LoginSign Up
← Back to all sparks
T

Tailscale

INFRA · APIS
Velocity5.0

Tailscale makes a device's public IP a posture check, after three client security patches.

zero trust networkingdevice posturepolicy as codesecuritylarge tailnets
◆Current state
Tailscale is moving tailnet administration into policy and automation: MagicRoute, declarative node sharing, OAuth device provisioning and posture alerts all landed in October. The 1.104 client line underneath turned into a run of security patches, v1.104.2, v1.104.4 and v1.104.5, in under two weeks. November opened with the public IP address posture attribute going GA and the India relay servers moving from Bengaluru to Mumbai.
◆Where it's heading
Device posture keeps gaining inputs: alerts and badges in October, now where a device connects from. Access rules are drifting from who you are toward what the device is and where it sits, all expressed in policy.
◆Prediction
More posture attributes and posture-driven actions in the admin console look likely, given monitoring, alerts and now public IP shipped within a month.

◆Recent moves

  1. 2d ago

    Tailscale v1.104.7

    A Go 1.27.4 rebuild works around middleboxes that break TLS connections to the control plane, and the Kubernetes API server proxy now identifies callers only by source address, ignoring X-Forwarded-For. A connectivity fix plus a small security hardening in a patch release.

  2. 4d ago

    Tailscale 1.104.6 fixes dormant-connection and DNS race bugs

    A connectivity patch: dormant connections, Windows resume from Modern Standby, and macOS DNS resolver selection during network changes. The fourth 1.104 point release in three weeks, this time stability rather than security.

  3. 9d ago

    Public IP posture attribute GA; India relays move to Mumbai

    The ip:publicAddress posture attribute is now GA, so access rules can depend on the public IP a device connects from. It extends October's posture monitoring and alerts; the India DERP relays also moved to Mumbai, which only matters to teams with hard-coded firewall rules.

  4. 12d ago

    Tailscale 1.104.5 fixes SSH stalls and a Windows installer flaw

    v1.104.5 resolves connectivity stalls for SSH, Serve and tsnet on lossy networks and closes a Windows installer privilege-escalation issue at install time. It is the third 1.104 patch focused on SSH and Serve reliability and security this month.

  5. 17d ago

    Tailscale 1.104.4 fixes four SSH and Serve security flaws

    This release fixes four security issues, TS-2026-014 to 017, in Tailscale SSH and Serve, including forwarding that could reach root-only Unix sockets. Admins should patch; Terraform Provider 0.29.3 also ships DNS fixes and plan-time policy validation.

  6. 18d ago

    Device Provisioning with OAuth Apps

    OAuth Apps for device provisioning are now generally available through the Tailscale API, so fleets can enroll devices with scoped app credentials instead of reusable auth keys. It sits with the month's admin and policy work on identity and fleet management.