Changelog on Tailscale

GitOps for Tailscale with GitHub Actions v1.5.2

Mon, 27 Apr 2026 00:00:00 GMT

A new release of GitOps for Tailscale with GitHub Actions is available. You can download it from the GitHub Actions Marketplace.

Fixed: Update dependencies to remove Node 20 deprecation warning.

Aperture

Thu, 23 Apr 2026 00:00:00 GMT

Use Aperture (beta) to secure and manage your LLM agents with a single control plane across all your providers and models.

New: Create custom guardrails with pre-LLM-call hooks to strip or block PII and restrict specific agent tools before requests reach the LLM.
New: Configure log retention time down to zero for request/response capture logs, with S3-compatible export supported.
New: Audit logs for configuration changes and when admins view logs owned by other users are available using a new API endpoint and UI.
Changed: Set customizable quotas across providers, models, users, agents, or individual agent runs.

Access API-only tailnets with OAuth clients

Thu, 23 Apr 2026 00:00:00 GMT

New: API-only tailnets can be accessed by any OAuth client with the all scope in the creating tailnet.

Seat calculator

Wed, 22 Apr 2026 00:00:00 GMT

New: A seat calculator is available to help you understand seat consumption on your account before upgrading to a new plan.

New pricing and packaging

Wed, 08 Apr 2026 00:00:00 GMT

Changed: New tailnet plan signups are billed based on occupied user seats instead of monthly active users. Existing tailnets on a legacy plan will continue to be billed based on monthly active users.
Changed: All plans can have an unlimited number of user devices in a tailnet.
Changed: The Personal plan provides up to six free users instead of the previous three users.
Changed: Ephemeral node usage is free up to a monthly limit, by pricing plan. After four hours in the tailnet, nodes are treated as standard tagged devices and stop consuming ephemeral minutes.
Changed: As part of the Personal plan change, Aperture by Tailscale also provides for up to six free users during the alpha testing phase.
Changed: The Starter plan is no longer available as a plan option for new signups. The new Standard plan is the closest equivalent option.
Changed: Promo codes can be applied to existing plans. Previously, promo codes could only be applied when upgrading to a new plan.

For more information about our pricing plans and the features available for each plan, refer to Pricing and Pricing FAQs.

Workload identity federation GA

Thu, 19 Feb 2026 00:00:00 GMT

Changed: Use workload identity federation (generally available) to authenticate Tailscale API requests with federated OIDC workload identities from third-party providers.

Fleet device posture integration

Wed, 18 Feb 2026 00:00:00 GMT

New: Use Fleet Device Management to collect device posture signals from devices in your tailnet.

Huntress device posture integration

Wed, 18 Feb 2026 00:00:00 GMT

New: Use Huntress Managed EDR to collect device posture signals from devices in your tailnet.

Tailscale Peer Relays GA

Wed, 18 Feb 2026 00:00:00 GMT

Changed: Use Tailscale Peer Relays to set up self-hosted high-throughput relay servers when direct connections aren't possible (generally available).

Aperture by Tailscale

Tue, 17 Feb 2026 00:00:00 GMT

New: Use Aperture by Tailscale to secure and monitor LLM sessions and AI agents (alpha).

Log streaming integration with Google Cloud Storage

Wed, 04 Feb 2026 00:00:00 GMT

New: Tailscale network flow logs and configuration audit logs can be streamed to Google Cloud Storage (GCS).

Workload identity federation updates

Fri, 30 Jan 2026 00:00:00 GMT

New: Workload identity federation supports provider-native identity token authentication for GitOps for Tailscale with GitHub Actions and GitOps for Tailscale with GitLab CI.
New: Token exchange error details for a federated identity can be found in the Trust credentials page of the admin console.

Tailscale Services GA

Tue, 27 Jan 2026 00:00:00 GMT

Changed: Use Tailscale Services to decouple applications and services from the devices that host them (generally available).

tsnet integration for Tailscale Services

Tue, 27 Jan 2026 00:00:00 GMT

New: tsnet application support for Tailscale Services hosts.

IS SET and NOT SET device posture operators

Thu, 22 Jan 2026 00:00:00 GMT

New: IS SET and NOT SET have been added as device posture operators.

India DERP Region City Name updated

Wed, 21 Jan 2026 00:00:00 GMT

Changed: The city name for the DERP server hosted in India has been updated to reflect the official name of Bengaluru. The hosting provider and IP addresses remain unchanged.

Workload identity federation API

Mon, 05 Jan 2026 00:00:00 GMT

New: The Tailscale API supports creating, reading, updating, and deleting federated identities.
New: tailscale-client-go-v2 can configure federated identities.
New: The Tailscale Terraform provider can configure federated identities.

IP changes to Tailscale's logging infrastructure

Thu, 13 Nov 2025 00:00:00 GMT

Changed: The domain log.tailscale.com resolves to static IP address ranges registered and managed by Tailscale. If IP-based rules are required for your firewall, use the IPv4 range 199.165.136.0/24 and the IPv6 range 2606:B740:1::/48.

Note: In most cases, you do not need to configure firewall rules to use Tailscale. For more information, refer to What firewall ports should I open to use Tailscale?

Workload identity federation

Thu, 30 Oct 2025 00:00:00 GMT

New: Use workload identity federation (beta) for creation of federated OIDC workload identities from third-party providers to authenticate requests to the Tailscale API.
New: tailscale-client-go-v2 can use workload identity federation for authentication.
New: The Tailscale Terraform provider can use workload identity federation for authentication.
New: The Tailscale GitHub Action can use workload identity federation for auth key generation.
New: The tailscale up command can use workload identity federation for auth key generation.
New: OAuth client scopes and descriptions are editable in the Trust credentials page of the admin console.
Changed: The Trust credentials page of the admin console replaces the OAuth clients page.

Multiple tailnets for a single organization

Wed, 29 Oct 2025 00:00:00 GMT

New: Administer multiple tailnets (alpha) under a single organization, using a common identity provider and domain.

Tailscale Peer Relays

Wed, 29 Oct 2025 00:00:00 GMT

New: Use Tailscale Peer Relays for client-to-client connections when direct connections aren't possible (beta).

Visual policy editor (GA)

Wed, 29 Oct 2025 00:00:00 GMT

Changed: Use the visual policy editor to create and manage your tailnet policy file (generally available).

Tailscale Services

Tue, 28 Oct 2025 00:00:00 GMT

New: Use Tailscale Services to decouple applications and services from the devices that host them (beta).

Tailnet name type changes in the admin console

Thu, 16 Oct 2025 00:00:00 GMT

Note: For more in-depth details about all the tailnet names and types, refer to Tailnet name types.

New: The Display name field is added to the Settings > General page of the admin console. This is an optional field that lets you assign a custom display name to your tailnet that appears in the admin console, client UI, and client CLI, instead of your domain or email address.
New: The Tailnet ID field is added to the Settings > General page of the admin console. This string should be used in the tailnetId field for Tailscale API path parameters instead of your organization name.
Changed: The Organization field in Settings > General page of the admin console is renamed Legacy ID. This field will continue to display for existing tailnets but will not display for newly created tailnets.

Preset app support for Amazon AWS, Salesforce (Hyperforce), and Microsoft 365

Tue, 14 Oct 2025 00:00:00 GMT

New: Preset apps are available for Amazon AWS services such as Amazon CloudFront, Amazon EC2, and Amazon S3, Salesforce (Hyperforce), and Microsoft 365.

Expanded `autogroup:self` compatibility

Thu, 09 Oct 2025 00:00:00 GMT

Updated: Use autogroup:self as a destination for any grant, ACL, or SSH src that includes autogroup:<role>, groups, or individual users in the tailnet policy file.

Updated devices API

Wed, 08 Oct 2025 00:00:00 GMT

Changed: The Read and List endpoint responses in the Devices API include a connectedToControl flag, which indicates whether the device has recently connected to the Tailscale control server.
Changed: The lastSeen field is included only when connectedToControl is false.

DERP server IP address changes for Singapore

Thu, 11 Sep 2025 00:00:00 GMT

Changed: The IPv4 and IPv6 addresses for the Singapore DERP servers have changed. If you use custom firewall settings that rely on these addresses specifically, refer to the information in our DERP map and make the necessary updates. Otherwise, no action is required.

DERP server IP address changes for Tokyo

Wed, 10 Sep 2025 00:00:00 GMT

Changed: The IPv4 and IPv6 addresses for the Tokyo DERP servers have changed. If you use custom firewall settings that rely on these addresses specifically, refer to the information in our DERP map and make the necessary updates. Otherwise, no action is required.

DERP server IP address changes for Sydney

Tue, 09 Sep 2025 00:00:00 GMT

Changed: The IPv4 and IPv6 addresses for the Sydney DERP servers have changed. If you use custom firewall settings that rely on these addresses specifically, refer to the information in our DERP map and make the necessary updates. Otherwise, no action is required.

DERP server IP address changes for São Paulo

Tue, 19 Aug 2025 00:00:00 GMT

Changed: The IPv4 and IPv6 addresses for the São Paulo DERP servers have changed. If you use custom firewall settings that rely on these addresses specifically, refer to the information in our DERP map and make the necessary updates. Otherwise, no action is required.

Visual policy editor

Tue, 05 Aug 2025 00:00:00 GMT

Updated: Use the visual policy editor to manage your tailnet policy file (beta).

Grafana Cloud integration

Thu, 24 Jul 2025 00:00:00 GMT

New: Securely connect private data sources to Grafana Cloud with Tailscale (beta).

IP changes to Tailscale's control plane

Thu, 17 Jul 2025 00:00:00 GMT

Changed: The domains login.tailscale.com, controlplane.tailscale.com, and api.tailscale.com resolve to static IP address ranges registered and managed by Tailscale. If IP-based rules are required for your firewall, use the IPv4 range 192.200.0.0/24 and the IPv6 range 2606:B740:49::/48.

Note: In most cases, you do not need to configure firewall rules to use Tailscale. For more information, refer to What firewall ports should I open to use Tailscale?

Tailscale GitHub Action fix for headless Windows runners

Thu, 26 Jun 2025 00:00:00 GMT

Fixed: The Tailscale GitHub Action works on headless Windows-based runners for systems that do not have a graphical desktop environment. Previously, running tailscale up would fail on systems such as Windows 11 Arm64 due to the missing --unattended argument required to enable unattended mode.

Tailnet Lock GA

Mon, 23 Jun 2025 00:00:00 GMT

Changed: Tailnet Lock GA (generally available)
- Use Tailnet Lock to require your tailnet to verify new node keys distributed by the coordination server before trusting them.

App connectors GA

Tue, 03 Jun 2025 00:00:00 GMT

Changed: App connectors GA (generally available)
- Secure your software as a service (SaaS) application connections to your tailnet with app connectors.

Updated UI to prevent accidental tailnet policy file changes

Tue, 03 Jun 2025 00:00:00 GMT

New: Policy file management page in the admin console. Use the Policy file management page to prevent accidental policy file changes.
New: Use the External reference section in the Policy file management page to specify the URL for your GitOps for Tailscale repository.
Changed: We deprecated the GitOps code comment technique for specifying the URL for your GitOps for Tailscale repository. Use the Policy file management page in the admin console instead. If you use both the Policy file management page and the code comment technique, the Policy file management setting has precedence.

Grants GA

Thu, 29 May 2025 00:00:00 GMT

Changed: Use grants to define unified network and application layer access controls (generally available).
- Note: The default tailnet policy file now uses grants syntax instead of the original ACL syntax, but makes no changes to the effective permissions. This applies to all new tailnets and any tailnet policy file that has never been edited.
Changed: Use via to control how traffic routes from a source to a destination, such as through specific exit nodes, subnet routers, or app connectors (generally available).

Programmatic management of OAuth clients

Mon, 05 May 2025 00:00:00 GMT

New: The Keys management APIs and Terraform Provider support managing OAuth clients programmatically.

Trigger device posture integration for new nodes

Tue, 22 Apr 2025 00:00:00 GMT

New: We made a change to how device posture integrations are scheduled, prioritizing syncing of attributes for new nodes. Tailnets that use device posture integrations should see third-party attributes populated for new nodes faster than before.

Code folding in ACL editor

Mon, 21 Apr 2025 00:00:00 GMT

New: The ACL editor in the Access Controls page of the admin console supports code folding, improving usability when navigating and managing large tailnet policy files. Collapse and expand sections like hosts and groups for a cleaner editing experience.

Tailscale GitHub Action for macOS and Windows GA

Wed, 09 Apr 2025 00:00:00 GMT

Changed: Use the Tailscale GitHub Action on macOS and Windows runners (generally available). For more information, see the topic Tailscale GitHub Action.
Changed: The Tailscale GitHub Action supports caching Tailscale binaries when the use-cache input is set to 'true'.

Tailscale Kubernetes Operator session recording

Wed, 02 Apr 2025 00:00:00 GMT

New: Use Tailscale Kubernetes Operator session recording to record kubectl exec session contents when using the Kubernetes API server proxy (beta).

Tailscale Kubernetes Operator GA

Wed, 02 Apr 2025 00:00:00 GMT

Changed: Tailscale Kubernetes Operator GA (generally available).
- Use the Kubernetes Operator to integrate Tailscale with Kubernetes clusters.

Tailscale GitHub Action support for Windows and macOS

Thu, 13 Mar 2025 00:00:00 GMT

New: The Tailscale GitHub Action supports running on Windows runners (beta).
New: The Tailscale GitHub Action supports running on macOS runners (beta).

Admin console session timeout update

Fri, 07 Mar 2025 00:00:00 GMT

Fixed: An issue related to admin console sessions remaining active longer than the configured console session inactivity timeouts (TS-2025-001).

Helsinki DERP region

Wed, 05 Mar 2025 00:00:00 GMT

New: Helsinki is added as a DERP region.

Tailscale promo codes for plan upgrades

Wed, 05 Mar 2025 00:00:00 GMT

New: Promo codes can be applied when upgrading to a Tailscale paid plan in the Billing page of the admin console. While upgrading your plan, go to the Upgrading to section and select Apply promo code. For more information, see Pricing & Plans FAQ.

Ashburn and Nuremberg DERP regions

Thu, 13 Feb 2025 00:00:00 GMT

New: Ashburn and Nuremberg are added as DERP regions. We added them December 5, 2024, and apologize for the late notice.

Country device posture attribute GA

Fri, 07 Feb 2025 00:00:00 GMT

Changed: Use ip:country as a geolocation device posture attribute (generally available).

GitHub username change automatically updates tailnet name

Wed, 29 Jan 2025 00:00:00 GMT

Changed: When a user changes their GitHub username used to authenticate to a GitHub personal tailnet, upon next Tailscale login their tailnet name will automatically be renamed. This is a change from the previous behavior, which required the user to file a request with the Tailscale support team to rename the tailnet.

4via6 subnet routers GA

Mon, 27 Jan 2025 00:00:00 GMT

Changed: Use 4via6 subnet routers to route traffic when you have existing subnets with overlapping IPv4 addresses (generally available).

Auto approvers GA

Mon, 27 Jan 2025 00:00:00 GMT

Changed: Use auto approvers to auto-approve advertised subnet routes and exit nodes (generally available).

Node attributes GA

Mon, 27 Jan 2025 00:00:00 GMT

Changed: Configure different NextDNS profiles for different devices using nodeAttrs (generally available).

Download invoices GA

Mon, 27 Jan 2025 00:00:00 GMT

Changed: Download invoices for your Tailscale account in the Billing page of the admin console (generally available).

Fast user switching GA

Mon, 27 Jan 2025 00:00:00 GMT

Changed: Use fast user switching to quickly switch between two or more logged-in accounts on the same device, without requiring you to re-authenticate (generally available).

Configuration log streaming integration with S3 buckets GA

Mon, 27 Jan 2025 00:00:00 GMT

Changed: Stream configuration audit logs to Amazon S3 and S3-compatible services (generally available).

Network flow log streaming integration with S3 buckets GA

Mon, 27 Jan 2025 00:00:00 GMT

Changed: Stream network flow logs to Amazon S3 and S3-compatible services (generally available).

NextDNS profiles per device GA

Mon, 27 Jan 2025 00:00:00 GMT

Changed: Use different NextDNS profiles for different devices (generally available).

GitHub secret scanning

Wed, 22 Jan 2025 00:00:00 GMT

New: GitHub secret scanning supports detecting and revoking leaked Tailscale secrets.

Mullvad exit nodes with trial tailnets

Thu, 12 Dec 2024 00:00:00 GMT

Changed: The Mullvad exit nodes add-on can be purchased for tailnets that are in trial mode.

Note: Purchasing the Mullvad exit nodes add-on for your trial tailnet will result in changes requiring action. For more information, see the Pricing & Plans FAQ topic.

Device posture integrations GA

Wed, 11 Dec 2024 00:00:00 GMT

Changed: Device posture integrations GA (generally available)
- Restrict device access with Tailscale device posture management and additional GA integrations: Jamf Pro, Kandji, Microsoft Intune, and SentinelOne.

Country device posture attribute

Wed, 27 Nov 2024 00:00:00 GMT

New: ip:country has been added as a device posture attribute (beta).

New and more granular OAuth scopes

Thu, 14 Nov 2024 00:00:00 GMT

Changed: New scopes for OAuth clients have been added with more granular permissions. Existing OAuth clients using the previous set of scopes, and keys generated using these clients, are still valid.

Log streaming integration with S3 buckets

Fri, 08 Nov 2024 00:00:00 GMT

New: Tailscale network flow logs and configuration audit logs can now be streamed to Amazon S3 and S3-compatible services (beta).

User approval and Invite any user GA

Tue, 05 Nov 2024 00:00:00 GMT

Changed: User approval GA (generally available)
Changed: Invite any user GA

1Password XAM device posture integration GA

Thu, 24 Oct 2024 00:00:00 GMT

Changed: 1Password Extended Access Management (XAM) GA (generally available)
- Restrict device access with 1Password XAM (formerly known as Kolide) and Tailscale device posture management.

Google Workspace integration GA

Wed, 16 Oct 2024 00:00:00 GMT

Changed: User & group provisioning for Google Workspace GA (generally available)
- Sync Google Workspace groups and users to use in your Tailscale ACLs.

Personal Plus pricing plan

Thu, 03 Oct 2024 00:00:00 GMT

New: The Personal Plus pricing plan offers the same features as the Personal plan with up to 6 users for a flat rate. For details about billing, plan comparison, and support, see Pricing & Plans FAQ.

Tailnet deletion

Wed, 02 Oct 2024 00:00:00 GMT

Changed: Tailnets containing multiple users can be deleted from the admin console without first deleting the users manually.

Parameters added to Set custom device posture attributes endpoint

Fri, 27 Sep 2024 00:00:00 GMT

New: The optional expiry and comment parameters have been added to the Set custom device posture attributes endpoint of the device posture attribute API.

MAC addresses matching in CrowdStrike Falcon

Wed, 11 Sep 2024 00:00:00 GMT

New: Device posture integration with CrowdStrike Falcon can now use MAC addresses to match devices that lack serial numbers. When Falcon integration is configured, Device Identity Collection will automatically collect MAC addresses.

Configurable session timeouts

Fri, 23 Aug 2024 00:00:00 GMT

New: Admin console session timeouts from inactivity are now configurable from the User Management Settings page of the admin console.

Via in Access Control Previews

Thu, 15 Aug 2024 00:00:00 GMT

New: Access control policies using via are included in the Preview rules tab of the Access Controls page of the admin console.

Microsoft Entra ID SCIM GA

Tue, 13 Aug 2024 00:00:00 GMT

Changed: User & group provisioning for Microsoft Entra ID GA (generally available)
- Sync Microsoft Entra ID groups and users to use in your Tailscale ACLs.

Autogroups allowed as SSH source in ACLs

Thu, 08 Aug 2024 00:00:00 GMT

New: SSH src in ACL rules supports all role-based autogroups.

New device posture integrations

Fri, 02 Aug 2024 00:00:00 GMT

New: 1Password XAM is available as a device posture integration (beta)
New: Jamf Pro is available as a device posture integration (beta)
New: Kandji is available as a device posture integration (beta)
New: Microsoft Intune is available as a device posture integration (beta)
New: SentinelOne is available as a device posture integration (beta)

Control D integration

Thu, 25 Jul 2024 00:00:00 GMT

New: Control D DNS is available as a global nameserver in your tailnet.

New API endpoints

Mon, 22 Jul 2024 00:00:00 GMT

We have added the following endpoints to Tailscale's public API:

Indent has shut down

Mon, 15 Jul 2024 00:00:00 GMT

New: Indent shut down their service effective July 15, 2024. If you were using Indent with your Tailscale network, migrate to another on-demand access system or Tailscale's just-in-time accessbot (alpha), or otherwise turn off your Indent integration with Tailscale.

Plan enrollment changes for new tailnets

Thu, 11 Jul 2024 00:00:00 GMT

New: The process for creating a new tailnet now asks you if the tailnet will be primarily used At work or At home. This determines whether to enroll the tailnet into a 14-day trial or the Personal plan. For more details, see the Tailscale quickstart topic.
Changed: Newly created tailnets using custom domains are no longer automatically enrolled in a trial. Instead, the At work or At home selection determines trial enrollment.

New API endpoints, OpenAPI spec, and interactive API docs

Wed, 10 Jul 2024 00:00:00 GMT

New: Access an OpenAPI spec for the Tailscale API. The spec is used to generate our new interactive documentation. Note that the spec definition may change without notice, so should not be relied upon for stability.
New: Access interactive documentation for the Tailscale API.

New API endpoints

We have added the following endpoints to Tailscale's public API:

Logging endpoints

New: Get log streaming status.
New: Get log streaming configuration.
New: Set log streaming configuration.
New: Disable log streaming.
Changed: Created a new endpoint for listing configuration audit logs. An earlier version of this endpoint is still supported for backwards compatibility.
Changed: Created a new endpoint for listing network flow logs. An earlier version of this endpoint is still supported for backwards compatibility.

Webhook management endpoints

Device posture endpoints

User management endpoints

New: List all users in the tailnet.
New: Get details about a specific user.
New: Update the role for a specific user.
New: Approve a pending user's access to the tailnet. This is only applicable to tailnets that have enabled user approval.
New: Suspend a user. Available for the Personal and Enterprise plans.
New: Restore a suspended user. Available for the Personal and Enterprise plans.
New: Delete a user. Available for the Personal and Enterprise plans.

User invite endpoints

Device invite endpoints

Contact preferences endpoints

New: List the tailnet's current contact preferences.
New: Update a tailnet contact.
New: Resend the verification email for a tailnet contact.

Automatically cleanup invites

Wed, 10 Jul 2024 00:00:00 GMT

New: Invite team member invites are now automatically deleted 90 days after the last welcome email was sent.

IP sets GA

Mon, 08 Jul 2024 00:00:00 GMT

Changed: IP sets GA (generally available)
- Use IP sets to target and manage cross-sections of your tailnet independently of other groupings like subnets, tags, and groups.

Via in grants

Mon, 08 Jul 2024 00:00:00 GMT

New: Use Via to add routing awareness to grants (beta).
- Define the exit nodes, subnet routers, or app connectors a source can access when they use a specific destination.

Sync Google Workspace groups to use in your Tailscale ACLs

Tue, 25 Jun 2024 00:00:00 GMT

New: User & group provisioning for Google Workspace (beta)

Indent shutting down July 15, 2024

Fri, 21 Jun 2024 00:00:00 GMT

New: Indent has announced they are shutting down 12:00 PM PST July 15, 2024. If you are using Indent with your Tailscale network, migrate to another on-demand access system or Tailscale's just-in-time accessbot (alpha), or otherwise turn off your Indent integration by that time.

Auto exit nodes

Thu, 30 May 2024 00:00:00 GMT

New: You can now automatically select a recommended exit node based on client information (such as location).

Exit node destination logging

Fri, 24 May 2024 00:00:00 GMT

New: Exit node destination logging can now be configured from the Network flow logs tab in the Logs page of the admin console.

Dark mode in the admin console

Wed, 15 May 2024 00:00:00 GMT

New: Use the Light, Dark, or Use system setting theme in the admin console by clicking the avatar menu on the top-right and selecting Appearance. The default theme is Use system setting.

Support for Amazon Fire devices

Fri, 10 May 2024 00:00:00 GMT

New: The Tailscale app for Android is now available in the Amazon Appstore for Amazon Fire TVs and tablets.

ACL syntax updates

Wed, 08 May 2024 00:00:00 GMT

Changed: As part of a security fix to address an issue related to exit nodes and subnet routing (TS-2024-005), changes are made to ACLs.
- The meaning of * when used in the src field in ACLs has been changed. Previously, * expanded to include any IPv4 and IPv6 address. With this change, * expands to all Tailscale IP addresses and all IP addresses from approved subnet routes.
- The new autogroup:danger-all ACL type has been added, which matches the previous definition of * when used in the src field. If you are using default ACLs or have specified * in src, you don't need to make any ACL changes to get the new secure behavior.
- We recommend updating all Tailscale clients to v1.66 to benefit from the additional security improvements.

Device posture management GA

Wed, 01 May 2024 00:00:00 GMT

Changed: Device posture management GA (generally available)
- Use Device posture management to collect device properties and set device connectivity rules within your Tailscale network. Leverage Tailscale's integration with CrowdStrike to use Falcon Zero Trust Assessment (ZTA) scores to enable granular access control based on device health and security.

Manage split DNS in API and Terraform

Tue, 30 Apr 2024 00:00:00 GMT

New: The API can now read, update, and set split DNS.
New: The Tailscale Terraform provider can now manage split DNS.

Log streaming with Axiom

Tue, 23 Apr 2024 00:00:00 GMT

New: Log streaming integration with Axiom GA (generally available).
- Use Axiom for log streaming.

Windows OS versions in admin console

Mon, 22 Apr 2024 00:00:00 GMT

Changed: Windows machines in the admin console are now displayed using their marketing version number instead of their internal version number.

All identity providers available to everyone

Thu, 18 Apr 2024 00:00:00 GMT

Changed: Allowable identity providers are no longer limited by pricing plan. Any supported identity provider is available to all plans.

Changelog update

Mon, 15 Apr 2024 00:00:00 GMT

Changed: The Tailscale changelog has migrated to a new server. To prevent disruptions to RSS readers that subscribe to our changelog, we have limited the RSS feed to entries published on or after 2024-04-15. Existing RSS subscriptions should not lose access to older entries that have already been downloaded. The full changelog history is always available on our website

Share devices by email from the admin console

Mon, 15 Apr 2024 00:00:00 GMT

New: Share devices by sending emails directly from the admin console. The email will contain the invitation and instructions on how to accept the device share.