tailscale: health check: chain 'ts-input' does not exist

What is the issue?

Since recently when I run tailscale status I get this message:

# Health check:
#     - router: checking for [-j ts-input] in filter/INPUT: running [/usr/sbin/iptables -t filter -C INPUT -j ts-input --wait]: exit status 2: iptables v1.8.7 (nf_tables): Chain 'ts-input' does not exist

What could be the reason?

Steps to reproduce

Run tailscale status, view Healthcheck

Are there any recent changes that introduced the issue?

Not that Im aware of

OS

Linux

OS version

Ubuntu 22.04

Tailscale version

1.26.1

Bug report

BUG-01f173494e22c373b404d5d60dd4e2ee695746f2882b0e5d821b48484d022dba-20220702190447Z-4aa8548329f6976f

About this issue

Original URL
State: open
Created 2 years ago
Reactions: 2
Comments: 16 (5 by maintainers)

Most upvoted comments

For anyone else who experiences the issue: we need a tailscale bugreport Just knowing that someone believes they are running into the same problem does not help to resolve it.

you need a running tailscaled service for this to work buddy

josgraha on Nov 29, 2023

I have this problem on Ubuntu 22.04 WSL as well. journalctl -xeu tailscaled shows:

health("router"): error: adding [-j ts-input] in filter/INPUT: running [/usr/sbin/iptables -t filter -I INPUT 1 -j ts-input --wait]: exit status 4: iptables v1.8.7 (nf_tables):  RULE_INSERT failed (No such file or directory): rule in chain INPUT
control: controlclient: restarting map request for "router" health change to new state: adding [-j ts-input] in filter/INPUT: running [/usr/sbin/iptables -t filter -I INPUT 1 -j ts-input --wait]: exit status 4: iptables v1.8.7 (nf_tables):  RULE_INSERT failed (No such file or directory): rule in chain INPUT

danielphan2003 on Sep 12, 2022