This month at Tailscale: Exit node policies, UI betas, and Taildrive fixes

This month's updates include changes to exit node policies, Taildrive fixes, a preview of a windowed UI for macOS, and more. For instructions on how to update to the latest version, visit our update guide.

macOS windowed UI mode (beta)

A new interface for Tailscale's macOS desktop client now offers a full window, providing node search, features like TailDrop and ping, and other improvements. To test, go to the Settings page of the admin console and toggle Redesigned macOS Client UI. Once enabled, all macOS clients display the new interface.

DERP server IP changes

The IPv4 and IPv6 addresses for Tailscale's DERP servers in Sydney, Tokyo, Singapore, and São Paulo have recently changed. If you use custom firewall settings relying on these addresses, refer to our DERP map for information (no action is required, otherwise).

Client updates

Tailscale v1.88.1 and 1.88.2

We released a series of updates and fixes to improve security and stability across all platforms.

All platforms

• Tailscale CLI prompts users to confirm with y/n before proceeding with impactful actions.
• Go is updated to version 1.25.1.
• Fixed: Tailscale SSH works as expected when using an IP address instead of a hostname and MagicDNS is disabled.
• Fixed: Taildrive folder sharing works correctly even when the su command is not present on the Linux or other Unix-like host.
• Fixed: Taildrive files remain consistently accessible.

Linux

• The system tray application for Linux desktops can be enabled to display some of the GUI options available in other Tailscale clients, including fast user switching and exit node selection.

Windows

• The existing ExitNodeID=auto:any system policy supports the new ExitNode.AllowOverride policy option that lets users select a different exit node while still requiring exit node usage. (Also on macOS).

macOS

• macOS 12 is the minimum supported version.
• advertiseExitNode system policy is available on macOS.
• Fixed: UI improvements for iOS 26 and macOS 26 compatibility.
• Fixed: Automatic recommended exit node selection.

iOS

• UI improvements for iOS 26 and macOS 26 compatibility.

QNAP

• New QNAP builds are available again. At the time of this release, you can manually download the update from our packages site. After a period of time, the update will also be available in QNAP App Center.

All of these fixes and changes are available in the current stable release, 1.88.2.

Container, Kubernetes, and tsrecorder updates

The 1.88.2 release for containers, Kubernetes, and tsrecorder contained library updates and other changes and fixes.

Container image v1.88.2

• Fixed: Kubernetes sidecars no longer error on first run if their state Secret doesn't exist.

Kubernetes operator v1.88.2

New features and fixes were added to the Kubernetes operator, including:

• ProxyClass resources supports setting a priorityClassName for created Pods.
• Connector resources can specify multiple replicas for highly available subnet routers, app connectors, and exit nodes.
• Fixed: DNSConfig resource works as expected for egress ProxyGroups.
• Fixed: Multi-cluster ingress devices no longer display an erroneous "Invalid certificate" message in the Machines page of the admin console.

tsrecorder v1.86.2

• Library updates only

Those are the highlights for this month. If you have questions or feedback, we're here to help. Thank you for using Tailscale.