megachangelog
Announcement1.92.1

Tailscale v1.92.1

Tailscale v1.92.1 introduces support for the PROXY protocol in Funnel and Serve, static endpoints for Peer Relays, remote service destinations, workload identity federation, and improved network flow logs. The release also fixes Peer Relay handshake improvements and accessibility issues on macOS and iOS.

Note: 1.92.0 was a release candidate intended for testing only.

All platforms
  • New: Tailscale Funnel and Tailscale Serve support the PROXY protocol, a header format that forwards information about the original client connection, such as the source IP and port, to the server before the actual traffic begins.
  • New: Tailscale Peer Relays can use static endpoints using the tailscale set command with the --relay-server-static-endpoints flag.
  • New: Tailscale Services can be configured to use a remote target as a service destination.
  • New: Nodes can authenticate using workload identity federation with the tailscale up command flags --client-id and --id-token.
  • New: Network flow logs automatically record node information about itself and peers it communicates with.
  • Changed: Tailnet Lock command tailscale lock log --json response returns Authority Update Messages (AUMs) in a more stable format.
  • Changed: Tailscale Peer Relay endpoint advertisements include more candidate IP:port pairs.
  • Fixed: Tailscale Peer Relays support multiple, forward bind packets per handshake generation, which improves path selection and chances of completing a handshake.
macOS
  • Fixed: Redundant label text for VoiceOver is removed from the exit node picker.
iOS
  • New: Taildrop supported nodes are shown in Device Details.
  • Fixed: Redundant label text for VoiceOver is removed from the exit node picker.
networkingrelayauthenticationfunnelaccessibilityios

Source: original entry ↗

More from Tailscale

Follow Tailscale to get its new changes in your feed and email digest.

Improvement1.104.1

Tailscale Kubernetes Operator v1.104.1

The Tailscale Kubernetes Operator v1.104.1 introduces shared Let's Encrypt account keys for ingress ProxyGroups, custom UDP ports for PeerRelay, image pull secrets support in DNSConfig, improved rolling updates for egress ProxyGroups, and fixes for coordination server URL configuration and HA Service cleanup. New Helm chart customization options and security improvements are also included.

kubernetesoperatorhelmnetworkingsecurity
Announcement1.104.1

Tailscale container image v1.104.1

A new release of the Tailscale container image is available on Docker Hub and GitHub packages repository. This version includes library updates only.

containerdockerreleasedependencies
Feature

Device Posture Monitoring and Alerts

Admins can now configure monitoring and alerts for device posture to help diagnose connectivity problems. New capabilities include badges on the Machines page, filtering by failing postures, custom error messages on clients, and push notifications for posture failures.

posturemonitoringalertsadmin-consolecompliance
See all Tailscale changes →