Tailscale VPN Enhancements in Zyxel Firmware 1.35: Improved UI Clarity and Routing Flow Integration

Zyxel_Lynn

Firmware version 1.35 brings small but meaningful improvements to the Tailscale VPN integration in Zyxel firewalls, focusing on better user clarity and network routing transparency.

Improved Labeling for Better Understanding

Previously, in the Tailscale VPN interface, the button used to disable the service and remove authentication was labeled “Log Out.” However, this label was misleading in terms of what the button actually did.

What Happened When You Clicked "Log Out"?

When users clicked the “Log Out” button, the following occurred:

1. The entire Tailscale VPN service was disabled — not just the user account.
2. The firewall was disconnected from the Tailscale VPN network.
3. The authentication key was deleted, preventing reconnection without re-authentication.

Because this action goes far beyond a simple logout, the label “Log Out” did not accurately reflect its impact.

New Label: "Revoke"

To make this clearer, firmware 1.35 changes the button label from “Log Out” to “Revoke”. This updated terminology better communicates the action’s scope, ensuring users understand that they are revoking access entirely, not just ending a session.

Note: This is purely a UI text change and does not affect the underlying functionality.

Tailscale VPN Routing Order Now Visible

Another promised update—previously previewed in Zyxel's Zykeb sessions—is now live: the Tailscale VPN routing order has been formally added to the routing flow interface.

• It is now clearly shown where Tailscale VPN fits in the routing logic.
• Specifically, it appears between Nebula static routes and Layer 3 routes like 1.1.1.1 and 8.8.8.8.
• This confirms that Tailscale VPN routes are considered part of the static route family, and they occupy the lowest order within that group.

This addition enhances visibility and helps network administrators understand how Tailscale VPN integrates with existing routing priorities.