1.14.0-alpha.29

📝 Release Notes

• Fixes and improvements

1.13.13

📝 Release Notes

• Fixes and improvements

1.14.0-alpha.28

📝 Release Notes

• Fixes and improvements

v1.14.0-alpha.27

📝 Release Notes

• Add Tailscale SSH server 1
• Fixes and improvements

1:

Adds an ssh_server field to Tailscale endpoints, running a Tailscale SSH server on tailnet port 22. Access is controlled by the SSH ACL in the Tailscale admin console, which maps each connection to a local user (behavior varies by platform; iOS and tvOS are not yet supported). The value may be true (equivalent to { "enabled": true }), or an object that additionally sets disable_pty, disable_sftp, and disable_forwarding.

1.14.0-alpha.26

📝 Release Notes

• Add gecko obfs for Hysteria2 1
• Fixes and improvements

1:

Adds gecko as a new QUIC traffic obfuscation type for Hysteria2 inbound and outbound, alongside the existing salamander. Gecko supports configurable min_packet_size (default 512) and max_packet_size (default 1200) fields.

v1.14.0-alpha.25

📝 Release Notes

• Revert Tailscale endpoint dial fields deprecation and remove control_http_client 1
• Fixes and improvements

1:

The control_http_client field on Tailscale endpoints introduced in 1.14.0-alpha.13 is removed, and the deprecation of Dial Fields is reverted.

1.14.0-alpha.24

📝 Release Notes

• Fixes and improvement

1.13.12

📝 Release Notes

• Update naiveproxy to v148.0.7778.96-1
• Fixes and improvements

1.14.0-alpha.23

📝 Release Notes

• Fixes and improvements

1.14.0-alpha.22

📝 Release Notes

• Add Hysteria Realm service and Hysteria2 NAT traversal support 1
• Fixes and improvements

1:

The new Hysteria Realm service is a rendezvous service for Hysteria2 NAT traversal. A Hysteria2 server behind NAT registers its STUN-discovered public addresses on a stable realm endpoint via the new realm inbound field; clients query the realm via the new realm outbound field to learn the server's current addresses and perform UDP hole-punching to establish a direct QUIC connection. Once hole-punching succeeds, all proxy traffic flows directly between client and server.