Tailscale Docker image v1.68.1
UDP GRO forwarding optimization and Kubernetes API server address configuration now available for Docker containers. Subnet routers and exit nodes can enable forwarding optimizations via TS_EXPERIMENTAL_ENABLE_FORWARDING_OPTIMIZATIONS, while Kubernetes deployments can enforce API server address from environment variables using TS_KUBERNETES_READ_API_SERVER_ADDRESS_FROM_ENV.
A new release of the Tailscale Docker image is available. You can download it from Docker Hub or from our GitHub packages repo.
- New: UDP GRO forwarding can be turned on for containers configured as Tailscale subnet routers or exit nodes, using the new environment variable
TS_EXPERIMENTAL_ENABLE_FORWARDING_OPTIMIZATIONS. To learn more, see Performance best practices. - New: Containers that run on Kubernetes and store the
tailscaledstate in a KubernetesSecretcan now be enforced to read the Kubernetes API server address and port from the environment variablesKUBERNETES_SERVICE_HOSTandKUBERNETES_SERVICE_PORT_HTTPS. By default, the values are read from the KubernetesServicein the default namespace. To enforce the environment variables, setTS_KUBERNETES_READ_API_SERVER_ADDRESS_FROM_ENVtotrue.
Source: original entry ↗
More from Tailscale
Follow Tailscale to get its new changes in your feed and email digest.
Tailscale v1.104.1 — Performance and Features Release
Tailscale v1.104.1 delivers significant performance improvements including reduced WireGuard memory usage, client-side netmap caching for offline resilience, and enhanced features like device pinning, improved Taildrop support, and platform-specific fixes across all supported devices.
Declarative node sharing
Tailnet admins can now use policy to securely share resources between trusted tailnets in a declarative way, enabling controlled cross-tailnet access.
Linux client reconnection stability fix
Fixed an issue where the Linux client would stop tailscaled when falling behind on status updates. The client now reconnects instead of exiting, and only terminates if it cannot reconnect within one minute.