@tailscale Hello headscale users! Did anyone get headscale working in a non standard port? E.g. https://hs.example.com:8443/ ? For me It does not work and I think the tailscale clients still send some of the requests to the default port 443

Linux

• (New) Send load balancing hint HTTP request header

Windows

• (Fixed) Do not allow msiexec to reboot the operating system

macOS

• (Fixed) Issue that could cause the Tailscale system extension to not be installed upon app launch, when deploying Tailscale using MDM and using a configuration profile to pre-approve the VPN tunnel (applies to standalone variant only)

Synology

• (Fixed) IPv6 routing

Kubernetes operator

• (Fixed) Kubernetes operator proxies should not accept subnet routes

I'm looking into ways to access my home network which is behind a CGNAT. Tailscale looks like the best solution so far. I would like to clarify a doubt on Tailscale

I have a domain name registered with one of the popular services out there. I saw that Tailscale uses MagicDNS. But I wanted to use my personal domain. My doubt is if I want to use my custom domain with Tailscale, the following will be the procedure,

1. Setup Tailscale account and add machines.
2. My device inside the home network will get a Tailscale IP assigned. From 100.xx.xx.xx pool
3. Use this IP to configure an A record in my Domain registrar.

Now when I try to access this domain what will happen is,

1. DNS server will resolve the Tailscale IP.
2. The outside client will try to connect to my machine in the home network.
3. Tailscale takes care of the CGNAT part and helps to establish a direct connection.
4. Clients will use the public keys to establish trust and will communicate with each other.

If there is anything wrong in my understanding please correct me. I could not get a clear cut answer on this through searching.

Users page of the admin console updated to provide more context around user invitations, user approval, and your tailnet’s identity provider

Tailscale auto-updates are now Generally Available (GA), with a number of usability and control improvements. Today's update builds on our previously announced beta release.