Can't reliably disable VPN On Demand on iOS

[cj-wong]

What is the issue?

I could not reliably stop Tailscale from starting repeatedly or disable VPN on-demand settings. To stop Tailscale, I had to disable on-demand multiple times first.

Steps to reproduce

Note: during this process, my sole DNS server (set to be the DNS server override in the admin panel) was offline. I was trying to login so that I could disable the setting.

1. Try to turn off Tailscale. (This might be a separate issue. Not sure.)
2. Leave the app and come back. It will be on again.
3. Try to turn off on-demand connections in settings. I set "VPN On Demand" only for Wi-Fi and Cellular; I do not use MagicDNS. The toggle shows the setting being disabled, but when I back out of the app, it is still enabled. Not sure if the toggle just doesn't work properly or what.

I had to toggle the option multiple times to ensure that it stuck. I was then able to stop Tailscale.

Are there any recent changes that introduced the issue?

Not sure. Did not notice this issue a week ago when I had a similar incident.

OS

iOS

OS version

iOS 26.2

Tailscale version

1.92.3

Other software

n/a

Bug report

BUG-158c7ea88b95c97ea696e45d5d91df738dcf173d460f2cb4cb005034a77a8051-20251229054748Z-1f220aeac4dc23a4

[croakerbcts]

May be related to #18699 (and vice versa)

[ram130]

This is resolved in the latest version for me.

[cj-wong]

I had the opportunity to test just now, and I do not seem to have the issue anymore. Looks like the on-demand options are correctly toggled on/off now.