Commit Graph

Select branches

Hide Pull Requests

feat/drive-peers-has-shares

fix/206-bridge-robustness

rebase/2026-05-18

save/webnet-2026-07-29

webnet

#1

#10

#11

#12

#13

#14

#15

#17

#18

#19

#2

#20

#21

#3

#4

#5

#6

#7

#8

#9

Mono Color

• 7be0054a7b words: redress historical wrongs against the tuatara Brad Fitzpatrick 2026-07-18 14:24:31 -07:00
• b91e844014 util/def,cmd/containerboot: add LookupEnv, simplify env parsing (#20277) Nick Rossi 2026-07-17 20:32:52 -05:00
• d2af6a4d39 net/dns/publicdns: don't upgrade Control D port-53-only addresses to DoH (#20463) Brendan Creane 2026-07-17 15:33:17 -07:00
• 689c6c2e6d ipn/ipnlocal: reject SrcCaps-based packet filter rules for unsigned peers (#20513) Mike Jensen 2026-07-17 15:58:06 -06:00
• bab3f5fce7 wgengine/router/osrouter: remove orphaned tailnet addrs on cleanup (#20304) Brendan Creane 2026-07-17 14:18:09 -07:00
• 0433cc6929 feature/syslog, cmd/tailscaled, logpolicy: add optional --syslog flag Brad Fitzpatrick 2026-07-17 19:26:54 +00:00
• def265083b tstest/integration: run a smoke test against a Windows tailscaled service (#20382) yaruk-byte 2026-07-17 12:29:12 -07:00
• 11a6255b22 scripts/installer.sh: remove an unused PACKAGE_NAME variable Alex Chan 2026-07-17 16:06:08 +01:00
• 9175fe2675 net/tstun: drop TSMP messages injected into TUN (#20511) Claus Lensbøl 2026-07-17 15:10:08 -04:00
• 82a381e54b control/controlclient,net/tstun,wgengine/magicsock: fix handling of zero keys in TSMP (#20508) Claus Lensbøl 2026-07-17 14:02:53 -04:00
• c1edf7f458 wgengine/router/osrouter: sanitize interfaceV6UsableForTun path with os.OpenInRoot (#20505) Brendan Creane 2026-07-17 10:17:06 -07:00
• cc0b3ddbbe net/packet: add TSMPType docs Jordan Whited 2026-07-17 09:44:43 -07:00
• 3076698cdf net/packet: fix TSMPType docs Jordan Whited 2026-07-17 09:17:52 -07:00
• 94381a191a disco: fix UDPRelayEndpoint.AddrPorts slice cap math Jordan Whited 2026-07-16 14:59:45 -07:00
• 7ec9b7ffa3 feature/conn25: preserve TTL on DNS rewrites Michael Ben-Ami 2026-07-16 15:22:11 -04:00
• cfd101f9d7 configure DNS even when router.Set fails (#20488) Brendan Creane 2026-07-16 14:53:30 -07:00
• b2de420e3d feature/conn25,types/appctype: serve active Conn25 state over localapi Michael Ben-Ami 2026-07-13 16:56:33 -04:00
• 71e5a98404 Update tailscale/gliderssh to pull in tailscale/gliderssh#12 (#20485) Mike Jensen 2026-07-16 13:46:23 -06:00
• 6a2aa6889e go.mod: bump wireguard-go for priority msg callback Jordan Whited 2026-07-15 15:35:28 -07:00
• 50f1c285ba ipn/ipnlocal,cmd/tailscale/cli: support unix socket targets for TCP serve ayanamist 2026-05-10 21:13:11 +08:00
• 38345dce3d .github: double the timeout for go vet in CI Alex Chan 2026-07-16 13:30:36 +01:00
• 71b90de0d4 derp/derpserver,cmd/derper: use slices.Clip for cert chain copies (#20484) Mike O'Driscoll 2026-07-15 22:13:27 -04:00
• bf7d815631 derp/derpserver,cmd/derper: don't mutate cert provider's shared tls.Certificate (#20478) Mike O'Driscoll 2026-07-15 17:16:40 -04:00
• bef2cd8088 .github, tstest/natlab/vmtest: replace old VM runner job with natlab tests Brad Fitzpatrick 2026-07-15 19:10:27 +00:00
• 6bf05cb63e ipn, ipn/ipnlocal: remove darwin & ios from goosGetsLegacyNetmapNotify Brad Fitzpatrick 2026-07-15 18:32:49 +00:00
• 168b20d3b4 ipn/ipnlocal: remove android from goosGetsLegacyNetmapNotify Brad Fitzpatrick 2026-07-15 12:06:37 -04:00
• 65fd320aa6 ipn/ipnlocal: use the live peer map, not the netmap's stale Peers slice Brad Fitzpatrick 2026-07-15 16:06:02 +00:00
• 0bae201912 tstest/natlab: split SSH test into separate tests Mario Minardi 2026-07-14 11:03:40 -06:00
• 0fb8226708 gokrazy, tstest, cmd/vnet: switch amd64 kernel to gokrazy/kernel.amd64 Brad Fitzpatrick 2026-07-15 15:15:59 +00:00
• 4660a961eb ipn/ipnlocal, wgengine/wgcfg/nmcfg: stop building peer lists on delta path Brad Fitzpatrick 2026-07-15 02:19:14 +00:00
• 3515b009c2 ipn/ipnext, ipn/ipnlocal, feature/conn25: pass peer seq to AllowedIPs hook Brad Fitzpatrick 2026-07-15 12:09:45 +00:00
• f68e4d93fd cmd/tailscale/cli: fix plain TCP serve status coyaSONG 2026-07-14 14:32:40 +09:00
• a534ad5e86 gokrazy/build: expose AMI pipeline as composable steps Kristoffer Dalby 2026-07-15 11:46:23 +00:00
• 720cd0a2d0 all: regenerate dep manifests for aws-sdk-go-v2/service/ec2 Kristoffer Dalby 2026-07-15 09:44:55 +00:00
• a7f3e08335 gokrazy/build: use AWS SDK instead of shelling out to aws CLI Kristoffer Dalby 2026-07-15 09:44:42 +00:00
• b049ce71a5 gokrazy/build: show import-snapshot progress, quiet in CI Kristoffer Dalby 2026-07-15 08:37:12 +00:00
• 7653a1e438 gokrazy: split build.go into thin main + reusable build package Kristoffer Dalby 2026-07-14 13:53:16 +00:00
• bb4f458207 feature/captiveportal: move captive portal code out of ipnlocal, netcheck Brad Fitzpatrick 2026-07-10 05:40:27 +00:00
• 72ca0cae4b wgengine/wgcfg,wgengine,ipn/ipnlocal: remove Peers from wgcfg.Config Brad Fitzpatrick 2026-07-09 14:58:15 +00:00
• 87c0d36942 net/routemanager,ipn/ipnlocal: name the changed-allowed-IPs map type Brad Fitzpatrick 2026-07-14 20:00:08 +00:00
• f0ce89b715 net/tstun,wgengine,ipn/ipnlocal: make tstun's peerConfigTable use RouteManager table Brad Fitzpatrick 2026-07-09 14:28:53 +00:00
• e4144230f4 util/osuser: reject leading dashes in usernames Mario Minardi 2026-07-13 11:57:02 -06:00
• 9d01b036c7 tstest/natlab/vmtest: test jailed and masqueraded peers end-to-end Brad Fitzpatrick 2026-07-14 17:37:51 +00:00
• 0c4dcbdfeb ipn/ipnlocal: replace magicDNSAddrs bool params with a flags type Brad Fitzpatrick 2026-07-14 15:06:28 +00:00
• 3d07b5d6e1 wgengine,cmd/tailscaled,feature/bird: move BIRD integration to ./feature Brad Fitzpatrick 2026-07-10 02:33:34 +00:00
• 9bd62683dd go.mod: revert update vulnerable dependencies (#20435) (#20456) Mike Jensen 2026-07-14 10:26:32 -06:00
• c9b5a918ce feature/conn25: add client metrics for dns response rewrite errors and remove noisy logs Michael Ben-Ami 2026-07-07 17:05:09 -04:00
• 468a7f4973 go.mod: update vulnerable dependencies (#20435) Mike Jensen 2026-07-14 08:29:50 -06:00
• 8bc4c09a46 tstest/natlab: add FreeBSD test case for SSH test Mario Minardi 2026-07-13 21:09:26 -06:00
• 7e609b2581 ipn/ipnlocal,net/dns/resolver: serve MagicDNS names from live indexes Brad Fitzpatrick 2026-07-11 22:34:44 +00:00
• 6a635c4e55 ipn/ipnlocal: route extra WireGuard AllowedIPs through the route manager Brad Fitzpatrick 2026-07-09 02:01:56 +00:00
• aff605d163 ipn/ipnlocal,wgengine: move disco-key change detection to nodeBackend Brad Fitzpatrick 2026-07-09 13:18:04 +00:00
• 911c5e58ed gokrazy: add --json output, --region pinning, git-derived AMI names Kristoffer Dalby 2026-07-13 12:43:51 +00:00
• 7e62ead76e cmd/testwrapper: add a max retry time across all failures (#20453) Tom Proctor 2026-07-14 13:44:21 +01:00
• 6ee7bcb458 cmd/{k8s-operator,containerboot,kube}: support IPv6 in egress ProxyGroup (#19898) BeckyPauley 2026-07-14 13:26:40 +01:00
• 9711883a2f kube/certs: honour Retry-After and skip escalation on transient errors (#20376) Tom Meadows 2026-07-14 13:22:01 +01:00
• 236564af75 cmd/k8s-operator: reorder Ingress cleanup so cert loop stops before VIPService delete (#20426) Tom Meadows 2026-07-14 12:11:56 +01:00
• 58fcaaf9a5 ipn/conf: support RemoteConfig in the config file Kristoffer Dalby 2026-07-09 08:30:24 +00:00
• f9cd687180 flake.nix: add awscli2 for building the appliance AMI Kristoffer Dalby 2026-07-03 13:07:20 +00:00
• e212b075a7 gokrazy: register appliance AMIs as HVM Kristoffer Dalby 2026-07-03 13:05:40 +00:00
• 5e0972344a gokrazy: read config from EC2 user-data on the appliance Kristoffer Dalby 2026-07-03 08:04:42 +00:00
• 758c28fd41 cmd/tailscaled: allow "optional:" prefix on -config Kristoffer Dalby 2026-07-03 08:04:37 +00:00
• d9aeaa504b ipn/conffile: add ErrNoConfig for absent config sources Kristoffer Dalby 2026-07-03 08:04:33 +00:00
• 318807bdb9 ipn/ipnlocal: derive the OS routes from the route manager Brad Fitzpatrick 2026-07-09 02:25:08 +00:00
• 8eb18d902e net/dns/publicdns: use Control D anycast IPs for premium DoH (#20434) Brendan Creane 2026-07-13 16:47:23 -07:00
• 55b1a4de74 net/netcheck: don't mutate Client.TimeNow in AddReportHistoryForTest Brad Fitzpatrick 2026-07-13 21:53:49 +00:00
• b803ba048c ipn/ipnlocal: update getServeHandler path handling on malformed url (#20431) KevinLiang10 2026-07-13 18:15:44 -04:00
• 9cb1147805 wgengine,ipn/ipnlocal,tsnet,cmd/tailscaled: remove PeerForIP from the Engine interface Brad Fitzpatrick 2026-07-09 01:35:14 +00:00
• c436dec43c tstest, cmd/tta: add Tailscale SSH end-to-end VM test Brad Fitzpatrick 2026-07-13 19:45:54 +00:00
• 2506ede862 wgengine,ipn/ipnlocal: remove Engine.PeerKeyForIP and the engine's peer route table Brad Fitzpatrick 2026-07-09 01:13:57 +00:00
• 3c800dcd71 .github/workflows: fix natlab test discovery with fully-excluded files Brad Fitzpatrick 2026-07-13 20:21:29 +00:00
• f831469c27 wgengine,ipn/ipnlocal: sync wireguard-go peers incrementally on netmap deltas Brad Fitzpatrick 2026-07-08 16:44:37 +00:00
• ff1c7ef23c ipn/ipnlocal,net/routemanager: keep a routemanager.RouteManager updated per node Brad Fitzpatrick 2026-07-08 16:06:11 +00:00
• ce050f1ca1 ipn/ipnlocal: test the unresolved-exit-node blackhole routes Brad Fitzpatrick 2026-07-13 15:53:07 +00:00
• 18a95394df ipn/ipnlocal: shut down old control client before starting new one Brad Fitzpatrick 2026-07-12 19:13:44 +00:00
• 505330d09f Revert "go.mod: Update vulnerable dependencies (#20388)" (#20420) Fernando Serboncini 2026-07-13 10:56:05 -04:00
• 125fd88c30 tstest/natlab: fix vnet TCP throughput collapse to slow guests Brad Fitzpatrick 2026-07-13 02:13:38 +00:00
• 721194dfb5 fix(tsconnect/wasm): close conn on upgradeTLS configuration errors too save/webnet-2026-07-29 codingetandClaude 2026-07-12 11:28:33 +00:00
• 296f6c1f78 ipn/ipnlocal: index peers by stable node ID Brad Fitzpatrick 2026-07-11 18:10:51 +00:00
• d69bf2685a all: apply go fix Adriano Sela Aviles 2026-07-10 14:29:23 -07:00
• a5102d3fcb net/routemanager: add incremental route manager Brad Fitzpatrick 2026-07-09 22:40:45 +00:00
• 045c979802 docs: add CLI evolution guidelines James Tucker 2026-06-08 21:35:58 +00:00
• 66a51c426f cmd: apply go fix Adriano Sela Aviles 2026-07-10 14:09:13 -07:00
• 2b62cb54a7 net/dns, util/winutil: improve detection of group policy affecting NRPT Aaron Klotz 2026-07-09 15:10:44 -06:00
• a68be19739 wgengine/netstack: reject unserved ports on Service (VIP) IPs (#20363) KevinLiang10 2026-07-10 14:06:15 -04:00
• 7771ce4e58 wgengine/magicsock: delete Conn.UpdatePeers, derive peer state internally Brad Fitzpatrick 2026-07-09 12:59:34 +00:00
• 3872880617 cmd/cloner: handle named slices as map values (#20387) Andrew Lytvynov 2026-07-10 08:56:49 -07:00
• 0e79b322a9 tsweb/varz: add node_boot_time_seconds expvar Brad Fitzpatrick 2026-07-10 15:18:55 +00:00
• 16f600df8c ipn/conf: add ConfigVAlpha.AdvertiseExitNode scientificworld 2026-06-02 23:13:02 +08:00
• 6fdffd9e5e go.mod: bump github.com/studio-b12/gowebdav Brad Fitzpatrick 2026-07-09 20:10:40 -07:00
• b3d0ebcca3 ipn/ipnlocal: only send AllowsUpdate if clientupdate feature is linked in Brad Fitzpatrick 2026-07-10 00:59:51 +00:00
• ac84eb4900 ipn/ipnlocal: pass self node view to reconfigAppConnectorLocked Brad Fitzpatrick 2026-07-08 23:24:06 +00:00
• ca9f6971e5 go.mod: Update vulnerable dependencies (#20388) Mike Jensen 2026-07-09 15:52:34 -06:00
• 7965d496a6 feature: add README explaining the modular feature system Brad Fitzpatrick 2026-07-09 16:06:36 +00:00
• 692f84df8d wgengine,wgcfg,feature/netlog: move network flow logging behind a feature hook Brad Fitzpatrick 2026-07-09 16:30:45 +00:00
• b7de1753b7 wgengine/wgcfg: remove unused Config DNS and MTU fields Brad Fitzpatrick 2026-07-09 01:02:50 +00:00
• 69ee776dfb feature/acme: lock ACME per-domain instead of globally (#20303) Tom Meadows 2026-07-09 15:06:17 +02:00
• 70244f40e0 go.mod: bump Go to 1.26.5 Patrick O'Doherty 2026-07-08 16:20:36 -07:00
• 63efd06933 licenses: update license notices License Updater 2026-07-06 16:07:02 +00:00
• 384e776dfa cmd/k8s-operator: ensure EndpointSlices exist on every egress reconcile (#20347) BeckyPauley 2026-07-08 16:39:20 +01:00