- "Wake a device at home": the status page, reachable from anywhere over
the tailnet, can make the console broadcast a Wake-on-LAN packet for a
device in a saved list.
- "Download diagnostics": one text file with the logs, version, firmware
and settings for bug reports. E-mail addresses, the tailnet's name,
public IP addresses, keys and the password are removed.
- "test" links for forwards and game streaming hosts open a TCP connection
through the tailnet and say in plain words how it went.
- A short "what this does, and what it does not" note, opened before the
first login.
- Screenshot updated.
- "Reach a device from this PS5" on the status page sets up the local
forwards that used to be a text box in the settings: pick a device and a
port, and the page shows the address to use on the console. The port on
the console is chosen automatically, and one that is already in use (the
status page's own, game streaming, another service) is refused.
- The device list says whether each device is reached directly or through
a relay, and a "test" link measures the connection.
- The page shows which DNS server the daemon uses.
- Tests run on GitHub for every push.
- make-release.ps1 -PlainName also writes the payload as tailscale.elf, the
name 0.6.0's Install button looks for.
- Screenshot updated.
The configuration directory is AppData on Windows, which a packaged app sees a private copy of: a key created from inside one was invisible to every other program. The key now lives in .ps5-tailscale in the home directory.
- Name lookups no longer depend on a DNS payload at 127.0.0.1:53. The
daemon probes that address, the default gateway and three public
resolvers, uses the first that answers, and looks again every five
minutes or when the network changes.
- The release payload is now tailscale-<version>.elf. The updater looks
for that name and still understands the old one. Releases up to 0.6.0
only know the old name and have to be updated by hand once.
- The status page warns, next to Install and before installing, that the
copy a payload manager or autoloader starts is not the one being
replaced, unless it is named in the settings.
- Screenshot updated.
Taildrop: files sent to the console from the user's other devices are moved
from Tailscale's holding area to /data/tailscale/received (a setting),
announced on screen and listed on the status page with download links.
Updates: the status page can install a newer release when asked to. A
release carries tailscale.elf.sig, an Ed25519 signature over its version
and SHA-256; the daemon installs only what verifies against the public key
built into it, is the version the release claims and is newer than itself.
The payload is handed to the ELF loader, and the copy named by the new
payloadPath setting is replaced as well.
- tsd/relsig, tsd/cmd/signrelease: signing, verifying, and keeping the key
(keygen, passphrase-protected backup and restore).
- tools/make-release.ps1 builds, signs and checksums a release.
- Files are no longer copied to sockets with sendfile, which the PS5
kernel refuses.
- The launcher keeps a log (/data/tailscale/launcher.log) and shows a
notification when it cannot start. A payload manager does not show what a
payload prints, so a failed start used to leave no trace. The Go
runtime's stderr goes to the same file until the daemon opens its log.
- New setting "who on the tailnet may connect": every device the tailnet's
access rules allow (default), or only devices of the same user as the
console. Applies to every forwarded TCP port, the UDP ports and the
status page over the tailnet.
- The status page shows when the console's key expires and warns from two
weeks before; the console shows a notification at 14, 3 and 1 days.
- A newer release is announced once on the console, not only on the page.
- Status page: click an address to copy it; OS, status and address columns
no longer break mid-word; the facts stack on narrow screens.
The fallback handler piped a tailnet connection to localhost by its port
alone. Only connections to the console's own addresses reach it today, so
nothing was exposed, but the handler now checks the destination address
itself instead of relying on that.
The README explains why the console does not offer itself as an exit node.
The status page can now be protected with a password and edits the
settings itself, so the config file no longer has to be changed by hand.
- Password for everything on the status page that shows or changes
something. The console's own browser is exempt. Connections to the page
from the tailnet are served directly so they are not taken for local.
- Settings form: name, ports, forwards, proxy, priority, update checks.
Most take effect at once; the page says which need a restart.
- Game streaming: several Sunshine hosts, each with its own port.
- The HTTP proxy is off by default.
- The page says when a newer release exists.
- Uninstall removes the home screen icon.
- Priority setting for streams that stutter under a demanding game.
- After the console's network is reconfigured, Tailscale is asked to
rebind. Seen working across a short stay in rest mode.
- Favicon, and the device list can be collapsed.
tailscale.elf now adds the home screen icon itself, the first time it runs,
by handing a small embedded helper payload to the ELF loader. The separate
installer is gone: nothing is copied to /data/tailscale any more, and the
payload runs from wherever the user keeps it.
Uninstall on the status page now logs out, stops the daemon and deletes its
data directory.
The console's Remote Play service uses UDP 9295, 9296, 9297 and 9302 next to
TCP 9295. tsnet has no catch-all for UDP, so the daemon now listens on the
ports in the new udpPorts setting (those four by default) on its tailnet
addresses and relays them to localhost. The UDP relay is shared with the
local forwards.
The installer no longer adds the daemon to Payload Manager's or
ps5_autoloader's load order. It writes /data/tailscale/tailscale.elf, adds
the home screen icon and starts the daemon; starting it after a reboot is
left to the user. The daemon's status page and Uninstall no longer look at
autoloaders either.
A payload that runs the Tailscale client (tsnet, userspace networking) on a
jailbroken PS5: a C launcher built with ps5-payload-sdk that loads a Go
program in-process, an installer that registers it with the console's
payload autoloader and adds a home screen icon, and the patch that makes Go
1.27.1 speak the PS5's FreeBSD 9 era syscall interface.
holdmysocks