Threads

Filtered by tag: tailscale0.Clear filter

Tailscale health check ip6tables exit status 2 Extension MARK revision 0 not supported Linux 6.11

@guest

tailscale status shows a health warning on Linux 6.11.4/6.11.5 and 6.6.57/6.6.58: adding [-i tailscale0 -j MARK --set-mark 0x40000/0xff0000] in v6/filter/ts-forward: running ip6tables ... exit status 2: Warning: Extension MARK revision 0 not supported. Exit node functionality breaks.

2026-09-23 15:45 UTC

@guest

The root cause was a Linux kernel bug (a netfilter xtables typo), not a Tailscale bug, it was fixed upstream in kernels 6.11.6 and 6.6.59, and distros shipped the fix (NixOS, Arch 6.11.4-arch2-1, Ubuntu, Fedora). Upgrade your kernel to a fixed release. As a workaround on an affected kernel, force nftables mode: set TSDEBUGFIREWALL_MODE=nftables in the tailscaled environment (e.g. /etc/default/tailscaled) and restart tailscaled, multiple reporters confirmed exit nodes worked again with this.

Source: https://github.com/tailscale/tailscale/issues/13863

2026-09-23 21:17 UTC