This website requires JavaScript.
c5fdf9e1db
cmd/tailscale/cli: add support for tailscale {up,set} --exit-node=auto:any
2025-07-09 12:07:44 -05:00
cc2f4ac921
ipn: move ParseAutoExitNodeID from ipn/ipnlocal to ipn
2025-07-09 11:59:57 -05:00
008a238acd
wgengine/magicsock: support self as candidate peer relay (#16499 )
2025-07-09 09:16:29 -07:00
27fa2ad868
cmd/k8s-operator: don't require generation for Available condition (#16497 )
2025-07-09 09:37:45 +01:00
4dfed6b146
cmd/{k8s-operator,k8s-proxy}: add kube-apiserver ProxyGroup type (#16266 )
2025-07-09 09:21:56 +01:00
90bf0a97b3
cmd/k8s-operator/deploy: clarify helm install notes (#16449 )
2025-07-09 09:13:11 +01:00
bad17a1bfa
cmd/tailscale: format empty cities and countries as hyphens (#16495 )
2025-07-08 22:14:18 -07:00
a60e0caf6a
wgengine/magicsock: remove conn.InitiationAwareEndpoint TODO (#16498 )
2025-07-08 19:37:09 -07:00
740b77df59
ipn/ipnlocal,util/syspolicy: add support for ExitNode.AllowOverride policy setting
2025-07-08 16:08:28 -05:00
2c630e126b
ipn/ipnlocal: make applySysPolicy a method on LocalBackend
2025-07-07 19:05:41 -05:00
9bf99741dd
ipn/ipnlocal: refactor resolveExitNodeInPrefsLocked, setExitNodeID and resolveExitNodeIP
2025-07-07 19:02:10 -05:00
1fe82d6ef5
cmd/tailscale/cli,ipn/ipnlocal: restrict logout when AlwaysOn mode is enabled
2025-07-08 14:37:13 -05:00
5b0074729d
go.mod,wgengine/magicsock: implement conn.InitiationAwareEndpoint (#16486 )
2025-07-08 09:45:18 -07:00
47f431b656
net/udprelay: fix relaying between mixed address family sockets (#16485 )
2025-07-07 19:46:20 -07:00
ea4018b757
ipn/ipnlocal: fix missing defer in testExtension.Shutdown
2025-07-07 17:21:21 -05:00
f1c7b463cd
ipn/{ipnauth,ipnlocal,localapi}: make EditPrefs return an error if changing exit node is restricted by policy
2025-07-07 17:04:07 -05:00
a6f6478129
util/syspolicy: add HasAnyOf to check if any specified policy settings are configured
2025-07-07 11:50:59 -05:00
cb7b49941e
ipn/ipnlocal: add (*LocalBackend).reconcilePrefsLocked
2025-07-03 19:37:56 -05:00
381fdcc3f1
ipn/ipnlocal,util/syspolicy/source: retain existing exit node when using auto exit node, if it's allowed by policy
2025-07-03 20:32:30 -05:00
4c1c0bac8d
ipn/ipnlocal: plumb nodeBackend into suggestExitNode to support delta updates, such as online status changes
2025-07-03 14:32:28 -05:00
3e01652e4d
ipn/ipnlocal: add (*LocalBackend).RefreshExitNode
2025-07-03 14:25:33 -05:00
04d24cdbd4
wgengine/netstack: correctly proxy half-closed TCP connections
2025-07-07 15:36:16 -04:00
a84d58015c
wgengine/magicsock: fix lazyEndpoint DstIP() vs SrcIP() (#16453 )
2025-07-07 10:06:38 -07:00
3b32cc7586
wgengine/magicsock: simplify Geneve-encapsulated disco.Ping handling (#16448 )
2025-07-07 09:38:10 -07:00
540eb05638
wgengine/magicsock: make Conn.Send() lazyEndpoint aware (#16465 )
2025-07-07 08:45:13 -07:00
84eac7b8de
cmd/k8s-operator: Allow custom ingress class names (#16472 )
2025-07-07 12:12:59 +01:00
4f3355e499
.github: Bump github/codeql-action from 3.29.0 to 3.29.1 (#16423 )
2025-07-06 22:25:18 -06:00
079134d3c0
cmd/k8s-operator: always set ProxyGroup status conditions (#16429 )
2025-07-07 00:40:56 +01:00
92a114c66d
tailcfg, feature/relayserver, wgengine/magicsock: invert UDP relay server nodeAttrs (#16444 )
2025-07-04 12:48:38 -04:00
639fed6856
Dockerfile,build_docker.sh: add a note on how to build local images (#16471 )
2025-07-04 16:06:22 +01:00
c46145b99e
cmd/k8s-operator: Move login server value to top-level (#16470 )
2025-07-04 12:19:23 +01:00
a8055b5f40
cmd/tailscale/cli,ipn,ipn/ipnlocal: add AutoExitNode preference for automatic exit node selection
2025-07-03 12:21:29 -05:00
0098822981
ipn/ipnlocal: update suggestExitNode to skip offline candidates and fix TestSetControlClientStatusAutoExitNode
2025-07-03 11:51:27 -05:00
6ecc25b26a
ipn/ipnlocal: skip TestUpdateNetmapDeltaAutoExitNode
2025-07-03 11:50:27 -05:00
56d772bd63
ipn/ipnlocal: simplify pickNewAutoExitNode
2025-07-02 19:16:39 -05:00
1a2185b1ee
ipn/ipnlocal: rename setAutoExitNodeIDLockedOnEntry to pickNewAutoExitNode; drop old function
2025-07-02 19:06:54 -05:00
5dc11d50f7
cmd/k8s-operator: Set login server on tsrecorder nodes (#16443 )
2025-07-03 15:53:35 +01:00
3a4b439c62
feature/relayserver,net/udprelay: add IPv6 support (#16442 )
2025-07-02 20:38:39 -07:00
77d19604f4
derp/derphttp: fix DERP TLS client server name inclusion in URL form
2025-07-02 14:32:21 -07:00
eb03d42fe6
cmd/k8s-operator: Allow configuration of login server (#16432 )
2025-07-02 21:42:31 +01:00
f9e7131772
wgengine/magicsock: make lazyEndpoint load bearing for UDP relay (#16435 )
2025-07-02 13:27:30 -07:00
172e26b3e3
tailcfg: report StateEncrypted in Hostinfo (#16434 )
2025-07-02 10:52:00 -07:00
d2edf7133a
wgengine/magicsock: remove references to rucPtr (#16441 )
2025-07-02 09:23:54 -07:00
d15b2312c4
tailcfg: add CapabilityOwner (#16426 )
2025-07-01 09:28:48 -07:00
454d856be8
drive,ipn/ipnlocal: calculate peer taildrive URLs on-demand
2025-07-01 09:03:54 -05:00
6a9bf9172b
ipn/ipnlocal: add verbose Taildrive logging on client side
2025-06-30 13:43:16 -05:00
47e77565c6
wgengine/magicsock: avoid handshaking relay endpoints that are trusted (#16412 )
2025-06-30 12:12:57 -07:00
2fc247573b
cmd/k8s-operator: ProxyClass annotation for Services and Ingresses (#16363 )
2025-06-30 12:08:35 +01:00
f85e4bcb32
client/systray: replace counter metric with gauge
2025-06-27 13:11:59 -04:00
ee8c3560ef
tailcfg: format integer IDs as decimal consistently
2025-06-23 09:02:03 -07:00
3dc694b4f1
wgengine/magicsock: clear UDP relay bestAddr's on disco ping timeout (#16410 )
2025-06-27 19:11:59 -07:00
544aee9d08
tsidp: update README to refer to community projects (#16411 )
2025-06-27 17:30:43 -07:00
76b9afb54d
ipn/store: make StateStore.All optional (#16409 )
2025-06-27 15:14:18 -07:00
0a64e86a0d
wgengine/magicsock: move UDP relay path discovery to heartbeat() (#16407 )
2025-06-27 13:56:55 -07:00
711698f5a9
cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328 )
2025-06-27 18:10:04 +01:00
f81baa2d56
cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115 )
2025-06-27 17:12:14 +01:00
53f67c4396
util/eventbus: fix docstrings (#16401 )
2025-06-27 10:03:56 -04:00
df786be14d
cmd/tailscale: use text format for TKA head
2025-06-27 11:54:01 +02:00
4a7b8afabf
cmd/tailscale: add tlpub: prefix to lock log output
2025-06-20 13:21:31 +02:00
b32a01b2dc
disco,net/udprelay,wgengine/magicsock: support relay re-binding (#16388 )
2025-06-26 19:30:14 -07:00
b2bf7e988e
wgengine/magicsock: add envknob to toggle UDP relay feature (#16396 )
2025-06-26 18:39:47 -07:00
6feb3c35cb
ipn/store: automatically migrate between plaintext and encrypted state (#16318 )
2025-06-26 17:09:13 -07:00
d2c1ed22c3
.github/workflows: replace tibdex with official GitHub Action (#16385 )
2025-06-26 13:37:21 -07:00
99aaa6e92c
ipn/ipnlocal: update PeerByID to return SelfNode and rename it to NodeByID (#16096 )
2025-06-27 00:43:48 +08:00
47dff33eac
tool/gocross: remove GOROOT to ensure correct toolchain use
2025-06-25 18:07:49 -07:00
aa106c92a4
.github/workflows: request @tailscale/dataplane review DERP changes (#16372 )
2025-06-25 21:30:44 -07:00
51d00e135b
wgengine/magicsock: fix relayManager alloc work cleanup (#16387 )
2025-06-25 19:13:02 -07:00
37eca1785c
net/netmon: add tests for the events over the eventbus (#16382 )
2025-06-25 14:44:01 -04:00
35b11e7be5
envknob/featureknob: restore SSH and exit-node capability for Home Assistant (#16263 )
2025-06-25 20:26:11 +03:00
b75fe9eeca
cmd/k8s-operator: Add NOTES.txt to Helm chart (#16364 )
2025-06-25 14:14:17 +01:00
f2f1236ad4
util/eventbus: add test helpers to simplify testing events (#16294 )
2025-06-25 09:00:34 -04:00
83cd446b5d
release/dist/qnap: upgrade to Ubuntu 24.04 Docker image
2025-06-24 16:56:28 -05:00
9e28bfc69c
ipn/ipnlocal,wgengine/magicsock: wait for magicsock to process pending events on authReconfig
2025-06-24 13:39:29 -05:00
4a1fc378d1
release/dist: switch back to Ubuntu 20.04 for building QNAP packages
2025-06-23 17:55:23 -05:00
31eebdb0f8
wgengine/magicsock: send CallMeMaybeVia for relay endpoints (#16360 )
2025-06-23 16:13:58 -07:00
a589863d61
feature/relayserver,net/udprelay,wgengine/magicsock: implement retry (#16347 )
2025-06-23 15:50:43 -07:00
9288efe592
wgengine/magicsock: remove premature return in handshakeServerEndpoint (#16351 )
2025-06-23 08:53:29 -07:00
0198255266
cmd/tailscale: warn user about nllock key removal without resigning
2025-06-19 11:32:54 +02:00
9309760263
util/prompt: make yes/no prompt reusable
2025-06-19 11:31:47 +02:00
b3e74367d8
tool: rename go.ps1 to go-win.ps1 for cmd.exe+Powershell compat
2025-06-22 21:15:20 -07:00
0905936c45
wgengine/magicsock: set Geneve header protocol for WireGuard (#16350 )
2025-06-21 21:14:42 -07:00
61958f531c
wgengine/magicsock: set conn field in relayHandshakeDiscoMsgEvent (#16348 )
2025-06-21 19:09:36 -07:00
e935a28a19
wgengine/magicsock: set rxDiscoMsgCh field in relayHandshakeWork (#16349 )
2025-06-21 19:09:19 -07:00
cd9b9a8cad
wgengine/magicsock: fix relay endpoint allocation URL (#16344 )
2025-06-20 19:23:52 -07:00
d3bb34c628
wgengine/magicsock: generate relay server set from tailnet policy (#16331 )
2025-06-20 15:00:28 -07:00
12e92b1b08
tsconsensus: skipping slow non-applicable tests on Windows for now
2025-06-20 10:25:42 -07:00
bb085cfa3e
tool: add go toolchain wrapper for Windows
2025-06-19 20:48:50 -07:00
ca06d944c5
.github/workflows: try running Windows jobs on bigger VMs
2025-06-19 18:35:49 -07:00
9af42f425c
.github/workflows: shard the Windows builder
2025-06-19 10:56:15 -07:00
5a52f80c4c
docs: fix typo in commit-messages.md
2025-06-17 04:50:01 +03:00
253d0b026d
cmd/k8s-operator: remove conffile hashing mechanism (#16335 )
2025-06-20 10:34:47 +01:00
a64ca7a5b4
tstest/tlstest: simplify, don't even bake in any keys
2025-06-19 07:58:19 -07:00
583f740c0b
Revert "types/netmap,wgengine/magicsock: propagate CapVer to magicsock.endpoint (#16244 )" (#16322 )
2025-06-19 09:47:06 -07:00
e92eb6b17b
net/tlsdial: fix TLS cert validation of HTTPS proxies
2025-06-08 18:51:41 -07:00
4979ce7a94
feature/tpm: implement ipn.StateStore using TPM sealing (#16030 )
2025-06-18 14:17:12 -07:00
ad0dfcb185
net/*: remove Windows exceptions for when Resolver.PreferGo didn't work
2025-06-17 20:25:09 -07:00
fcab50b276
ipn/ipnlocal,wgengine{/magicsock}: replace SetNetworkMap with eventbus (#16299 )
2025-06-18 10:31:00 -07:00
45a4b69ce0
cmd/tsidp: fix OIDC client persistence across restarts
2025-06-18 10:43:19 -05:00
a91fcc8813
ipn/ipnlocal: make pricing restriction message for Tailnet Lock clearer
2025-06-18 11:38:18 +01:00
49ae66c10c
cmd/tailscale: clean up dns --help messages (#16306 )
2025-06-17 20:39:59 -07:00
Nick Khyl
Jordan Whited
Tom Proctor
Simon Law
Naman Sood
David Bond
dependabot[bot]
Dylan Bargatze
Irbe Krumina
James Tucker
Andrew Lytvynov
kari-ts
Percy Wegmann
Tom Meadows
Will Norris
Brad Fitzpatrick
Claus Lensbøl
Kristoffer Dalby
JerryYan
Laszlo Magyar
okunamayanad
Raj Singh
Anton Tolchanov