Permanent Fix for Tailscale Overlay Network & Kernel Route Conflict
- Prevented 100.64.0.0/10 and IPv6 overlay subnets from entering Darwin NetworkExtension excludedRoutes, preventing the kernel from cloning static host routes to physical interfaces that hijack Tailscale utun traffic.
- Handed overlay traffic entirely to rule-based engine routing and unbounded sockets, ensuring zero-interference, sub-millisecond coexistence with Tailscale.
- Added automated profile sanitization in TunnelManager to prune legacy overlay subnet entries from bypass policies.
Seamless System Extension In-Place Upgrade
- Bumped build number to 2026092402 to guarantee sysextd cleanly recognizes and upgrades existing system extensions.
Hardware & VM Matrix Verification
- Verified across all 6 engine and routing matrix permutations in Tart VM (aether-diag-1434) with 100% pass rate and clean post-run teardown.
- Verified on physical Apple Silicon Mac mini via remote automated test gate with 100% pass rate (TCP 7500+ Mbps, UDP 0 drops); live notarized deployment ping test achieved 0.0% packet loss with completely stable Tailscale and SSH sessions.
Release Information
- This stable package uses the normal production core, is Developer ID signed and Apple double-notarized (app + dmg stapled), and contains no QA automation flags.
- Authorized by the maintainer for stable release following real hardware and VM matrix verification.
Download and verify
AetherRoute-1.0.27-build-2026092402-arm64.dmg
SHA-256
d42d91e86a57c188edae1598f5d614db7df1a685530b7ef76c03f5beb7fc0ac1
After downloading, run this in Terminal and confirm the output matches:shasum -a 256 ~/Downloads/AetherRoute-1.0.27-build-2026092402-arm64.dmg