1.32.1

Fix: avoid a condition which can result in high CPU consumption on macOS
Fix: correct IPv6 MTU setting on Windows
Fix: avoid crash in tailscale netcheck
Fix: fix taildrop failures when sending many files from macOS

1.32.0

All Platforms

• support NextDNS
• fix IP fragmentation handling as an exit node
• fix SSH inadvertently closing tmux/etc panes at disconnect
• add tailscaled --no-logs-no-support (or TS_NO_LOGS_NO_SUPPORT=true env variable)
• add more in-depth healthchecks in a bugreport
• always respond to 4via6 ICMP echo requests
• tailscale netcheck looks for a captive portal
• normalize more process names in Services report
• update to Go 1.19.2
• add tailscale bugreport --record to pause and write another bug report

Linux

• coexist with mwan3 package iptables rule fwmark masks, for OpenWRT
• add an eBPF helper to pass the first packet on a new flow up to tailscaled
• better detect being run in a container

Windows

• log Windows service diagnostics when the wintun device fails to install

macOS

• fix incorrect list of taildrop target devices

iOS

• fix incorrect list of taildrop target devices

Android

• show an error when we cannot accommodate multiple users

Synology

• fix configure-host version parsing
• add envknob support

1.30.2

• fix IPv6-mapped-IPv4 addresses in STUN responses
• better container detection

v1.30.1

Fixes

• fix exit-nodes in --tun=userspace-networking mode with no IPv6 connectivity to not break Chrome 104+
• fix SIGINT when running in a container without job control

v1.30.0

All Platforms

• delete node immediately if tailscaled exits and was using mem: state storage
• report whether a subnet router is running in userspace-networking or kernel mode.
• send Tailscale client version number in ACME requests (to LetsEncrypt, for example)
• add a timeout when writing to BIRD socket
• use DNS-over-HTTPS for Mullvad DNS servers
• add tailscale licenses with link to open source licenses
• clients can use Noise with any HTTPS port with capver 39 (mainly for Headscale)
• 100.100.100.100 will respond with SERVFAIL if there are no upstream resolvers
• tsnet ephemeral nodes will delete themselves on Close()
• report whether host kernel supports IPv6
• misc performance optimizations, smaller bug fixes

Linux

• gracefully handle restarts in systemd-resolved support

Windows

• notice when group policy entries change and move our NRPT rules between the local and group policy subkeys as needed
• avoid 2.3 second DNS lookup delay when Smart Name Resolution is enabled by adding MagicDNS names to hosts file
• disable NetBIOS nameservice on Tailscale intefaces
• update Proxy support
• add native ARM build for backend Tailscale service (only in NSIS installer in this release)

macOS

• report variant (App Store, macSys) in the About box

iOS

• fix potential crash in notification handling
• fix dismissing of error indication if a bugreport fails

Android

• Fix Google Stadia, Android Auto, GoPro, and Messages RCS with the VPN active.
• Allow coordination server URL to be set. Click the Authentication menu three times quickly to enable.

Synology

• fix /dev/net permissions in tailscale configure-host

OpenBSD

• support functioning as a subnet router or exit node using hybrid netstack mode

Other

• accommodate shared nodes in nginx-auth
• fix race in derper (Custom DERP servers) with manual certificates.

v1.28.0

All Platforms

• MagicDNS recursive resolution now returns SERVFAIL if all upstream resolvers fail
• fix tailscale ping -c N to properly exit after N ping requests even if there are timeouts
• portmapper: send discovery packet for IGD specifically, some routers don't respond to ssdp:all
• add ExitNodeStatus to tailscale status --json

Linux

• implement specific DNS support for AWS, Google Cloud, and Azure to add internal split DNS domain & fallback DNS

Windows

• set registry values to not send DNS changes concerning our interface to AD domain controllers
• update Windows split DNS settings to work alongside other NRPT entries set by group policy
• suppress nonfunctional link-local IPv6 addresses on Tailscale interface, Powershell ping (hostname) now works correctly
• set AllowSameVersionUpgrades attribute on MajorUpgrade tag in Windows MSI script

macOS

• Use one large 100.64.0.0/10 route entry if there are no other interfaces using CGNAT, to avoid Network Changed errors in browsers where possible

iOS

• the minimum iOS version is now iOS 15, which makes substantially more memory available (the App Store will offer Tailscale 1.26.2 for iOS 13 and 14 devices)
• add portmapper support for NAT-PMP, PCP, UPnP
• add MagicDNS support for TCP

Android

• Android can now be an exit node (previously available but hidden)

v1.26.2

All Platforms

• fix tailscaled being able to restart while mosh-server is running from an SSH session
• make tailscale up --operator="" clear a previously set operator

Linux

• fix Tailscale SSH support with Arch Linux

Windows

• make ssh command prefer Windows ssh.exe over PATH

macOS

• limit SSH login to 16 groups

iOS

• try harder to notify for SSH check mode

v1.26.1

Bugfixes.

v1.26.0

All Platforms

• Added tailscale ping --peerapi <peer> to check connectivity to a peer using the PeerAPI.
• tailscale.com/client/tailscale package refactored w/ LocalClient type
• allow LoginInteractive via LocalAPI
• MagicDNS supports DNS/TCP and handling IP fragmented UDP frames
• add an overall 10 second timeout for recursive MagicDNS queries
• add Wake-on-LAN function to PeerAPI (no UI for it yet)
• change MagicDNS "via route" DNS names from "via-SITEID.10.2.3.4" to "10.2.3.4.via-SITEID". The old format will continue to work for a release or two.
• configured MTU is now consistent between TUN device and userspace device.
• Added --timeout <duration> flag to tailscale up to enforce a maximum amount of time to wait for the Tailscale service to initialize

Windows

• fix MagicDNS lookup of own hostname
• fix handling of >50 Split DNS domains
• resolve one source of shutdown delay (may still be more)
• add TS_NOLAUNCH property to allow admins to deploy silent MSI installs without automatically starting the GUI: msiexec /quiet filename.msi TS_NOLAUNCH=1

macOS

• Tailscaled-on-macOS now supports MagicDNS (including Split DNS)
• Initial release of a standalone macOS client, which is independent of the App Store, in the stable track

iOS

• add bug report UI

Synology

• Allow the NAS disks to hibernate by moving telemetry buffering to tmpfs
• Fix HTTP proxy handling

v1.24.2

All platforms

• fix handling of HTTP proxies in certain circumstances
• fix another issue where the new control plane protocol could fail to make a connection to our servers (#4557)

Synology

• additional fix in handling of HTTP proxies