Tailscale v1.92.1

Note: 1.92.0 was a release candidate intended for testing only.

All platforms

• New: Tailscale Funnel and Tailscale Serve support the PROXY protocol, a header format that forwards information about the original client connection, such as the source IP and port, to the server before the actual traffic begins.
• New: Tailscale Peer Relays can use static endpoints using the tailscale set command with the --relay-server-static-endpoints flag.
• New: Tailscale Services can be configured to use a remote target as a service destination.
• New: Nodes can authenticate using workload identity federation with the tailscale up command flags --client-id and --id-token.
• New: Network flow logs automatically record node information about itself and peers it communicates with.
• Changed: Tailnet Lock command tailscale lock log --json response returns Authority Update Messages (AUMs) in a more stable format.
• Changed: Tailscale Peer Relay endpoint advertisements include more candidate IP:port pairs.
• Fixed: Tailscale Peer Relays support multiple, forward bind packets per handshake generation, which improves path selection and chances of completing a handshake.

macOS

• Fixed: Redundant label text for VoiceOver is removed from the exit node picker.

iOS

• New: Taildrop supported nodes are shown in Device Details.
• Fixed: Redundant label text for VoiceOver is removed from the exit node picker.