How to update to the latest Tailscale version?

zeroZshadow

@mcding It seems this just isn't going to happen until 23.01
They have been consitently updating the package on the devel branch, but none of these upgrade get backported to main.
See https://github.com/pfsense/FreeBSD-ports/commits/devel/security/tailscale

wavesound

@johnpoz said in How to update to the latest Tailscale version?:

https://www.freshports.org/security/tailscale/

This appears to have been updated to 1.32.1. Any reason why pfSense is not updating its packages?

I have a Netgate 3100 running ARM and all the packages for FreeBSD-12 appear to be there and up-to-dote? There doesn't appear to be any package there for ARM...who built the tailscale package for pfSense that I am running?

tariqali

@jimbojack Would you mind sharing some instructions on how you changed the repo to FreeBSD update tailscale and then back to pfsense?
Thanks.

mhache

=========

2024 update:
Get the link for the FreeBSD 14 package, SSH into the firewall and run:

pkg add -f "URL"

Replace "URL" with the URL of the latest version of the package.

=========

@tariqali
I found how!

Disclaimer: It seems to work but do at your own risk!

Uninstall Tailscale from pfSense. (No configurations will be lost)
Connect to the firewall with SSH.
Select option 8.
Enter "pkg add https://pkg.freebsd.org/FreeBSD:12:amd64/quarterly/All/tailscale-1.32.2.pkg"
(Package Source: https://freebsd.pkgs.org/12/freebsd-amd64/tailscale-1.32.2.pkg.html)
(Netgate guide: https://docs.netgate.com/pfsense/en/latest/recipes/freebsd-pkg-repo.html#installing-packages)
Now Tailscale 1.32.2 will be installed but you won't have any way to control it from the pfSense WebGUI.
Reinstall Tailscale as you would normally from the pfSense package manager.
The install process will install everything pfSense need but will skip the Tailscale 1.26.2 installation as a newer version is already installed.
Go to the Tailscale settings in pfSense and enable it back on.
Go to the Tailscale webportal and you should see that your pfSense client is now on 1.32.2

tariqali

@mhache
Fantastic, thanks for sharing, I really appreciate it.

mrpink57

I did the upgrade, did anyone notice who uses NextDNS that you get a ton of hits for api.bgpview.io?

wavesound

@johnpoz There appear to be updated packages available here:

https://freebsd.pkgs.org/12/freebsd-aarch64/tailscale-1.32.2.pkg.html
https://freebsd.pkgs.org/12/freebsd-amd64/tailscale-1.32.2.pkg.html

Is there anything else holding this up?

johnpoz

@wavesound said in How to update to the latest Tailscale version?:

Is there anything else holding this up?

You would have to ask the developers - working on the new versions of pfsense would be my guess. Some pretty big changes coming with the move to new version of freebsd, etc.

It might be possible that the snapshots for 2.7 or 23.01 have updated their package for tailscale??

But looks like @mhache posted a method on getting 1.32.2 via a work around.

ricblue

EXCELLENT! @mhache that worked perfectly!

updated my amd64 install to v1.34.1...
-- check the latest version available on the repository for FreeBSD 12 for your architecture (e.g. amd64) and change the .pkg file name in the "pkg add ...:" command
so... "pkg add ..... /All/tailscale-1.34.1.pkg" worked for me

ALSO, I was able to use the "Command Prompt" option under the Diagnostics menu instead of using SSH. (while logged in as "admin"). (that's instead of steps 2 & 3 in mhache's instructions

lbm_

Awesome. Thanks @mhache Works on 1.34.2 as well.
https://pkg.freebsd.org/FreeBSD:12:amd64/quarterly/All/tailscale-1.34.2.pkg

cmcdonald

Tailscale binary has been updated in our ports tree. No need to side-load the binary package :)

wavesound

@cmcdonald

Thank you!

Any chance we'll get 1.36.0 also released today? They made some significant improvements to Wireguard throughput:

https://tailscale.com/blog/throughput-improvements/
https://github.com/tailscale/tailscale/wiki/1.36.0

JeGr

@wavesound Not necessary for the old pfSense versions on FreeBSD12 as those would have to be backported or provided from upstream. Latest upstream is IMHO 1.34.2 as posted above. No .35 or .36 there (yet?). So you have to wait until it drops into the official ports/packages. Besides that, their blog mentions that those changes were to wireguard-go and the linux implementation. So BSD variant will most likely take a bit time.

cmcdonald

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=269149

I submitted a patch upstream fro 1.36.0 It is now available on pfSense 2.7 snapshots, will backport to current stable for CE and Plus today.

JeGr

@cmcdonald That's only for CE-dev, right? Can't see that on plus-beta currently, but I'm also not seeing pfBlocker's 3.2.0 on there either, so assuming the packages for plus are a bit delayed currently?

Cheers for the quick upgrade!
\jens

cmcdonald

@jegr Plus BETA is frozen until we release RC soon()

2.6.0 and 22.05 now have the latest tailscale binary as above.

lbm_

@cmcdonald
This is awesome!

wavesound

@cmcdonald Just a quick heads up. The package update process always seems to fail on my Netgate 3100. I have to re-install the package after the update to get Tailscale working.

McDing

@wavesound I just update mine to 1.36 on an SG-4860 and everything went fine! I'm glad we're finally catching up of the official releases :)

tariqali

I'm still showing 1.32.2
pfSense-pkg-Tailscale 0.1.1_1 pfSense package Tailscale
tailscale 1.32.2 Mesh VPN that makes it easy to connect your devices

I updated to the latest version, and even tried removing and reinstalling the package. Shouldn't it be at 1.36?

I'm on 22.05 of pfsense on a 6100