46d1bf321b
- Update to version 1.94.2: * Memory leak caused by high network map response rates is resolved - fix typo in changelog (version)
Richard Rahl
2026-02-23 14:02:37 +00:00
fa646f26f4
Accepting request 1330022 from network:vpn
Ana Guerrero2026-01-30 17:29:51 +00:00
e83940d85b
- Update to version 1.94.0: * IS SET and NOT SET have been added as device posture operators * India DERP Region City Name updated * Custom DERP servers support GCP Certificate Manager * Tailscale SSH authentication, when successful, results in LOGIN audit messages being sent to the kernel audit subsystem * Tailscale Peer Relay throughput is improved when the SO_REUSEPORT socket option is supported on multi-core systems * Tailscale Peer Relay server handshake transmission is guarded against routing loops over Tailscale * MagicDNS always resolves when using resolv.conf without a DNS manager * tailscaled_peer_relay_forwarded_packets_total and tailscaled_peer_relay_forwarded_bytes_total client metrics are available for Tailscale Peer Relays * Identity tokens are automatically generated for workload identities * --audience flag added to tailscale up command to support auto generation of ID tokens for workload identity * tsnet nodes can host Tailscale Services * The tailscale lock status -json command returns tailnet key authority (TKA) data in a stable format * Tailscale Peer Relays deliver improved throughput through monotonic time comparison optimizations and reduced lock contention * Tailscale Services virtual IPs are now automatically accepted by clients across all platforms regardless of the status of the --accept-routes feature
Richard Rahl
2026-01-30 12:03:53 +00:00
84b118492e
Accepting request 1330020 from home:rrahl0
Richard Rahl
2026-01-30 12:03:53 +00:00
cc1e6c5b13
Accepting request 1328414 from network:vpn
Ana Guerrero2026-01-21 13:18:03 +00:00
4fa888e6e0
Accepting request 1328414 from network:vpn
Ana Guerrero2026-01-21 13:18:03 +00:00
9ec15b6eba
- Update to version 1.94.0: * derp/derpserver: add a unique sender cardinality estimate * syncs: add means of declare locking assumptions for debug mode * cmd/k8s-operator: add support for taiscale.com/http-redirect * cmd/k8s-operator fix populateTLSSecret on tests * feature/posture: log method and full URL for posture identity requests * k8s-operator: Fix typos in egress-pod-readiness.go * cmd/tailscale,ipn: add Unix socket support for serve * client/systray: change systray to start after graphical.target * cmd/k8s-operator: warn if users attempt to expose a headless Service * cmd/tailscale/cli, util/qrcodes: format QR codes on Linux consoles * tsnet: ensure funnel listener cleans up after itself when closed * ipn/store/kubestore: don't load write replica certs in memory * tsnet: allow for automatic ID token generation
Richard Rahl
2026-01-21 01:34:11 +00:00
2da875e3cc
Accepting request 1328413 from home:rrahl0
Richard Rahl
2026-01-21 01:34:11 +00:00
bae97085fa
Accepting request 1326275 from network:vpn
Ana Guerrero2026-01-09 16:04:11 +00:00
fbfd1be108
Accepting request 1326275 from network:vpn
Ana Guerrero2026-01-09 16:04:11 +00:00
d56842182e
- Update to version 1.92.5: * types/persist: omit Persist.AttestationKey based on IsZero * disable hardware attestation for kubernetes * allow opting out of ACME order replace extension - Update to version 1.92.4: * nothing of importance
Richard Rahl
2026-01-09 00:32:50 +00:00
bfad000818
Accepting request 1326274 from home:rrahl0
Richard Rahl
2026-01-09 00:32:50 +00:00
25fb6b9615
Accepting request 1323401 from network:vpn
Ana Guerrero2025-12-18 17:32:15 +00:00
1d0ed9cb36
Accepting request 1323401 from network:vpn
Ana Guerrero2025-12-18 17:32:15 +00:00
f506379a86
- Update to version 1.92.3: * WireGuard configuration that occurs automatically in the client, no longer results in a panic
Richard Rahl
2025-12-17 17:54:35 +00:00
a3f1d311dd
Accepting request 1323400 from home:rrahl0
Richard Rahl
2025-12-17 17:54:35 +00:00
c7d4a8edbd
Accepting request 1322628 from network:vpn
Ana Guerrero2025-12-12 20:43:17 +00:00
c354fff580
Accepting request 1322628 from network:vpn
Ana Guerrero2025-12-12 20:43:17 +00:00
fce1b2083b
- Update to version 1.92.2: * cmd/derper: add GCP Certificate Manager support
Richard Rahl
2025-12-12 14:29:49 +00:00
ee2899ec3f
Accepting request 1322627 from home:rrahl0
Richard Rahl
2025-12-12 14:29:49 +00:00
d2c4ec3e11
Accepting request 1321351 from network:vpn
Ana Guerrero2025-12-08 10:54:26 +00:00
542ccc498e
Accepting request 1321351 from network:vpn
Ana Guerrero2025-12-08 10:54:26 +00:00
e599b7f0f3
- Update to version 1.92.1: * fix LocalBackend deadlock when packet arrives during profile switch * wgengine: fix TSMP/ICMP callback leak - Update to version 1.92.0: * no changelog provided - Update to version 1.90.9: * tailscaled no longer deadlocks during event bursts * The client no longer hangs after wake up
Richard Rahl
2025-12-06 11:46:21 +00:00
5f4b094985
Accepting request 1321350 from home:rrahl0
Richard Rahl
2025-12-06 11:46:21 +00:00
97d6a0d4fd
Accepting request 1318742 from network:vpn
Ana Guerrero2025-11-20 13:50:45 +00:00
9b05fa6de7
Accepting request 1318742 from network:vpn
Ana Guerrero2025-11-20 13:50:45 +00:00
d8cbdec28e
- Update to version 1.90.8: * tka: move RemoveAll() to CompactableChonk - Update to version 1.90.7: * wgengine/magicsock: validate endpoint.derpAddr * wgengine/magicsock: fix UDPRelayAllocReq/Resp deadlock * net/udprelay: replace VNI pool with selection algorithm * feature/relayserver,ipn/ipnlocal,net/udprelay: plumb DERPMap * feature/relayserver: fix Shutdown() deadlock * net/netmon: do not abandon a subscriber when exiting early * tka: don't try to read AUMs which are partway through being written * tka: rename a mutex to mu instead of single-letter l * ipn/ipnlocal: use an in-memory TKA store if FS is unavailable
Richard Rahl
2025-11-19 18:22:06 +00:00
9c10ca3573
Accepting request 1318741 from home:rrahl0
Richard Rahl
2025-11-19 18:22:06 +00:00
05d0c2a1df
Accepting request 1315613 from network:vpn
Ana Guerrero2025-11-05 15:19:22 +00:00
5e7bc5a79c
Accepting request 1315613 from network:vpn
Ana Guerrero2025-11-05 15:19:22 +00:00
6e9945886e
- Update to version 1.90.6: * Routes no longer stall and fail to apply when updated repeatedly in a short period of time * Tailscale SSH no longer hangs for 10s when connecting to tsrecorder. This affected tailnets that use Tailscale SSH recording
Richard Rahl
2025-11-04 22:44:16 +00:00
5157204799
Accepting request 1315612 from home:rrahl0
Richard Rahl
2025-11-04 22:44:16 +00:00
1650468da8
Accepting request 1314302 from network:vpn
Ana Guerrero2025-10-29 20:08:12 +00:00
772766874b
Accepting request 1314302 from network:vpn
Ana Guerrero2025-10-29 20:08:12 +00:00
9e65c6f447
- Update to version 1.90.4: * deadlock issue no longer occurs in the client when checking for the network to be available * tailscaled no longer sporadically panics when a Trusted Platform Module (TPM) device is present
Richard Rahl
2025-10-29 09:57:27 +00:00
d9417c285f
Accepting request 1314301 from home:rrahl0
Richard Rahl
2025-10-29 09:57:27 +00:00
0dde72b3c5
Accepting request 1314049 from network:vpn
Ana Guerrero2025-10-28 13:49:25 +00:00
046777e64e
Accepting request 1314049 from network:vpn
Ana Guerrero2025-10-28 13:49:25 +00:00
9909462d9e
- Update to version 1.90.3: * tailscaled shuts down as expected and without panic * tailscaled starts up as expected in a no router configuration environment
Richard Rahl
2025-10-28 11:23:52 +00:00
dc09a70ce1
Accepting request 1314048 from home:rrahl0
Richard Rahl
2025-10-28 11:23:52 +00:00
5338fd9fa3
Accepting request 1313598 from network:vpn
Ana Guerrero2025-10-27 13:38:42 +00:00
43be21eea5
Accepting request 1313598 from network:vpn
Ana Guerrero2025-10-27 13:38:42 +00:00
ce56400c01
- Update to version 1.90.2: * util/linuxfw: fix 32-bit arm regression with iptables * health: compare warnable codes to avoid errors on release branch * feature/tpm: check TPM family data for compatibility
Richard Rahl
2025-10-24 18:25:48 +00:00
f1af816a76
Accepting request 1313597 from home:rrahl0
Richard Rahl
2025-10-24 18:25:48 +00:00
1f04778326
- Upate to version 1.90.1: * Clients can use configured DNS resolvers for all domains * Node keys will be renewed seamlessly * Unnecessary path discovery packets over DERP servers are suppressed * Node key sealing is GA (generally available) and enabled by default
Richard Rahl
2025-10-24 10:11:41 +00:00
7ba47393a4
Accepting request 1313372 from home:rrahl0
Richard Rahl
2025-10-24 10:11:41 +00:00
db30034e27
Accepting request 1308397 from network:vpn
Ana Guerrero2025-10-01 16:58:02 +00:00
e52f11ba47
Accepting request 1308397 from network:vpn
Ana Guerrero2025-10-01 16:58:02 +00:00
be10986d82
- update to version 1.88.3: * cmd/tailscale/cli: add ts2021 debug flag to set a dial plan * control/controlhttp: simplify, fix race dialing, remove priority concept - update to version 1.88.2: * k8s-operator: reset service status before append - require the minimum go version directly, in comparison to using the golang(API) symbol
Richard Rahl
2025-10-01 12:22:36 +00:00
8b17f7d84f
Accepting request 1308396 from home:rrahl0
Richard Rahl
2025-10-01 12:22:36 +00:00
e31a9023ed
Accepting request 1305111 from network:vpn
Ana Guerrero2025-09-16 16:18:50 +00:00
ca2fdbc2d1
Accepting request 1305111 from network:vpn
Ana Guerrero2025-09-16 16:18:50 +00:00
a11edb0438
Accepting request 1305110 from home:rrahl0
Richard Rahl
2025-09-16 08:39:20 +00:00
566209601a
- update to version 1.88.1: * Tailscale CLI prompts users to confirm impactful actions * Tailscale SSH works as expected when using an IP address instead of a hostname and MagicDNS is disabled * fixed: Taildrive sharing when su not present * Taildrive files remain consistently accessible * new: Tailscale tray GUI * DERP IPs changed for Singapore and Tokyo - remove patch fix-CVE-2025-58058, fixed upstream
Richard Rahl
2025-09-12 12:20:11 +00:00
5b8816f08a
Accepting request 1304308 from home:rrahl0
Richard Rahl
2025-09-12 12:20:11 +00:00
e8033b8603
Accepting request 1301939 from network:vpn
Ana Guerrero2025-08-29 16:37:33 +00:00
3b931db083
Accepting request 1301939 from network:vpn
Ana Guerrero2025-08-29 16:37:33 +00:00
e2ea0eb984
Accepting request 1301938 from home:rrahl0
Richard Rahl
2025-08-29 12:59:17 +00:00
c327f5e3dc
- update to version 1.86.5: * cmd/k8s-proxy,k8s-operator: fix serve config for userspace mode - update to version 1.86.4: * nothing of relevance - update to version 1.86.3: * nothing of relevance
Richard Rahl
2025-08-29 11:17:32 +00:00
805eddd721
Accepting request 1301919 from home:rrahl0
Richard Rahl
2025-08-29 11:17:32 +00:00
9967c0490e
- update to version 1.86.2: * A deadlock issue that may have occurred in the client * An occasional crash when establishing a new port mapping with a gateway or firewall
Richard Rahl
2025-07-29 21:54:32 +00:00
a800c2a9bf
Accepting request 1296389 from home:rrahl0
Richard Rahl
2025-07-29 21:54:32 +00:00
7b1310a217
- update to version 1.86.0: * tsStateEncrypted device posture attribute for checking whether the Tailscale client state is encrypted at rest * Cross-site request forgery (CSRF) issue that may have resulted in a log in error when accessing the web interface * Recommended exit node when the previously recommended exit node is offline * tailscale up --exit-node=auto:any and tailscale set --exit-node=auto:any CLI commands track the recommended exit node and automatically switches to it when available exit nodes or network conditions change * tailscaled CLI command flag --encrypt-state encrypts the node state file on the disk using trusted platform module (TPM)
Richard Rahl
2025-07-26 16:32:16 +00:00
ab9eceb2a5
Accepting request 1295906 from home:rrahl0
Richard Rahl
2025-07-26 16:32:16 +00:00
8da1898a50
Accepting request 1288739 from network:vpn
Ana Guerrero2025-06-27 21:01:27 +00:00
e94b75fb7c
Accepting request 1288739 from network:vpn
Ana Guerrero2025-06-27 21:01:27 +00:00
e3e3aab1be
- update to 1.84.3: * ipn/ipnlocal: Update hostinfo to control on service config change
Richard Rahl
2025-06-26 17:44:30 +00:00
3cfda7d9da
Accepting request 1288738 from home:rrahl0
Richard Rahl
2025-06-26 17:44:30 +00:00
df641df7e5
Accepting request 1284535 from network:vpn
Ana Guerrero2025-06-11 14:24:01 +00:00
28e3c407ee
Accepting request 1284535 from network:vpn
Ana Guerrero2025-06-11 14:24:01 +00:00
422d112069
- update to 1.84.2: * Re-enable setting —accept-dns by using TS_EXTRA_ARGS. This issue resulted from stricter CLI arguments parsing introduced in Tailscale v1.84.0
Richard Rahl
2025-06-10 15:45:21 +00:00
b1ac052129
Accepting request 1284534 from home:rrahl0
Richard Rahl
2025-06-10 15:45:21 +00:00
93386dca72
- update to 1.84.1: * net/dns: cache dns.Config for reuse when compileConfig fails
Richard Rahl
2025-05-30 06:50:23 +00:00
b9272c1a45
Accepting request 1281269 from home:rrahl0
Richard Rahl
2025-05-30 06:50:23 +00:00
8fb2bf4c3f
Accepting request 1279266 from network:vpn
Ana Guerrero2025-05-22 14:57:32 +00:00
7ba467c68c
Accepting request 1279266 from network:vpn
Ana Guerrero2025-05-22 14:57:32 +00:00
f05ff0fb44
- update to 1.84.0: * The --reason flag is added to the tailscale down command * ReconnectAfter policy setting, which configures the maximum period of time between a user disconnecting Tailscale and the client automatically reconnecting * Tailscale CLI commands throw an error if multiple of the same flag are detected * Network connectivity issues when creating a new profile or switching profiles while using an exit node * DNS-over-TCP fallback works correctly with upstream servers reachable only via the tailnet - remove fix-CVE-2025-22869.patch, as upstream updated their dependencies
Richard Rahl
2025-05-22 12:04:31 +00:00
e6d7f1a8de
Accepting request 1279265 from home:rrahl0
Richard Rahl
2025-05-22 12:04:31 +00:00
6b4a306d68
Accepting request 1270797 from network:vpn
Ana Guerrero2025-04-18 14:22:03 +00:00
5d8d4501d5
Accepting request 1270797 from network:vpn
Ana Guerrero2025-04-18 14:22:03 +00:00
2d570b44dc
- update to 1.82.5: * A panic issue related to CUBIC congestion control in userspace mode is resolved.
Richard Rahl
2025-04-18 07:42:58 +00:00
05bb77d1e5
Accepting request 1270796 from home:rrahl0
Richard Rahl
2025-04-18 07:42:58 +00:00
0aeff92068
Accepting request 1264694 from network:vpn
Ana Guerrero2025-03-28 06:36:15 +00:00
36d9785e96
Accepting request 1264694 from network:vpn
Ana Guerrero2025-03-28 06:36:15 +00:00
93c5b928dc
- update to 1.82.0: * DERP functionality within the client supports certificate pinning for self-signed IP address certificates for those unable to use Let's Encrypt or WebPKI certificates. * Go is updated to version 1.24.1 * NAT traversal code uses the DERP connection that a packet arrived on as an ultimate fallback route if no other information is available * Captive portal detection reliability is improved on some in-flight Wi-Fi networks * Port mapping success rate is improved * Helsinki is added as a DERP region.
Richard Rahl
2025-03-27 19:53:04 +00:00
a2bdc682d8
Accepting request 1264693 from home:rrahl0
Richard Rahl
2025-03-27 19:53:04 +00:00