v1.14.0

All Platforms

• Improved Portmapping to ask a firewall to open a port:
  • NAT-PMP has been implemented for some time.
  • This release adds support for Port Control Protocol response to NAT-PMP, which some firewalls send.
  • If neither NAT-PMP nor PCP is present, fall back to Universal Plug and Play Internet Gateway Device support.
  • The net effect is that 1.14 is substantially more likely to make a direct connection from residential/SMB environments, and not need to use a DERP Relay. Enabling NAT-PMP/UPnP support in the router will enable this.
• Allow access to local VMs and Docker Containers while using an exit node.
• The tailscaled daemon continues to log less (an ongoing effort each release)

Windows

• Update to wintun 0.13.

FreeBSD

• FreeBSD can now function as an exit node.

v1.12.4

This release was only built for Synology platforms, intended to update the 1.9.156 version currently in the Synology Package Center.

v1.12.3

Fix #2566, iOS memory-related crashes.
Improve UPnP port discovery.

v1.12.2

withdrawn.

v1.12.1

Bug fixes

• fix #2533, a crash on an unfortunately sized EDNS packet

1.12.0

IMPORTANT: To ensure preferences are properly saved and avoid #2321, prior to update of Linux tailscale please tailscale down; tailscale up

Bug fixes, improvements

• MagicDNS now uses DNS-over-HTTPS when querying popular upstream resolvers, so DNS queries aren't sent in the clear over the Internet.
• Portmapper now supports UPnP mappings as another way to traverse NAT.
• Support serverless container operation with Azure App Services, AWS App Runner, AWS Lightsail Containers, and other AWS container services built atop AWS Fargate infrastructure.
• Fix saving of preferences when bringing tailscale from down to up. (also in 1.10.2)
• Clamp EDNS size when forwarding DNS queries.
• Fix UDP forwarding for --tun=userspace-networking when functioning as a subnet router #2302.

Platform-specific

Windows

• Support Windows Server Core via CLI mode, use tailscale up --unattended
• Improve DNS support for WSL2.
• Add a UI toggle to allow LAN access while using an exit node.

MacOS

• Fix double escaping of filenames sent via Taildrop.
• Add a "Bug Report" option, accessible while holding Option while clicking on the Tailscale menubar icon and selecting Debug > Bug report...

Linux

• Fix several Resume-from-Suspend issues #1591 #1812 #2458.
• Add MIPS64 binaries.
• Print more useful error message from tailscale up if tailscaled is not running.

Android

• If a device has no Tailscale IPv4 address, like an ephemeral node, display the IPv6 address.

Synology

• Add packages for 88f6281, 88f6282, hi3535.

1.10.2

IMPORTANT: To ensure preferences are properly saved and avoid #2321, prior to update of Linux tailscale please tailscale down; tailscale up

• reliably save prefs (fixes #2321)
• fix Taildrop receipt of files with escaped names and MacOS double-escaping filenames (fixes #2288)

1.10.1

From https://github.com/tailscale/tailscale/commits/release-branch/1.10

• fix data race which could cause the backend to crash under heavy load.
• in --tun=userspace-networking mode, allow SOCKS5 connections to IPv6 addresses like ephemeral nodes
• fix connection issue which could cause loss of connectivity in 1 out of 256 attempts

v1.10.0

Bug fixes, improvements

• primarily a bugfix and stabilization release
• this release fully deforks wireguard-go, all Tailscale changes have been pushed upstream or moved elsewhere
• tailscale ping --until-direct (the default) now exits with a non-zero exit code if no direct connection was established.
• TS_DEBUG_MTU environment variable can be set to change the tailscale0 MTU size; has to be changed for both nodes wanting to use larger packets. Setting the MTU larger than 1468 is unlikely to work. For Linux platforms, it can be set in /etc/default/tailscaled
• early work towards Tailscale-as-a-library
• allow extra records in DNS to support LetsEncrypt DNS-01 challenge

Platform-specific

MacOS

• support MacOS 12
• add UI to allow access to the local LAN while using an exit node
• fixed use of Tailscale IP addresses as DNS servers

Linux

• many fixes for various combinations of Linux NetworkManager, systemd-resolved, and resolvconf DNS support
• support userspace-networking operation in AWS Lambda containers
• add RISC-V binaries

iOS

• support iOS 15
• fixed use of Tailscale IP addresses as DNS servers

Android

• fixed use of Tailscale IP addresses as DNS servers
• add Taildrop support

v1.8.7

• Fix #1996 for Windows clients
• Fix #2024 for SRV records in Magic DNS
• For Synology web, restrict access to synology admins.