https://cybertoolchain.io/tools/tailscale New releases and features in tailscale, tracked by The Cyber Toolchain. en Fri, 30 Oct 2026 07:46:46 GMT https://tailscale.com/changelog https://tailscale.com/changelog Fri, 30 Oct 2026 07:46:46 GMT tailscale: Configure route selection policy in the admin console with the new Route selection setting, replacing the Regional Routing toggle, to control how the tailnet⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • View posture assertion details per machine — including each machine's value, pass/fail status, and a count of policy file rules that require a given posture — on the postures page of the admin console. • MacBooks with a notched display now show a notification window when the Tailscale icon is hidden behind the notch. Breaking changes: • The `split_dns` field in the `tailscale_dns_configuration` Terraform resource is now defined as a set, not a list, which may require updates to existing configurations. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://tailscale.com/changelog/#2026-10-27-service https://tailscale.com/changelog/#2026-10-27-service Tue, 27 Oct 2026 00:00:00 GMT Tailscale OAuth Apps for Device Provisioning are now generally available via the API.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Enables creation and management of OAuth Apps for Device Provisioning via the Tailscale API (now GA).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://tailscale.com/changelog https://tailscale.com/changelog Tue, 20 Oct 2026 07:54:36 GMT Tailscale Kubernetes operator gains PeerRelay custom UDP ports, image pull secrets for all ServiceAccounts, and per-tailnet Let's Encrypt account keys.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `TS_SERVE_ALLOW_ALL_INTERFACES` environment variable set by the operator on proxies for Ingress resources annotated with `tailscale.com/experimental-forward-cluster-traffic-via-ingress`, keeping those Ingress resources reachable from inside the cluster after Tailscale Serve on Linux was scoped to the Tailscale interface only.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `nameOverride` and `fullnameOverride` Helm values to customize the names of resources the operator installs. • Adds custom UDP port support for `PeerRelay` resources so peers that cannot reach the relay at its load balancer address have an alternative path. • Supports sharing a single persistent Let's Encrypt account key per tailnet to keep certificate renewals exempt from Let's Encrypt rate limits. • Applies image pull secrets to every ServiceAccount the operator creates, not only the operator ServiceAccount. • Rolling updates of egress proxies now wait for each new pod to route traffic to all of its egress Services before proceeding to the next pod. • `PeerRelay` resources now use the coordination server URL configured for the operator. • `PeerRelay` replicas re-authenticate after losing their login, such as when the device is deleted or its auth key expires. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://tailscale.com/changelog/#2026-10-19-service https://tailscale.com/changelog/#2026-10-19-service Mon, 19 Oct 2026 00:00:00 GMT Tailscale adds MagicRoute (beta) for redundant-path selection across subnet routers, app connectors, exit nodes, and Service hosts.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds MagicRoute (beta) to automatically choose between redundant subnet routers, app connectors, exit nodes, and Tailscale Service hosts for resilient routing.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Replaces the Regional Routing toggle in the admin console with a new 'Route selection' configuration surface for tailnet-wide route policy. Breaking changes: • The Regional Routing toggle in the admin console is removed and replaced by the 'Route selection' configuration; existing setups relying on that toggle must be reconfigured under the new 'Route selection' surface. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://tailscale.com/changelog/#2026-10-13-service https://tailscale.com/changelog/#2026-10-13-service Tue, 13 Oct 2026 00:00:00 GMT Tailscale Kubernetes Operator v1.104.1 adds shared Let's Encrypt account keys, custom PeerRelay UDP ports, and DNS image pull secrets.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `TS_SERVE_ALLOW_ALL_INTERFACES` environment variable set automatically on proxies for Ingress resources annotated with `tailscale.com/experimental-forward-cluster-traffic-via-ingress`, keeping them reachable from inside the cluster after Tailscale Serve on Linux narrowed its listening interface.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `nameOverride` and `fullnameOverride` values to the operator Helm chart to customize the names of installed resources. • Ingress ProxyGroups can now share a single persistent Let's Encrypt account key per tailnet to maintain rate-limit exemptions across certificate renewals. • PeerRelay resources support a custom UDP port and additional static endpoints for peers that cannot reach the relay at its load balancer address. • The `DNSConfig` custom resource supports image pull secrets for nameserver pods. • The operator Helm chart now applies image pull secrets to every `ServiceAccount` it creates, not only the operator `ServiceAccount`. • Rolling updates of egress ProxyGroups now wait for each new pod to route traffic to all of its egress Services before advancing to the next pod. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://tailscale.com/changelog/#2026-10-07-client https://tailscale.com/changelog/#2026-10-07-client Wed, 07 Oct 2026 00:00:00 GMT Tailscale v1.104.1 adds client-side netmap caching, device pinning, Taildrop URL/text support, and new macOS/iOS app capabilities across platforms.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `DisableReauthWindow` system policy on macOS to block the re-authentication window from appearing when a user's key has expired.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds client-side netmap caching on Linux, Windows, and macOS to improve start-up speed and maintain connectivity when the Tailscale control plane is unreachable. • Adds Tailscale Services and Tailscale PAM Services to the macOS app window. • Adds the ability to pin Devices, Exit Nodes, and Services to the top of their respective lists in the macOS app window, with pins also appearing in a dedicated Pinned page. • Adds Tailscale iOS widgets to macOS Tahoe 26 and later. • Extends Taildrop on macOS, iOS, and Android to support URLs and text selections in addition to files. • Adds fast user switching in the iOS share sheet. • Adds the ability to disable remote client logging via the Bug Report menu on iOS and tvOS. • Adds device pinning to iOS, tvOS, and Android. • Drops support for macOS Monterey 12 (requires macOS Ventura 13 or later) as v1.104 is built with Go 1.27. • Drops support for iOS 15 (requires iOS 16 or later). Breaking changes: • macOS Monterey 12 is no longer supported; Tailscale v1.104 requires macOS Ventura 13 or later (built with Go 1.27). • iOS 15 is no longer supported; Tailscale v1.104 requires iOS 16 or later. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://tailscale.com/changelog https://tailscale.com/changelog Mon, 05 Oct 2026 07:55:26 GMT Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://tailscale.com/changelog https://tailscale.com/changelog Sun, 04 Oct 2026 07:48:56 GMT Tailscale's PAM web client at my.tailscale.com now authenticates once across all browser tabs, eliminating repeated sign-in prompts.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a single-session PAM web client at `my.tailscale.com` that runs as one shared browser-based Tailscale device across all tabs, so authenticating once covers every subsequent service connection in the same browser.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://tailscale.com/changelog/#2026-09-29-service https://tailscale.com/changelog/#2026-09-29-service Tue, 29 Sep 2026 00:00:00 GMT Tailscale PAM web client now shares a single browser device across tabs, eliminating repeated sign-in prompts.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • The PAM web client at my.tailscale.com now runs as a single shared browser-based Tailscale device across all browser tabs, so authenticating once carries forward to every subsequent tab without re-prompting.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://tailscale.com/changelog https://tailscale.com/changelog Sat, 26 Sep 2026 07:48:11 GMT tailscale: Adds a device posture status detail view in the admin console showing each posture's required assertions, per-machine values, pass/fail state, and a count of policy file rules requiring that posture.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Supports subscribing to tailnet events and routing notifications through an integration or app via webhooks. • Adds a `log-mode` parameter to the container to control whether logging output is grouped, ungrouped, or quiet. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://tailscale.com/changelog https://tailscale.com/changelog Fri, 25 Sep 2026 13:12:46 GMT tailscale: Supports subscribing to tailnet events and routing notifications through an integration or app. • Skips re-downloading binaries on Linux when a file with a matching SHA already exists. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://tailscale.com/changelog https://tailscale.com/changelog Thu, 24 Sep 2026 07:51:44 GMT Tailscale adds posture-assertion detail views, webhook event subscriptions, and per-device ping from the mobile app.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Enables pinging devices in your tailnet directly from the mobile app. • Shows a helpful banner when there are no other devices in the tailnet. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://tailscale.com/changelog/#2026-09-23-service https://tailscale.com/changelog/#2026-09-23-service Wed, 23 Sep 2026 00:00:00 GMT Tailscale admin console now shows per-machine posture assertion details and policy rule counts on the Machines page.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • In the admin console, the Machines page now displays each posture assertion required by a device posture check, the machine's current value for that assertion, whether it is passing, and a count of policy file rules that affect the machine and require that posture.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://tailscale.com/changelog/#2026-09-22-service https://tailscale.com/changelog/#2026-09-22-service Tue, 22 Sep 2026 00:00:00 GMT Tailscale GitHub Action v4.2.0 adds `log-mode` parameter to control grouped, ungrouped, or quiet log output.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `log-mode` parameter to the Tailscale GitHub Action to control whether log output is `grouped`, `ungrouped`, or `quiet`.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://tailscale.com/changelog https://tailscale.com/changelog Fri, 28 Aug 2026 02:34:14 GMT Tailscale adds PAM, Aperture AI gateway, and a new `TS_BOOT_TIMEOUT` env var for containers • New `TS_BOOT_TIMEOUT` environment variable controls how long the Tailscale container waits for its initial connection to the coordination server; accepts durations like `90s` or `3m`, defaulting to `60s`. • Introduces Tailscale Privileged Access Management (PAM) beta, supporting database, RDP, and HTTPS service types with session recording for SSH, database, HTTPS, and Kubernetes Service types. • PAM policies can be set for user access and in-service permissions through grants, with secrets store integration for credential injection. • PAM sessions can be recorded and played back; audit logs of user access are available. • PAM connectors can be managed and deployed to provide connectivity to services. • Browser client allows access to PAM services without requiring a Tailscale client download. • Custom domain management is available for public HTTP PAM services. • Custom Amazon S3 bucket can be configured for PAM recording storage. • Service accounts can be created for machine identities to interact with the PAM API. • Introduces Aperture gateway for securing and managing AI agents and LLM sessions, with cost controls, request/response hooks, guardrails, logging, MCP support, and API proxying. • Aperture exposes a Tailscale MCP endpoint and an SSH MCP endpoint, allowing coding agents and tailnet nodes to be added or accessed after user approval. • Chat Projects in Aperture enable sharing of instructions, tool access, and tailnet nodes in group chats. • Default tool permissions can be defined across Aperture chats for baseline tool access. • Model tokens for major AI models can be purchased directly in Aperture. • Peer relays on AWS now use HTTP instead of TCP for pod health checks, preventing all targets from being reported as unhealthy. • Peer relays on AWS are reachable regardless of the availability zone their pod is scheduled in; pinning Elastic IPs requires pinning pods to the same zone using a Network Load Balancer. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://tailscale.com/changelog https://tailscale.com/changelog Wed, 19 Aug 2026 17:54:51 GMT Tailscale's 'list tailnets' API endpoint now paginates results with `limit` and `cursor` query parameters. • Adds pagination to the 'list tailnets' API endpoint via `limit` and `cursor` query parameters, returning up to 100 results per page by default and a `totalCount` in the response. • Returns a `cursor` value in the 'list tailnets' response to pass as the `cursor` query parameter on subsequent requests; iteration ends when the returned `cursor` is empty. Breaking changes: • The 'list tailnets' endpoint now returns only the first 100 results by default for organizations with more than 100 tailnets; callers that previously received all tailnets in a single response must now paginate using the `cursor` parameter to retrieve the full set. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://tailscale.com/changelog/#2026-08-19-service https://tailscale.com/changelog/#2026-08-19-service Wed, 19 Aug 2026 00:00:00 GMT Tailscale container image v1.102.3 adds `TS_BOOT_TIMEOUT` env var to extend initial coordination server connection wait. • Adds `TS_BOOT_TIMEOUT` environment variable to the container image, accepting a duration value (e.g. `90s` or `3m`) to extend how long the container waits for its initial connection to the coordination server; defaults to `60s`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://tailscale.com/changelog/#2026-08-18-service https://tailscale.com/changelog/#2026-08-18-service Tue, 18 Aug 2026 00:00:00 GMT Tailnet list API now paginates with `limit` and `cursor` query parameters, returning 100 results per page by default. • Adds `limit` and `cursor` query parameters to the list tailnets endpoint, enabling paginated retrieval of tailnet results (default 100 per page); the response includes `totalCount` and a `cursor` value to pass into the next request until the cursor is empty. Breaking changes: • The list tailnets endpoint now returns only the first 100 results by default for organizations with more than 100 tailnets; callers that previously received all tailnets in a single response must now page through results using the `cursor` parameter. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://tailscale.com/changelog https://tailscale.com/changelog Wed, 12 Aug 2026 09:48:08 GMT Tailscale operator gains in-cluster PeerRelays via custom resource, Helm annotation support, and IPv6 egress on dual-stack clusters. • PeerRelays are now deployable in-cluster via a Kubernetes custom resource. • Per-attempt cert issuance timeout in Kubernetes proxies is increased to 30 minutes, enabling ACME challenges to complete under load. • MTU values are now clamped on both input and output interfaces (previously only the output interface was clamped). • Exposes `tailscale_dns_split_nameservers` and `tailscale_users` metrics. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://tailscale.com/changelog/#2026-08-11-service https://tailscale.com/changelog/#2026-08-11-service Tue, 11 Aug 2026 00:00:00 GMT Tailscale Kubernetes Operator v1.102.2 adds in-cluster PeerRelays, workload identity federation, 4via6 support, and IPv6 Egress ProxyGroups. • Supports deploying PeerRelays in-cluster via a new custom resource. • Adds workload identity federation configuration for the `Tailnet` custom resource. • Supports `4via6` in connector and egress proxy resources when egressing from a dual-stack cluster. • Supports IPv6 in Egress ProxyGroups. • Adds ability to apply annotations to the operator's deployment resource via Helm. • Reduces operator log noise by excluding superfluous entries for resources that do not contain annotations. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://tailscale.com/changelog/#2026-08-03-client https://tailscale.com/changelog/#2026-08-03-client Mon, 03 Aug 2026 00:00:00 GMT Tailscale v1.102.1 adds four new CLI commands, new client metrics, iOS/tvOS UI upgrades, and macOS deep-linking. • New `tailscaled_serve_outbound_bytes_total` and `tailscaled_serve_inbound_bytes_total` client metrics report bytes sent to and received from peers on Tailscale Serve connections. • New `tailscale get` CLI command returns the current node's preferences. • New `tailscale whoami` CLI command displays information about the current user and device. • New `tailscale service list` CLI command lists Tailscale Services visible to the current node. • New macOS protocol handler supports deep-linking to devices, exit nodes, and settings panels in the application window. • New assembly crypto routines for 32-bit ARM on Linux improve cryptographic performance on those platforms. • New split-plane layout on iPad (portrait and landscape) and wide iPhones (landscape) for the iOS app. • New iOS status widget supports toggling the active exit node inline. • New Tailscale web client support for remote management of Apple TV devices on tvOS. • Node additions and removals are now processed in constant time, significantly reducing CPU usage on large tailnets. • Tailscale Funnel domains switch to TLS-ALPN-01 for faster HTTPS certificate renewals. • TLS certificates on idle servers now proactively auto-renew in the absence of traffic, with warnings issued when no valid cached certificate exists. • Exit node names appear as subtitles in Shortcuts on macOS and iOS and can be used to filter the displayed exit node list. • Userspace TUN optimizations on Linux improve throughput and performance. • Synology RMv7 binaries with software floating point are now produced for certain NAS models, replacing older ARMv5 binaries. Breaking changes: • Deprecated formats for 4via6 MagicDNS names are no longer available. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://tailscale.com/changelog/#2026-07-29-service https://tailscale.com/changelog/#2026-07-29-service Wed, 29 Jul 2026 00:00:00 GMT New alpha API lets you programmatically create, list, and delete API-only tailnets in your organization. • Adds a tailnet creation API (alpha) to programmatically create, list, and delete API-only tailnets within an organization. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://tailscale.com/changelog https://tailscale.com/changelog Tue, 27 Jan 2026 21:35:08 GMT Tailscale v1.94.1 introduces log streaming to Google Cloud Storage and GA for Tailscale Services. • Adds `log_streaming` integration with Google Cloud Storage • Promotes Tailscale Services to General Availability (GA) • Adds `tsnet` integration support for Tailscale Services Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://tailscale.com/changelog https://tailscale.com/changelog Mon, 09 Jun 2025 23:43:27 GMT App connectors reach general availability and new safeguards prevent accidental tailnet policy changes. • App connectors are now generally available for production use in v1.84.2 • New UI safeguards prevent accidental modification of the tailnet policy file Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://github.com/tailscale/tailscale/releases/tag/v1.70.0 https://github.com/tailscale/tailscale/releases/tag/v1.70.0 Wed, 17 Jul 2024 18:34:16 GMT Tailscale v1.70 adds split tunneling on Android, health notifications on macOS, Siri/Shortcuts DNS toggle, and new exit node MDM controls. • New `AllowedSuggestedExitNodes` system policy (all platforms with MDM support) restricts which exit nodes Tailscale recommends or auto-selects. • New `auto:any` value for the `ExitNodeID` system policy automatically selects an exit node on Windows, macOS, iOS, and tvOS (Enterprise plan only). • macOS client now surfaces health notifications in the menu — covering connectivity loss, firewall blocks, and misconfigurations — and changes the menubar icon to show an exclamation mark when connectivity is affected. • macOS client warns users when the built-in macOS content filter (Screen Time) is blocking Tailscale from connecting. • On MacBooks with a display notch, a notification window appears when the Tailscale menubar icon is hidden behind the notch. • Toggle Tailscale DNS via Siri or the Shortcuts app on macOS and iOS. • Android app adds a Ping view: long-press a device in the devices list and select Ping to access ping information and connection status. • Android app gains split tunneling support to force or exclude per-app traffic through the tailnet. Breaking changes: • Tailscale v1.70 is the last version to support macOS 10.15 Catalina; macOS 10.15 will not be supported in future releases. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://github.com/tailscale/tailscale/releases/tag/v1.68.0 https://github.com/tailscale/tailscale/releases/tag/v1.68.0 Wed, 12 Jun 2024 18:08:44 GMT v1.68.0 adds `tailscale lock status` node signature display, macOS DHCP misroute detection, and Taildrop file-received notifications. • Tailscale detects any attempt to use DHCP Option 121 to misroute traffic meant for the VPN (TunnelVision attack) on macOS and presents a warning • System administrators can disable the TunnelVision warning on macOS with a system policy • The Standalone variant of Tailscale now supports notifications when a file is received using Taildrop Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://github.com/tailscale/tailscale/releases/tag/v1.66.3 https://github.com/tailscale/tailscale/releases/tag/v1.66.3 Tue, 14 May 2024 21:23:01 GMT Kubernetes ProxyClass CRD adds labels, affinity, env vars, metrics, and ingress/egress service exposure. • `ProxyClass` CRD supports `labels`, `affinity`, and `env` fields for proxy Pods • `ProxyClass` exposes a `tailscaled` metrics endpoint via the new `.spec.metrics` field • Cluster workloads can now refer to Tailscale Ingress resources by their MagicDNS names • ExternalName Services in the cluster expose cloud services to the tailnet • Tailscale HTTPS services are exposed from the tailnet to cluster workloads Breaking changes: • The Kubernetes operator must always run the same or later version as the proxies it manages Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://github.com/tailscale/tailscale/releases/tag/v1.66.1 https://github.com/tailscale/tailscale/releases/tag/v1.66.1 Thu, 09 May 2024 20:26:33 GMT Tailscale v1.66.1 adds three new flags to the `tailscale set` CLI command on Linux. • Adds `--netfilter-mode`, `--snat-subnet-routes`, and `--stateful-filtering` flags to the `tailscale set` CLI command on Linux Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://github.com/tailscale/tailscale/releases/tag/v1.66.0 https://github.com/tailscale/tailscale/releases/tag/v1.66.0 Wed, 08 May 2024 21:12:16 GMT New `tailscale exit-node suggest` CLI command and `--stateful-filtering` default changes for subnet routers. • Adds the `tailscale exit-node suggest` subcommand to automatically select the best available exit node • Adds a 'Bug Report' identifier feature accessible via About Tailscale > Report an issue on tvOS • Adds DNS configuration management to the DNS Settings view on tvOS Breaking changes: • New subnet routers require `--stateful-filtering=false` in addition to `--snat-subnet-routes=false`; existing routers with `--snat-subnet-routes=false` now default to `--stateful-filtering=false` • Subnet routers and exit nodes enabled via `tailscale up` now have stateful filtering active by default unless `--stateful-filtering=false` is explicitly set Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://github.com/tailscale/tailscale/releases/tag/v1.64.0 https://github.com/tailscale/tailscale/releases/tag/v1.64.0 Sat, 13 Apr 2024 18:38:43 GMT Tailscale v1.64.0 adds standalone SSH/NC clients, synology-cert CLI, and kubeconfig env support • `tailscale ssh` and `tailscale nc` are now supported in the Standalone variant of the client. • New Internet Access Policy for Little Snitch users on macOS • Receive alerts when an error occurs while changing client preferences on macOS • `tailscale serve` headers are now RFC 2047 Q-encoded • Update certificates using the `configure synology-cert` CLI command on Synology • `tailscale configure kubeconfig` now respects `KUBECONFIG` environment variable. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://github.com/tailscale/tailscale/releases/tag/v1.62.1 https://github.com/tailscale/tailscale/releases/tag/v1.62.1 Tue, 26 Mar 2024 20:24:01 GMT Adds load balancing hint HTTP request header on Linux for traffic steering • Adds `X-Tailscale-Load-Balancing-Hint` HTTP request header on Linux to signal load balancing preference Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://github.com/tailscale/tailscale/releases/tag/v1.62.0 https://github.com/tailscale/tailscale/releases/tag/v1.62.0 Wed, 13 Mar 2024 15:11:12 GMT v1.62.0 adds MDM key support for Windows policy management and macOS .pkg standalone installer • `ManagedByOrganizationName`, `ManagedByCaption`, and `ManagedByURL` system policy keys are now supported on Windows • A `.pkg` installer package is now available for the Tailscale client standalone release on macOS Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://github.com/tailscale/tailscale/releases/tag/v1.60.0 https://github.com/tailscale/tailscale/releases/tag/v1.60.0 Thu, 15 Feb 2024 21:08:21 GMT v1.60.0 introduces macOS VPN On-Demand, ProxyClass K8s CR, and read-only web client mode • Adds `ProxyClass` custom resource to the Kubernetes operator for cluster-specific configuration • Enables configurable ACL tags in the Helm chart values for the Kubernetes operator • Introduces 'VPN On-Demand' support on macOS to trigger connections based on conditions • Adds a 'Reset VPN Configuration' menu item in the macOS Debug Menu • Adds a new read-only mode to the Tailscale web client • Adds support for pre-configured routes from the control server in app connectors • Allows app connectors to install routes for domains resolving to CNAME records • Enables detection of Digital Ocean DNS resolvers when running on cloud servers Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://github.com/tailscale/tailscale/releases/tag/v1.58.0 https://github.com/tailscale/tailscale/releases/tag/v1.58.0 Thu, 18 Jan 2024 21:39:08 GMT Tailscale v1.58.0 adds Kubernetes Connector CRD, macOS DNS view, and --webclient flag • Adds `Connector` Custom Resource to deploy subnet routers and exit nodes via the Kubernetes Operator • Adds Tailscale IngressClass resource for controlled ingress routing in Kubernetes • Syncs operator-managed labels to StatefulSet Pods automatically • Displays a new DNS Settings view in the macOS app showing configuration during runtime • Adds Option-click "Quit (Leave VPN Active)" option to quit the macOS app while keeping the tunnel active • Supports `KeyExpirationNotice` system policy on macOS and iOS to customize key expiration notifications Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://github.com/tailscale/tailscale/releases/tag/v1.56.0 https://github.com/tailscale/tailscale/releases/tag/v1.56.0 Wed, 13 Dec 2023 20:34:56 GMT New `tailscale whois` subcommand and GoKrazy defaults; improved profiles and Taildrop for mobile/macOS • Adds the `tailscale whois` subcommand to observe metadata associated with a Tailscale IP address. • Includes tailnet name and profile ID in `tailscale switch --list` output to disambiguate profiles with common login names. • Adds tvOS UI components for configuring subnet router routes, allowing the device to act as a network segment gateway. • Adds 'Allow Local Network Access' option to the exit node picker UI on iOS. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://github.com/tailscale/tailscale/releases/tag/v1.54.0 https://github.com/tailscale/tailscale/releases/tag/v1.54.0 Wed, 15 Nov 2023 19:00:13 GMT Tailscale v1.54.0 adds MDM settings support, macOS CLI update flag, and improved UX/UX features across platforms. • Adds 'Allow Local Network Access' toggle setting in the iOS client when using an exit node • Enables regular left-click menu opening in the Tailscale system tray on Windows Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://github.com/tailscale/tailscale/releases/tag/v1.52.0 https://github.com/tailscale/tailscale/releases/tag/v1.52.0 Mon, 30 Oct 2023 17:36:14 GMT Tailscale v1.52 adds `tailscale update` beta, WoL for peers, speculative TCP DNS, and system policy controls • Adds `tailscale update` command (beta) for manual client updates • Adds `--auto-update` flag to `tailscale set` across Linux, Windows, and macOS for opt-in automatic client updates • Adds Wake on LAN support for peer node wake-ups • Enables speculative TCP DNS queries when UDP response is slow • Enables retry of truncated UDP DNS results via TCP • Updates [tailscale serve](https://tailscale.com/kb/1242/tailscale-serve) and [tailscale funnel](https://tailscale.com/kb/1311/tailscale-funnel) commands for improved usability • Adds System policy support to control tailnet name, VPN stop prevention, and UI hiding • Enables DNS support on tvOS when acting as an exit node • Allows Taildrop to resume interrupted file transfers • Adds progress meter display to Taildrop file transfers on Linux Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://github.com/tailscale/tailscale/releases/tag/v1.50.0 https://github.com/tailscale/tailscale/releases/tag/v1.50.0 Mon, 25 Sep 2023 19:38:12 GMT Adds Wikimedia DNS-over-HTTPS support, `tailscale update` visibility, and tvOS platform support in v1.50.0. • Adds support for Wikimedia DNS using DNS-over-HTTPS to resolve Tailscale's DNS names • Unhides the `tailscale update` CLI command on most platforms, making it explicitly available for manual updates • Adds `--log-http` option to `tailscale debug portmap` to enable HTTP logging for Portmapper debugging • First official release with support for tvOS platform Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://github.com/tailscale/tailscale/releases/tag/v1.48.0 https://github.com/tailscale/tailscale/releases/tag/v1.48.0 Wed, 16 Aug 2023 16:37:10 GMT Tailscale v1.48.0 adds `tailscale exit-node` subcommand, Linux nftables support, and Tailscale Lock Beta. • Introduces the `tailscale exit-node` subcommand to manage exit node configuration • Adds `--upstream` flag to `tailscale version` for specifying a DNS resolver upstream • Enables Linux nftables support in addition to iptables • Introduces Tailscale Lock Beta for device security policies • Adds interactive web UI prompts within `tailscale funnel` and `tailscale serve` to enable Tailscale Funnel and HTTPS Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://github.com/tailscale/tailscale/releases/tag/v1.46.0 https://github.com/tailscale/tailscale/releases/tag/v1.46.0 Wed, 19 Jul 2023 20:12:15 GMT Tailscale v1.46.0 adds Tailnet lock support to iOS, macOS, and Windows clients. • `Tailnet lock` support added to iOS client • `Tailnet lock` support added to macOS client • `Tailnet lock` support added to Windows client Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://github.com/tailscale/tailscale/releases/tag/v1.44.0 https://github.com/tailscale/tailscale/releases/tag/v1.44.0 Wed, 21 Jun 2023 18:14:52 GMT Tailscale v1.44.0 adds SSH remote port forwarding, HTTP Serve, and recursive DNS resolution. • Adds HTTP protocol support to Tailscale Serve for web services • Introduces `recursive` DNS resolution mode in parallel with existing bootstrapDNS • Changes certificate renewal logic in `tailscale cert` to use actual certificate lifetime instead of hard-coded values Breaking changes: • The `portlist` package removes async support; synchronous Poll() must be used instead Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://github.com/tailscale/tailscale/releases/tag/v1.42.0 https://github.com/tailscale/tailscale/releases/tag/v1.42.0 Wed, 24 May 2023 16:12:55 GMT Adds `tailscale serve reset` command, Unraid NAS platform support, and Kubernetes `priorityClassName` configuration. • Add `tailscale serve reset` subcommand to clear current serve config • Support Unraid as a NAS platform for Taildrop file delivery • Add `priorityClassName` configuration option for Kubernetes deployments Breaking changes: • Tailscale releases after v1.42 will no longer install on Windows 7, Windows 8, Windows Server 2008, Windows Server 2012, macOS 10.13 High Sierra, or macOS 10.14 Mojave Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://github.com/tailscale/tailscale/releases/tag/v1.40.1 https://github.com/tailscale/tailscale/releases/tag/v1.40.1 Thu, 11 May 2023 00:20:48 GMT Tailscale v1.40.1 adds LDAP/user support for Tailscale SSH and restores local file recording. • Adds LDAP and other users with Tailscale SSH Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://github.com/tailscale/tailscale/releases/tag/v1.40.0 https://github.com/tailscale/tailscale/releases/tag/v1.40.0 Wed, 26 Apr 2023 23:34:07 GMT Tailscale v1.40.0 adds Android VPN intents, SSH risk flag, and performance improvements • `tailscale up --force-reauth` now shows a 5-second countdown when connected over SSH over Tailscale unless `--accept-risk=lose-ssh` is provided. • Added Android intents `com.tailscale.ipn.CONNECT_VPN` and `com.tailscale.ipn.DISCONNECT_VPN` for programmatic VPN control. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://github.com/tailscale/tailscale/releases/tag/v1.38.4 https://github.com/tailscale/tailscale/releases/tag/v1.38.4 Wed, 05 Apr 2023 19:06:42 GMT Tailscale v1.38.4 adds path support to `tailscale serve` proxy targets • Adds path support for proxy targets with `tailscale serve` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://github.com/tailscale/tailscale/releases/tag/v1.38.1 https://github.com/tailscale/tailscale/releases/tag/v1.38.1 Tue, 14 Mar 2023 21:44:54 GMT Tailscale v1.38.1 adds `tailscale serve`, `funnel`, and several `debug` subcommands • Adds the `tailscale serve` command to manage local proxying rules, moving Funnel functionality into a dedicated command. • Adds `tailscale funnel` as a new subcommand for controlling public access to locally running services. • Adds `tailscale debug portmap`, `tailscale debug derp`, and `tailscale debug capture` commands for diagnosing connectivity and capturing pcaps. • Adds `tailscale configure` command to help third-party applications integrate with Tailscale features. • Allows tailnet-lock to be used with preauth keys for bootstrapped machine authentication. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://github.com/tailscale/tailscale/releases/tag/v1.36.0 https://github.com/tailscale/tailscale/releases/tag/v1.36.0 Tue, 24 Jan 2023 23:42:17 GMT Adds `tailscale debug daemon-logs`, JSON output flags, Shortcuts app integration, and Loongnix/EOIP support in v1.36.0 • Adds the `tailscale debug daemon-logs` command for exporting daemon logs. • Supports arbitrary IP protocols like EOIP and GRE. • Adds a build target for the Loongnix CPU architecture on Linux. • Enables Tailscale actions (connect, disconnect, switch profile, use exit node) in the macOS Shortcuts app via `steps` UI navigation. • Enables Tailscale actions (connect, disconnect, use exit node) in the iOS Shortcuts app via `steps` UI navigation. • Adds JSON output mode to `tailscale version`, `tailscale lock status`, and `tailscale lock log`. • Adds `KeyExpiry` time and `Expired` boolean fields to `tailscale status --json` output. • Supports UPnP port mapping for gateway devices deployed as a highly available pair. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://github.com/tailscale/tailscale/releases/tag/v1.34.0 https://github.com/tailscale/tailscale/releases/tag/v1.34.0 Mon, 05 Dec 2022 18:15:19 GMT Tailscale v1.34.0 adds `tailscale lock`, `tailscale set`, Fast User Switching (`login`/`switch`), and 4via6 DNS support • `tailscale lock` command to manage tailnet lock • add `tailscale set` CLI to modify one configuration setting without needing to repeat the rest • a new (third) 4via6 DNS form: 192-168-1-2-via-8 or 192-168-1-2-via-8.foo-bar.ts.net. • display decoded punycode hostnames in status list Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://github.com/tailscale/tailscale/releases/tag/v1.32.0 https://github.com/tailscale/tailscale/releases/tag/v1.32.0 Wed, 12 Oct 2022 19:03:34 GMT NextDNS support, `tailscale bugreport --record`, new eBPF helper, and NextDNS/diagnostic enhancements in v1.32.0 • Add `tailscaled --no-logs-no-support` flag or `TS_NO_LOGS_NO_SUPPORT=true` environment variable to disable logging and support data collection. • Add `--record` argument to `tailscale bugreport` command to pause diagnostic recording and write an intermediate report. • Add NextDNS support for DNS configuration across all platforms. • Add eBPF helper in Linux builds to pass the first packet of a new flow up to tailscaled. • Add captive portal detection via `tailscale netcheck`. • Update bugreport output with more in-depth healthchecks. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale https://github.com/tailscale/tailscale/releases/tag/v1.30.0 https://github.com/tailscale/tailscale/releases/tag/v1.30.0 Wed, 31 Aug 2022 15:28:56 GMT v1.30.0 adds `tailscale licenses` subcommand, OpenBSD hybrid netstack support, and Android coordination server URL setting. • Adds `tailscale licenses` subcommand to display open source license links • Adds Android coordination server URL configuration accessible via the Authentication menu • Enables OpenBSD to function as a subnet router or exit node using hybrid netstack mode • Supports Noise protocol on any HTTPS port for clients with capver 39 Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tailscale