Tailscale v1.90.1

Note: 1.90.0 was a release candidate intended for testing only.

All platforms

• New: Clients can use configured DNS resolvers for all domains even when the client also uses an exit node using the nameserver settings in the DNS page of the admin console.
• New: Node keys will be renewed seamlessly, so clients will maintain existing connections while re-authenticating.
• Changed: Go is updated to version 1.25.3.
• Fixed: Unnecessary path discovery packets over DERP servers are suppressed.

Linux

• Changed: Node key sealing is GA (generally available) and enabled by default. Existing nodes will migrate to node key sealing automatically on upgrade. For more information, including how to opt out, refer to Secure node state storage.

Windows

• Changed: Node key sealing is GA (generally available) and enabled by default. For more information, refer to Secure node state storage.

macOS

• New: The Hide Dock Icon checkbox located in Settings lets you remove the Tailscale icon from the macOS dock when the client window is closed.
• Changed: The tailscale drive CLI command for sharing Taildrive directories is no longer available. Use the client GUI for sharing directories instead.
• Changed: Node key sealing is GA (generally available) and enabled by default. For more information, refer to Secure node state storage.
• Fixed: Exit node selection using the macOS Shortcuts app work as expected.
• Fixed: Accounts displayed using the macOS menu bar Tailscale icon load as expected.
• Fixed: Client users preference for automatic/recommended exit node selection is remembered as expected.

iOS

• Fixed: Exit node selection using the iOS Shortcuts app work as expected.
• Fixed: Client users preference for automatic/recommended exit node selection is remembered as expected.

Android

• Fixed: Client is able to establish direct connections as expected.