Releasesby GlyphPublic IP address device posture attribute
The ip:publicAddress device posture attribute is now generally available. It can be used in posture checks and is visible in the Tailscale admin console.
Tailscale releases
November 2026 digestTailscale 1.104.5
Please refer to the changelog available at https://tailscale.com/changelog
Tailscale v1.104.5
All Platforms Fixed: Connectivity stalls affecting Tailscale SSH , Tailscale Serve , and tsnet on lossy networks are resolved. Fixed: Tailscale SSH sessions no longer disconnect when a check mode approval expires. Fixed: An issue that could cause Tailscale SSH restarts to hang or background tasks to terminate is resolved.
Tailscale 1.104.4
Tailscale released version 1.104.4 of its networking client software.
Device Provisioning with OAuth Apps
Tailscale has made Device Provisioning via OAuth Apps generally available, allowing for programmatic management of device provisioning through the Tailscale API.
Tailscale 1.104.2
Please refer to the changelog available at https://tailscale.com/changelog
MagicRoute
- New: Use MagicRoute ( beta ) to choose between redundant subnet routers, app connectors, exit nodes, and Tailscale Service hosts. Changed: Configure how the tailnet performs Route selection , replacing the toggle that enabled Regional Routing in the admin console.
Self-serve identity provider changes GA
- Changed: Users with the Owner role can switch their tailnet's identity provider from the admin console for supported providers ( generally available ).
Tailscale Kubernetes Operator v1.104.1
A new release of the Tailscale Kubernetes Operator is available. For guidance on installing and updating, refer to our installation instructions . New: Ingress ProxyGroups can share a single persistent Let's Encrypt account key per tailnet to ensure certificate renewals keep their exemption from Let's Encrypt rate limits .
Device Posture Monitoring and Alerts
Configure monitoring and alerts for device posture (beta) to help admins and end-users diagnose connectivity problems caused by failing posture. New: Badges can be shown on the Machines page of the admin console when a device is failing a posture (beta) . New: The Failing Posture filter on the Machines page shows devices that are failing selected postures.
Tailscale 1.104.1
Please refer to the changelog available at https://tailscale.com/changelog
Declarative node sharing
- New: Declarative node sharing lets tailnet admins use policy to securely share resources between trusted tailnets ( alpha ).
Tailscale v1.102.5
Linux Fixed: The client no longer stops tailscaled when it falls behind on status updates and the connection is closed, which was common on large tailnets. It reconnects instead, and exits only if it cannot reconnect within one minute.
Tailscale PAM
- Changed: The PAM web client at my.tailscale.com runs as a single browser-based Tailscale device that is shared across all of your browser tabs. After authenticating once, connecting to a service in a new tab no longer requires you to reauthenticate for every subsequent connection.
Tailscale container image v1.102.5
A new release of the Tailscale container image is available. You can download it from Docker Hub or from our GitHub packages repository . Fixed: The container no longer stops tailscaled when it falls behind on status updates and the connection is closed, which was common on large tailnets.
View device posture status
- When checking the device posture status of a machine on the Machines page of the admin console, you can see the assertions the posture requires, each machine's value, and whether it's passing. For each posture, you can also see a count of policy file rules that affect a machine and require this posture.
Tailscale GitHub Action v4.2.0
- Fixed: The Tailscale GitHub Action properly skips re-downloading binaries on linux if a file with a matching SHA already exists. New: The Tailscale GitHub Action groups log output by default. Use the log-mode parameter to control whether the logging output is grouped, ungrouped, or run in "quiet" mode.
Tailscale Kubernetes Operator v1.102.4
A new release of the Tailscale Kubernetes Operator is available. For guidance on installing and updating, refer to our installation instructions . Fixed: ProxyGroup reconciler no longer triggers on incorrect events.
Tailscale 1.102.4
Please refer to the changelog available at https://tailscale.com/changelog
Tailscale PAM
Use Tailscale Privileged Access Management (PAM) ( beta ) to provide application-aware access to resources in your Tailscale network. New: Services can be defined for privileged access, including SSH , database , RDP , HTTPS , Kubernetes , and Amazon S3 types. New: Sessions can be recorded for SSH, database, HTTPS, and Kubernetes Service types.
Aperture by Tailscale GA
Use Aperture ( generally available ) to secure and manage AI agents and LLM sessions with cost controls, request and response hooks, guardrails, logging, MCP support, and API proxying. New: A promotional model token credit is included for use with new and existing Aperture gateways.
Tailscale 1.102.3
Please refer to the changelog available at https://tailscale.com/changelog
Tailscale Kubernetes Operator v1.102.3
A new release of the Tailscale Kubernetes Operator is available. For guidance on installing and updating, refer to our installation instructions . Fixed: Peer relays on AWS are reachable regardless of the availability zone their pod is scheduled in. Pinning Elastic IPs also requires pinning the pods to the same zone using a ProxyClass .
Tailnet list API pagination
- Changed: The list tailnets endpoint paginates results. By default, organizations with more than 100 tailnets now receive only the first 100 results, with totalCount and cursor parameters to retrieve additional results. New: limit and cursor query parameters are supported on the list tailnets endpoint.
Tailscale Kubernetes Operator v1.102.2
A new release of the Tailscale Kubernetes Operator is available. For guidance on installing and updating, refer to our installation instructions . New: PeerRelays are deployable in-cluster via a custom resource . New: Annotations can now be applied to the operator's deployment resource via Helm.
Tailscale container image v1.102.2
A new release of the Tailscale container image is available. You can download it from Docker Hub or from our GitHub packages repository . This version contains no changes except for library updates.
Tailscale 1.102.2
Please refer to the changelog available at https://tailscale.com/changelog
Tailscale 1.102.1
Please refer to the changelog available at https://tailscale.com/changelog
Tailnet creation API
- New: Use the tailnet creation API to create, list, and delete API-only tailnets in your organization ( alpha ).
Tailscale 1.98.10
Please refer to the changelog available at https://tailscale.com/changelog
Admin console URL change
- Changed: The Tailscale admin console is now available at console.tailscale.com . Authentication continues to use login.tailscale.com , and requests to login.tailscale.com/admin/ automatically redirect to the new subdomain.
Tailscale 1.98.9
Please refer to the changelog available at https://tailscale.com/changelog
Tailscale v1.98.9
All Platforms Fixed: Tailscale Serve Unix socket proxy targets are restricted to the root user. This fix addresses a security vulnerability described in TS-2026-005 . Fixed: Tailscale SSH does not allow the use of UIDs or numeric-only usernames. This fix addresses a security vulnerability described in TS-2026-006 .
Nested group support for synced groups
- New: Microsoft Entra ID and Google Workspace group sync includes members of nested groups.
Self-serve identity provider changes
- New: Users with the Owner role can switch their tailnet's identity provider from the admin console for supported providers ( beta ).
Device Provisioning with OAuth Apps
- New: Create and manage OAuth Apps for Device Provisoning with the Tailscale API (alpha) .
Public IP address device posture attribute
- New: ip:publicAddress device posture attribute is available for use in postures and viewable on the Machines page of the admin console. To test, go to the Settings page of the admin console and toggle Public IP addresses for device posture (beta) .
Tailnet system policy values
- Changed: The Tailnet system policy accepts a comma-separated list of tailnet IDs or organization IDs.
Log streaming integration with Azure Blob Storage
- New: Tailscale network flow logs and configuration audit logs can be streamed to Azure Blob Storage .
Aperture chat, connectors, and sandboxes
- New: Use identity-aware connectors to let agents and users reach your data via MCP and API endpoints ( alpha ). Tailnet access controls apply to every request, giving you one identity system across the chat interface and any agent connected to your tailnet.
Group visibility on Tailscale clients
- New: Configure devices in your tailnet to receive group membership information from the Tailscale control plane ( alpha ).
Tailscale 1.98.5
Please refer to the changelog available at https://tailscale.com/changelog
Tailscale v1.98.5
All Apple Platforms Changed: macOS and iOS clients are now built using the Xcode 26.5 toolchain.
Preset app support for Oracle Cloud Infrastructure (OCI)
- New: Preset apps are available for Oracle Cloud Infrastructure (OCI) , including per-region compute and networking, per-region Object Storage, and a global preset for the Oracle Services Network (OSN).
Tailscale v1.98.4
All Platforms Fixed: An issue causing a deadlock when processing peer changes and disconnecting from the Tailscale control server is resolved.
Tailscale Terraform Provider v0.29.2
v0.29.2 of the Tailscale Terraform Provider has been released with the following changes: Fixed: A regression in tailscale_tailnet_key has been resolved where recreate_if_invalid was not being checked before recreating the resource when the key is not found.
Tailscale Kubernetes Operator v1.98.3
A new release of the Tailscale Kubernetes Operator is available. For guidance on installing and updating, refer to our installation instructions . New: The DNSConfig custom resource supports specifying node affinity rules and node selectors for nameserver pods. New: The operator Helm chart supports priority class names for operator pods.
Tailscale 1.98.3
Please refer to the changelog available at https://tailscale.com/changelog
Aperture CLI
Use Aperture CLI ( alpha ) to launch and manage coding agents with Aperture 's built in guardrails, policy enforcement, and observability. Aperture CLI supports Claude Code, Gemini CLI, OpenCode, OpenAI Codex, Copilot CLI, and Claude Cowork, on devices both inside and outside your tailnet.
Manage domain names
- New: Manage domain verification and domain aliases for your tailnet using the Domains page of the admin console.
Tailscale 1.98.2
Please refer to the changelog available at https://tailscale.com/changelog
Tailscale Terraform Provider v0.29.0
v0.29.0 of the Tailscale Terraform Provider has been released with the following changes: New: Use the tailscale_service resource and tailscale_service data source to manage Tailscale Services . New: Set identity_token_environment_variable_name in the provider to specify the environment variable to read an identity token from.
Purchase additional tagged resources
- New: All plans can purchase additional tagged resources above the included 50-device limit. New: All plans can view the number of tagged resources in their tailnet that count against the usage limit.
Tailscale v1.98.1
Note : 1.98.0 was a release candidate intended for testing only. All Platforms Fixed: Expired preferred peer addresses are cleared, reducing the time to elect an alternative. Linux Note: 1.98.1 introduced a regression in the interaction between Tailscale and MagicDNS on Linux. The Linux release has been withdrawn pending a fix.
View device posture status
- New: View the device posture status of a machine in your tailnet by using the Machines page of the admin console.
GitOps for Tailscale with GitHub Actions v1.5.2
A new release of GitOps for Tailscale with GitHub Actions is available. You can download it from the GitHub Actions Marketplace . Fixed: Update dependencies to remove Node 20 deprecation warning.
Aperture
Use Aperture ( beta ) to secure and manage your LLM agents with a single control plane across all your providers and models. New: Create custom guardrails with pre-LLM-call hooks to strip or block PII and restrict specific agent tools before requests reach the LLM.
Seat calculator
- New: A seat calculator is available to help you understand seat consumption on your account before upgrading to a new plan.
New pricing and packaging
- Changed: New tailnet plan signups are billed based on occupied user seats instead of monthly active users. Existing tailnets on a legacy plan will continue to be billed based on monthly active users. Changed: All plans can have an unlimited number of user devices in a tailnet.
Tailscale tsrecorder v1.96.5
A new release of the Tailscale tsrecorder is available. You can download it from Docker Hub . Changed: The Recorder CRD defaults to deploying a single replica StatefulSet, using the filesystem storage backend`.
About and activity
Official release-notes pages 1
| Release-notes page | Site | Feed |
|---|---|---|
| Changelog tailscale.com | tailscale.com | None |