December 2025 Summaries

Tailscale's latest updates for November and December 2025 focus on improving the reliability, manageability, and security of their network software across various platforms. Key changes include updates to the logging infrastructure with specific IP ranges for firewall configurations, a series of client updates addressing issues such as route stalling, deadlocks, and memory leaks, and enhanced support for protocols like the PROXY protocol and workload identity federation. Specific platform improvements include resolving macOS connectivity issues, enhancing DNS functionality on Android, and addressing security vulnerabilities in Linux containers. Additionally, Kubernetes operator updates provide better authentication and compatibility, and tsrecorder enhancements include new authentication methods. These updates ensure smoother operations and enhanced security for users, demonstrating Tailscale's commitment to continuous improvement and user support.

Aditya Maru, co-founder of Blacksmith, details how the company utilized Tailscale Services to address ISP degradation affecting their continuous integration (CI) infrastructure, specifically with GitHub traffic. Faced with an outage on Thanksgiving that caused GitHub Actions jobs to fail due to upstream ISP issues, Blacksmith implemented a transparent proxy solution without requiring changes from their customers. This proxy reroutes GitHub-bound traffic through a network path with direct GitHub peering using Squid for proxying and caching, while Tailscale Services provide secure load balancing and encryption. By leveraging a Linux kernel data structure called ipset for efficient packet matching, Blacksmith was able to circumvent problematic network routes and maintain seamless service. The implementation also benefits from Tailscale’s intelligent routing, which replaces traditional load balancing methods, ensuring that only authorized devices can access the proxy service. This solution not only resolved the immediate issue but also provides a sustainable disaster recovery mechanism for future connectivity disruptions, with potential expansions to other critical services.

Brian Scott developed Chat-tails, an IRC-like chat application built using Tailscale and tsnet, to provide a secure and private chat environment for his child during gaming sessions. Unlike modern chat apps, Chat-tails offers an ephemeral, text-only communication space without images or voice chats, ensuring privacy and simplicity reminiscent of early LAN gaming experiences. Users can operate Chat-tails in either "Regular Mode," which involves local network hosting, or "Tailscale Mode," which utilizes Tailscale for secure, shared access across devices. The application, which can run on minimal hardware like a Raspberry Pi, was created with minimalistic aesthetics using the Bubbletea library and is designed for those interested in a retro-futuristic chat experience. While not a full-time developer, Scott leveraged his experience with Go and the tsnet library to create this project, which could serve as a safe learning tool for children and a nostalgic communication platform for groups with specific preferences.

Mitanshu Sukhwani shares an innovative method for running Tailscale on a jailbroken Kindle, emphasizing the freedom and expanded capabilities such a modification offers. Jailbreaking a Kindle involves removing software restrictions to allow unauthorized software installations and access to system internals, enhancing the device's versatility beyond its original design. With Tailscale, users benefit from simplified file transfers and management via SSH and Taildrop, as well as the capability to connect to a self-hosted Calibre Web library, significantly expanding the Kindle's functionality. This process involves careful attention to the device's firmware version and requires tools like KOReader and the Kindle Unified Application Launcher (KUAL) to fully utilize the jailbreaking benefits. Despite the risks of potentially damaging the device or voiding its warranty, the jailbreaking community, supported by resources like the Kindle Modding Wiki, provides guidance for those willing to explore these modifications.