LoginSign Up
← Back to all sparks
T

Tailscale

INFRA · APIS
Velocity7.5

Tailscale ships AI control plane: Aperture GA manages LLM sessions, PAM adds privileged access

zero-trustai-securityprivileged-accesskubernetesnetwork-securitydevtools
◆Current state
Tailscale crossed from pure network fabric into security control plane territory in August. Aperture reached GA with a full AI gateway feature set: rate limits, cost controls, request/response hooks, guardrails, MCP server support, and API proxying for major LLM providers. PAM (beta) adds application-aware privileged access with session recording for SSH, databases, Kubernetes, and RDP — capabilities that previously required a dedicated PAM product. Underneath both, version releases address a notable security vulnerability (TS-2026-011) and connectivity edge cases.
◆Where it's heading
Tailscale is building upward from the network layer into security policy enforcement and AI infrastructure. The pattern — own the network, then control what travels over it — positions them against Teleport for developer PAM and Cloudflare AI Gateway for LLM proxying. The tailnet becomes the trust boundary, and both Aperture and PAM use it as the identity layer for access decisions.
◆Prediction
Aperture and PAM will likely converge toward a unified policy surface: one place to govern both human privileged access and AI agent access, with the tailnet as the enforcement fabric. Expect Aperture to add per-model cost budgets and PAM to move toward GA with expanded service type support.

◆Recent moves

  1. 6d ago

    Tailscale v1.102.4 — connectivity and exit node fixes

    v1.102.4 resolves a connectivity loss on netmap updates near reauthentication, plus exit node display bugs on custom coordination servers across iOS, macOS, and tvOS. Routine maintenance release with no user-visible new features.

  2. 21d ago

    Tailscale PAM

    ⚡ SPARK

    Tailscale PAM (beta) turns the tailnet into a privileged access checkpoint: define services for SSH, database, RDP, HTTPS, Kubernetes, and S3; record sessions; inject credentials from a linked secrets store; and set per-user grants with granular in-service permissions. This is the first Tailscale feature that competes directly with dedicated PAM products rather than complementing them.

  3. 22d ago

    Aperture by Tailscale GA

    ⚡ SPARK

    Aperture reaches GA as a full AI gateway: rate limiting, cost controls, request/response hooks, guardrails, MCP server support, API proxying, and model token purchasing — all in front of major LLM providers, managed from inside the tailnet. A promotional token credit is included for new and existing gateways.

  4. 28d ago

    Tailscale v1.102.3 — security patch TS-2026-011 and stability fixes

    v1.102.3 patches a security vulnerability (TS-2026-011) related to host-scoped IPv4 destinations via unmapped 4via6 addresses, updates Go to 1.26.6, and fixes startup failures on large tailnets with Tailnet Lock enabled. The security fix is the reason to upgrade; the rest is maintenance.

  5. 29d ago

    Tailnet list API now paginates at 100 results

    The list tailnets API endpoint now paginates at 100 results by default, with cursor-based traversal for organizations managing more than 100 tailnets. Transparent to most users; relevant only to large multi-tailnet organizations using the API.

  6. 1mo ago

    Tailscale Kubernetes Operator v1.102.2

    Kubernetes Operator v1.102.2 adds PeerRelays deployable in-cluster via custom resource, workload identity federation for the Tailnet CRD, and Helm-configurable annotations on the operator's deployment. Meaningful for teams running Tailscale-connected Kubernetes clusters at scale with strict identity requirements.