Fall Update Week is nearing its end, and Tailscale is a different product at its finish. As we said at the outset: simpler, smarter, and more connected.
We’ve debuted a host of new features and capabilities this week, and provided guidance on where our customers might take them. Read on for a summary of the big announcements.
If you’d prefer more charts and buttons, we’ve got a Fall Update Week 2025 summary page that takes you straight into all the good stuff. Fancy a video you can watch or listen to? We hosted a webinar in which Alex Kretzschmar, lead developer advocate, and Jay Stapleton, solutions engineer, dig into everything new and suggest some interesting scenarios and possibilities.
Last week, in less than 250 words
- Services, a new way to make defined resources services available on your tailnet, not tied to a specific machine. Services get a MagicDNS name, respect granular access controls, and can provide intelligent routing based on availability rules, much like cloud balancing. (Public beta) (Docs) (Video)
- Tailscale Peer Relays, empowering customers to turn any tailnet node into a UDP-based traffic relay, performing at speeds rivaling direct connections and providing flexibility in cloud environments. (Public beta) (Docs) (Video)
- Multiple tailnets, which let organizations create and manage more than one tailnet with the same identity provider, providing room for sandboxes, staging, and other needs. Developers can also use API-created tailnets to provide customers and projects their own tailnets. (Alpha via sales contact) (Docs)
- Workload identity federation, allowing infrastructure and CI/CD systems to authenticate with Tailscale without managing long-lived API keys, auth keys, or Oauth clients. (Public beta) (Docs)
- App capabilities, offering third-party applications access to Tailscale grants and identity through standard HTTP headers, usable in any code language. (Available in unstable builds now, then in 1.92 stable releases) (Docs)
In addition, we brought some other important pieces of Tailscale’s connectivity platform forward this past week:
- We highlighted the recent windowed macOS UI available in beta, which brings easier search, TailDrop, and other features out of the CLI and onto desktops.
- We walked through how we built tsidp, a lightweight identity tool that conveys identity forward into applications, both on and off the tailnet.
Where it all comes from
All of this, and much more unseen work, was brought to you by engineering, product, marketing, support, community, documentation, and sales teams, working together for months, doing exciting things to make networking a bit more boring. Without them, this was just another week (however slightly spooky at the end).
Keep up on what we’re doing next on our YouTube channel, our social channels (Bluesky, Mastodon, LinkedIn, X), our blog RSS feed, or our community outposts on Reddit and Discord.
Kevin Purdy
