1.56.0

All Platforms

• improve responsiveness under load, especially with bidirectional traffic
• improve UPnP portmapping
• add tailscale whois subcommand to observe metadata associated with a Tailscale IP
• include tailnet name and profile ID in tailscale switch --list to disambiguate profiles with common login names
• make System policies beta

Linux

• improve tailscale web interface for configuring some device settings such as exit nodes, subnet routers, and Tailscale SSH
• improve containerboot to symlink its socket file if possible, making the tailscale CLI work without --socket=/tmp/tailscale.sock
• support tailscale update for Unraid

Windows

• improve throughput for userspace ("netstack") mode in the presence of packet loss
• disable dynamic DNS updates for the tailscale interface via registry setting
• begin displaying tailnet name in profile switcher
• improve robustness when restarting GUI processes during Windows client upgrades

macOS

• deliver notification when a file is received using Taildrop (Mac App Store variant only)
• add shortcut action to send files using Taildrop
• add in-app warnings and push notifications when internet connectivity is blocked due to the current exit node being offline or having an expired key
• improve experience stopping Tailscale from the toggle in the menubar; now terminates the VPN tunnel entirely
• inform user when running a TestFlight build from 'About Tailscale' window
• fix /etc/resolv file formatting with Tailscaled-on-macOS
• begin displaying tailnet name in profile switcher

iOS

• add view to show DNS configuration
• add "Allow Local Network Access" to exit node picker UI
• add shortcut action to send files using Taildrop
• include received file names in Taildrop notifications
• add in-app warnings and push notifications when internet connectivity is blocked due to the current exit node being offline or having an expired key
• inform user when running a TestFlight build from 'About Tailscale' window
• reduce app size by about 2 MB with better assets compression
• begin displaying tailnet name in profile switcher

tvOS

• add tvOS UI to be a subnet router and configure routes
• inform user when running a TestFlight build from 'About Tailscale' window

GoKrazy

• use TUN mode by default

Kubernetes

• add support in Kubernetes operator cluster egress for referring to a tailnet service by its MagicDNS name

1.54.1

macOS

• Fixed: Changing a pre-existing system policy value to nil no longer causes stability issues

iOS

• Fixed: Widget tracks the connection state more closely

1.54.0

All Platforms

• update to Go 1.21.4

Linux

• improve throughput substantially for UDP packets over TUN device with recent Linux kernels

Windows

• open menu with a regular click in addition to a right-click

macOS

• don't run taildrop cleanup loop until the first file transfer, avoid spurious security dialog
• implement MDM settings for the macSys app downloadable from pkgs.tailscale.com
• support tailscale update --yes for macSys app

iOS

• show a helpful banner if there are no other devices on the tailnet
• add "Allow Local Network Access" setting when using an exit node
• show info bubble when key expires in < 8 hrs or has expired
• widgets reflect the state of the VPN tunnel more accurately

QNAP

• add tailscale update support

1.52.1

Windows

• Fixed: Resolve an incompatibility with other software that uses wintun

NAS platforms

• Changed: Clean up downloaded upgrades after applying them

1.52.0

All platforms

• tailscale cert command renews in the background. The current certificate only displays if it has expired.
• tailscale status command displays a message about client updates when newer versions are available
• tailscale up command displays a message about client updates when newer versions are available
• Taildrop now resumes file transfers after partial transfers are interrupted
• Taildrop prevents file duplication
• Taildrop detects conflicting file transfers and only proceeds with one transfer
• Wake on LAN (WoL) is now supported for peer node wake-ups
• TCP DNS queries are speculatively started if UDP hasn’t responded quickly enough
• Truncated UDP DNS results are properly retried using TCP
• Go is updated to version 1.21.3

Linux

• tailscale set command flag --auto-update is added to opt in to automatic client updates (beta)
• tailscale serve and tailscale funnel commands are updated for improved usability
• tailscale update command for manual updates is now in beta
• Taildrop file transfer displays a progress meter
• nftables auto-detection is improved when TS_DEBUG_FIREWALL_MODE=auto is used
• DNS detection of NetworkManager with configured but absent systemd-resolved, such as EndeavourOS
• DNS detection for Debian resolvconf version 1.90 or later

Windows

• tailscale set command flag --auto-update is added to opt in to automatic client updates (beta)
• Preferences section contains auto-update setting
• Update notice displays, when a new version is available
• System policies allow system administrators to set a forced/suggested tailnet name, hide settings menu items, and more
• tailscale serve and tailscale funnel commands are updated for improved usability
• tailscale update command for manual updates is now in beta
• iphlpsvc, netprofm, and WinHttpAutoProxySvc service dependencies are checked during installation

macOS

• tailscale set command flag --auto-update is added to opt in to automatic client updates (beta)
• App menu displays a notification item when a newer version is available
• System policies allow system administrators to set a forced/suggested tailnet name, prevent the VPN from stopping, hide categories of network devices and setting menu items, and more
• Settings section has an option added for turning on auto-updates
• Reauthenticate menu item shows time until expiry more prominently, presenting alerts when necessary
• tailscale serve and tailscale funnel commands are updated for improved usability
• tailscale update command for manual updates is now in beta
• About window more clearly distinguishes between the Standalone and App Store variants of the client
• Sparkle is updated to version 2.5.1

iOS

• Settings page displays a notification banner when a newer version is available on the App Store
• Home and lock screen widgets are supported
• System policies allow system administrators to set a forced/suggested tailnet name, prevent the VPN from stopping, hide the VPN On-Demand settings, categories of network devices and settings menu items, and more

tvOS

• DNS support when operating as an exit node

v1.50.1

All Platforms

• Fix Issue 9558: tailscale serve config lost in container
• Fix Issue 9539: tailnet lock failed to sign node in container
• Fix Issue 9566: Funnel support for tsnet apps
• Fix potential crash with UPnP

1.50.0

All platforms

• update to Go 1.21.1.
• tailscale ping now sends an ICMP Ping code of 0.
• UPnP falls back to a permanent lease if a limited lease fails, some servers only support permanent.
• Adds support for Wikimedia DNS using DNS-over-HTTPS.
• Unhide tailscale update CLI command on most platforms.
• tailscale web updated to use React and be more awesome.
• Add --log-http option to tailscale debug portmap.
• tailscale netcheck now works even if the OS platform lacks CA certificates.

Linux

• debian package lists iptables+iproute2 packages as recommended, not required.
• nftables support now interoperates with ufw

Windows

• The Windows executable installer now detects when it is running on Windows 7 or Windows 8.x and will automatically download the appropriate v1.44.2 MSI package, which is the final Tailscale release supporting those operating systems.
• The Windows executable installer no longer embeds MSI packages in its binary. Instead, it automatically downloads the correct package. Users desiring the previous behavior may download the "full" executable installer at pkgs.tailscale.com.
• Added additional diagnostics to logs generated via tailscale bugreport

iOS/tvOS

• First official release with support for tvOS.
• Improved Tailnet Lock support.
• Add Fast User Switching support.
• Improved UI to pick Mullvad VPN exit nodes, including an option to automatically pick the 'best available' node.
• Added the ability to log in to multiple user accounts with Fast User Switching.
• Users using iOS 17 can now customize their device name from the app settings.
• App Shortcuts in Spotlight and Siri are now supported. Try saying: "Hey Siri, connect to Tailscale", or "Hey Siri, is Tailscale connected?". - Find more in the Shortcuts app.
• Added new shortcuts to find and ping devices.
• VPN On-Demand rules are no longer reset when disabling the feature.
• Improved the accessibility of UI items when using VoiceOver.
• Taildrop no longer replaces spaces with "%20" in file names when sending files to Windows devices.

macOS

• Improved Tailnet Lock support.
• Improved UI to pick Mullvad VPN exit nodes, including an option to automatically pick the 'best available' node.
• Added new shortcuts to find and ping devices.
• Reliability improvements when signing devices with Tailnet lock
• Taildrop no longer replaces spaces with "%20" in file names when sending files to Windows devices.

1.48.2

All Platforms

• Fixed: Stability improvements for Mullvad Exit Nodes, particularly for users on IPv4-only networks

1.48.1

Linux

• Fix: resolve nftables interaction between tailscale and ufw which resulted in blocking subnet routed traffic

Synology

• Fix: determine correct CPU architecture on Synology platforms during tailscale update

1.48.0

1.48.0 introduced a regression in the interaction between Tailscale and Linux ufw. The Linux release has been withdrawn pending a fix.

All Platforms:

• Tailscale Lock Beta
• Add --upstream flag to tailscale version
• Add tailscale exit-node subcommand
• The tailscale funnel command provides an interactive web UI that prompts you to allow Tailscale to enable Tailscale Funnel on your behalf
• The tailscale serve command provides an interactive web UI that prompts you to allow Tailscale to enable HTTPS and Tailscale Funnel on your behalf

Linux:

• Support for nftables
• RPM packages are now fully signed
• Support for tailscale update on Alpine, Arch and Fedora distro families

Synology:

• Support for tailscale update

macOS:

• Support for tailscale update

iOS:

• Support for VPN On Demand
• VPN tunnel lifecycle improvements
• Improved exit node selection
• Minor UI tweaks