June 17, 2020

1206 words 6 mins read

May Tailscale newsletter

May Tailscale newsletter

This is a re-publishing of our monthly newsletter sent to subscribers earlier this month. Sign up to receive future email newsletters.A month ago, we announced Tailscale’s general availability. Since then, we’ve been hard at work improving Tailscale. Today, were writing with some updates.

We recently released a new minor version of our client apps. This new version fixes various connectivity issu

es and squashes some annoying platform-specific bugs. Thanks to everyone who wrote in to report these issues. A few highlights from the complete changelog on Github:

We now prefer IPv6 over IPv4 when sending encrypted packets between nodes. Note: this does not yet make IPv6 available inside the Tailscale network. Switching between different networks is now smoother than ever, particularly between Wi-Fi and LTE, or when moving a sleeping laptop between different networks. Windows no longer resets active connections when new nodes get added to the network. We’ve adjusted MTU settings to avoid packet loss for users on Google Cloud or DSL.

This is a minor release, so we recommend everyone update to the latest version. You can find update instructions here. SAP Identity and improved Okta support We now welcome teams to use SAP Identity or Okta to authenticate to their Tailscale network. Contact us to enable it for your team. (Okta users can get a head start by following our Okta setup guide.) New relay server: Sydney Our relay servers route encrypted traffic when devices can’t connect directly to each other. Having a closer relay server means reduced latency on troublesome networks. The previous closest nodes for our friends in Oceania were Singapore or San Francisco, so the performance increase should be quite noticeable. (In unrelated news, one of our developers is currently in Australia. Totally unrelated.) Choosing a VPN for your team We’ve received a lot of questions about how Tailscale and WireGuard® differ from other VPN options. Since most online guides only cover personal VPNs, weve published our VPN Reviewer’s Guide a detailed list of questions to ask when searching for a VPN for your team. Its a big read, but if youre evaluating several options, we hope it helps you make an informed choice. Contributions of note We wanted to acknowledge some recent contributions made within the Tailscale community:

@mrkaran wrote an article detailing how he uses Tailscale to connect a VPS to a local Raspberry Pi Kubernetes cluster. His post walks through triaging blocked UDP packets, multiple competing overlay networks, and some DNS fiddling to make it all work. @nirev created an open-source package builder for Synology NASs. It requires a manual install, but it’s a great option for NAS users looking to connect over Tailscale today.

Thanks for the great work @mrkaran and @nirev! 🎉 Coming soon: Android beta Our Android app is (by far) our most requested feature, and were happy to announce we have a working prototype. Well be inviting users to begin beta testing within the next week or so. If youd like to participate in our beta, watch this Github issue for updates.

Date: 2020-05-12

URL: https://tailscale.com/blog/2020-05-newsletter/

tailscale.com

First open source release (2020-02-10) We just made the first bits of the Tailscale code public starting with the Linux client and its dependent/common code https://githubcom/tailscale/tailscale Still lots of rough edges TODOs everywhere so temper expectations accordingly We want to hack in open and not wait until its perfect
Remembering the LAN (2020-01-28) This post was originally published on crawshawioA memory and a dream How it was I started programming in the 1990s living above my parents medical practice We had 15 PCs for the business and one for me The standard OS was MS-DOS The network started off using IPX over coax to a Novell Netware server the fanciest software we ever owned IPX was so much easier than TCP/IP No DHCP and address allocatio..
Why not “Why not WireGuard?” (2020-04-23) An article by Michael Tremer titled Why not WireGuard is sometimes shared in VPN discussions Unfortunately that article contains several misconceptions and some out-of-date information that deserves to be addressed Lets go through his arguments section by section Will WireGuard replace my IPsec site-to-site VPN? Tremer writes: No There is no chance the big vendors will pick up WireGuard They do n.. Why not “Why not WireGuard?"
Tailscale v0.100 (2020-07-20) Were once again happy to announce a new version of Tailscale What comes after 099? 0100 of course! This is a pretty notable release containing a major rewrite of our magicsock connection code that sits between WireGuard and the network finding the best path between peers and getting through NATs If youve had any connection woes previously definitely give this a try One catch though: the new 0100 c..
October Tailscale newsletter (2020-10-06) This is a re-publishing of our monthly newsletter sent to subscribers earlier this month Sign up to receive future email newslettersWere happy to write today with a few exciting Tailscale product updates Community Contributions First off wed like to acknowledge a few well-written articles about Tailscale weve seen around the web: Tailscale is magic; even more so with NixOS Our team has several Nix..
The Log Blog (2020-09-14) Did you know that our CEO apenwarr is something of a B-list Internet celebrity? Part of his claim to fame is a pithy-but-informational blog which contains a pithy-but-informational post detailing exactly how to handle and parse a distributed logging system correctly Tailscales logging infrastructure follows this system in broad strokes In apenwarrs design many embedded Linux devices buffer logs lo..
Tailscale has reached general availability (2020-04-02) Just over a year ago we founded Tailscale with a common sense of nostalgia for the good old days of LANs In our collective opinion then and now networking and cloud infrastructure has become too complicated Attempts to increase team connectivity and migrate towards remote work results in a corresponding burden of security This reduces productivity Systems and approaches dont scale without signific.. Tailscale has reached general availability
Tailscale v1.2 is here (2020-11-16) The team has been hard at work making Tailscale more Tailscale-y Today were announcing v12 is stable and ready for teams and hobbyists alike Most notably this release includes Magic DNS for everyone and major improvements for our Windows client How to update: Linux: update instructions apt update install etc Windows: update instructions macOS: update via the Mac App Store* iOS: update via the App ..
Joining Tailscale: simplifying networking, authentication, and authorization (2020-01-30) This post was originally published on bradfitzcomI used to tolerate and expect complexity Working on Go the past 10 years has changed my perspective though I now value simplicity above almost all else and tolerate complexity only when its well isolated well documented well tested and necessary to make things simpler overall at other layers for most people For example the Go runtime is relatively c.. Joining Tailscale: simplifying networking, authentication, and authorization
Tailscale v0.98 (2020-05-05) Were happy to announce a new version of Tailscale This minor release fixes various connectivity issues and squashes some annoying platform-specific bugs Thanks to everyone who wrote in to report these issues! A few highlights from the complete changelog on Github: We now prefer IPv6 over IPv4 when sending encrypted packets between nodes Note: this does not yet make IPv6 available inside the Tailsc..