# Tailscale 1.4 Release notes ## User-visible changes * GUIs now show MagicDNS names in device lists * MagicDNS now supports accessing accepted shared devices by their name (the FQDN of the owner's name of the device) * * `tailscale status` is now more readable * sorted by name, not public key * shows DNS names * endpoints and asterisks around endpoints removed (too spammy); connection state now listed explicitly as idle, direct, or relayed * owner of a node shown * tx/rx bytes only shown for ever-active peers * **Linux** * `sudo` is now required to change state with `tailscale up`; `tailscale status` does not require root * systemd-notify support; so `systemctl status` shows a summary of the state ## Debuggability * Tailscale 1.4 nodes now tell each other when they're rejecting connections for Shields Up or ACL policy reasons. * TCP connection failures and timeouts now log why they failed, including the local node's perceived state of the peer and whether the peer rejected their connection for Shields Up or ACL policy reasons. ## Optimizations, fixes * more efficient protocol for talking to the coordination server; uses less bandwidth * does much less work when idle; improves CPU, bandwidth, battery * omits advertising ZeroTier interfaces as possible paths to avoid routing loops * endpoint exchange can now happen between peers without the coordination server involved; adds extra robustness in case of control server outages * improved DERP relay selection hysteresis to avoid ping-ponging between equidistant regions every 5 minutes * CPU/bandwidth optimizations to improve throughput on fast networks (initial steps, more coming later) * **Windows** * update to [wintun](https://www.wintun.net/) 0.10 fixing a number of bugs (including WSL2 interop) * **Linux** * the systemd unit is now more locked down with more security options enabled ## Works in progress * IPv6 support inside the tunnel: Tailscale has used IPv6 (when available) as a transport outside the tunnel for a number of releases, but this release adds support for IPv6 routing and node addresses inside the tunnel. It will be enabled in the future when testing has completed on all platforms. * `tailscaled` on Linux can now in Tailscale 1.4 advertise a default route with `--advertise-routes=0.0.0.0/0,::/0`. Client-side support for selecting which node to use as an "exit node" is a work in progress for a future release. * cmd/tailscaled now embeds the gVisor "[netstack](https://gvisor.dev/docs/user_guide/networking/)", a userspace networking stack. It's only enabled in `--fake` mode when `--tun=userspace-networking`. It's preparation for future versions of Tailscale that don't require root and can do more types of routing on more operating systems without operating system involvement.