Client
Last validated:
Coordination server reports an issue
Coordination server issues can stem from connectivity problems. Check your network, firewall, or restart the Tailscale client.
Could not apply configuration
Envknob errors stem from misconfigurations or conflicts. Fixing them involves reviewing settings and restarting the client.
Docker with stateful filtering
Docker's firewall may conflict with Tailscale's stateful filtering. Adjust iptables or use Tailscale CLI to restore container connectivity.
Encrypted connection failed
The Tailscale client could not establish a secure, encrypted connection with a peer or control plane because the required cryptographic handshake failed.
Invalid packet filter
The coordination server may send an unsafe packet filter. Check your tailnet policy and firewall rules, then restart the Tailscale client to resolve the issue.
Linux DNS configuration issue
The client can't apply DNS settings on Linux. Enable systemd-resolved, run tailscaled as root, or manually configure DNS.
Local log misconfiguration
The Tailscale client cannot initialize local connectivity logging due to a misconfigured or inaccessible log destination, limiting debug visibility.
MagicSock function not running
A core MagicSock function failed. You can restart or update the client, check UDP firewall settings, or reinstall to restore connectivity.
Network down
The Tailscale client detects no network. Check your internet connection and restart the client to restore connectivity.
Network map response timeout
The Tailscale client did not receive a network map from the control plane in time, preventing it from updating network state and potentially affecting connectivity.
No home relay server
The client can't connect to any DERP relay. Check internet, restart the client, or review firewall settings to restore fallback connectivity.
Out of sync
The client can't sync with the coordination server. Check internet, firewall, or device restrictions to maintain peer connectivity.
Relay server unavailable
The client can't reach a DERP relay server. Check your internet, restart the client, or review firewall settings to restore connectivity.
Security update available
Notification of a Tailscale security update. To stay secure, install the update promptly using the client UI, app store, or CLI.
Tailscale blocked by Screen Time
macOS Screen Time is blocking Tailscale. Disable the restriction in System Settings to restore proper client functionality.
Tailscale SSH and SELinux
SELinux is enforcing security rules that may block Tailscale's built-in SSH, since it runs inside the tailscaled process instead of the system SSH daemon.
Update available
Notification of a new Tailscale version. Update using the client UI, app store, or CLI to get the latest features and improvements.
Using an unstable version
Unstable Tailscale versions are for testing. They're safe if intentional, but not recommended for production use.
Windows network configuration failed
The Tailscale client failed to set required Windows network settings for its adapter, which can block routing, DNS, or overall connectivity.