the mismatch and continue? [y/N]: y
package tailscale is already installed, forced install
Extracting tailscale-1.84.2_1: 100%

And

pkg info tailscale
tailscale-1.84.2_1
Name           : tailscale
Version        : 1.84.2_1
Installed on   : Wed Aug  6 09:17:23 2025 CEST
Origin         : security/tailscale
Architecture   : FreeBSD:15:amd64
Prefix         : /usr/local
Categories     : security net-vpn
Licenses       : BSD3CLAUSE
Maintainer     : ashish@FreeBSD.org
WWW            : https://tailscale.com/
Comment        : Mesh VPN that makes it easy to connect your devices
Shared Libs required:
	libthr.so.3
	libc.so.7
Annotations    :
	FreeBSD_version: 1500054
	build_timestamp: 2025-07-30T02:26:16+0000
	built_by       : poudriere-git-3.4.2-12-g74a54a88
	port_checkout_unclean: no
	port_git_hash  : 275975297bc
	ports_top_checkout_unclean: no
	ports_top_git_hash: 0cd2c078c1e
Flat size      : 35.4MiB
Description    :
Tailscale is a mesh VPN alternative, based on WireGuard, that connects your
computers, databases, and services together securely without any proxies.

TommyMoo

Hello everybody,
I am on CE 2.8.0 Release, and installed Tailscale 1.86.2 … I saw to late, that this pkg link ->
pkg add -f https://pkg.freebsd.org/FreeBSD:14:amd64/quarterly/All/tailscale-1.86.2.pkg
is for FreeBSD:14

So far, my mistake, but I have not found any problem with this version 1.8.6.2 for FreeBSD:14 on my X86 pfsense CE 2.8.0 it runs perfect, without any problems, since 4 days.

Logged into pfsense, and executet the followining commands:

sh

#export IGNORE_OSVERSION=yes
#pkg add -f https://pkg.freebsd.org/FreeBSD:14:amd64/quarterly/All/tailscale-1.86.2.pkg
#service tailscaled restart
#tailscale up

#pkg info tailscale
tailscale-1.86.2
Name : tailscale
Version : 1.86.2
Installed on : Sat Aug 2 00:39:41 2025 CEST
Origin : security/tailscale
Architecture : FreeBSD:14:amd64
Prefix : /usr/local
Categories : security net-vpn
Licenses : BSD3CLAUSE
Maintainer : ashish@FreeBSD.org
WWW : https://tailscale.com/
Comment : Mesh VPN that makes it easy to connect your devices
Shared Libs required:
libthr.so.3
libc.so.7
Annotations :
FreeBSD_version: 1402000
build_timestamp: 2025-07-31T01:06:05+0000
built_by : poudriere-git-3.4.3
port_checkout_unclean: no
port_git_hash : 412b8fcb2
ports_top_checkout_unclean: no
ports_top_git_hash: 2a841e26c
Flat size : 35.5MiB
Description :
Tailscale is a mesh VPN alternative, based on WireGuard, that connects your
computers, databases, and services together securely without any proxies.

#tailscale version
1.86.2
long version: 1.86.2
go version: go1.24.4

——————
I cant take responsibilty, cause I took by accident the FreeBSD:14 version, that is on v.1.86.2, dont want give a bad example, or cause anyone trouble, with what I did, I only can say, it works for my X86 Box pfsense 2.8.0 just GREAT & stable, no connections issues at all, neither found any other issue.

veddy254

@TommyMoo While it may work with the FreeBSD 14 version, I would not recommend running it long-term as any future updates to PfSense and the underlying FreeBSD 15 version running underneath it can and likely will at some point break. I would still recommend downgrading to 1.84.2_1 until the FreeBSD 15 version gets updated to 1.86.2. Not to mention that none of the changes between 1.84.2_1 and 1.86.2 really would affect a PfSense Node and would only apply to other clients.