Use Tailscale Privileged Access Management (PAM) ( beta ) to provide application-aware access to resources in your Tailscale network. New: Services can be defined for privileged access, including SSH , database , RDP , HTTPS , Kubernetes , and Amazon S3 types. New: Sessions can be recorded for SSH, database, HTTPS, and Kubernetes Service types.
Use Aperture ( generally available ) to secure and manage AI agents and LLM sessions with cost controls, request and response hooks, guardrails, logging, MCP support, and API proxying. New: A promotional model token credit is included for use with new and existing Aperture gateways.
Please refer to the changelog available at https://tailscale.com/changelog
A new release of the Tailscale Kubernetes Operator is available. For guidance on installing and updating, refer to our installation instructions . Fixed: Peer relays on AWS are reachable regardless of the availability zone their pod is scheduled in. Pinning Elastic IPs also requires pinning the pods to the same zone using a ProxyClass .
- Changed: The list tailnets endpoint paginates results. By default, organizations with more than 100 tailnets now receive only the first 100 results, with totalCount and cursor parameters to retrieve additional results. New: limit and cursor query parameters are supported on the list tailnets endpoint.
A new release of the Tailscale Kubernetes Operator is available. For guidance on installing and updating, refer to our installation instructions . New: PeerRelays are deployable in-cluster via a custom resource . New: Annotations can now be applied to the operator's deployment resource via Helm.
A new release of the Tailscale container image is available. You can download it from Docker Hub or from our GitHub packages repository . This version contains no changes except for library updates.
All Platforms Fixed: A regression causing incoming Tailscale Funnel connections to fail is resolved.
All Platforms New: tailscaled_serve_outbound_bytes_total and tailscaled_serve_inbound_bytes_total client metrics report bytes sent to and received from peers on Tailscale Serve connections for Tailscale Services . New: The tailscale get CLI command returns the current node's preferences.
Releasesby Glyph