This website requires JavaScript.
d08f830d50
cmd/derper: support no mesh key (#14931 )
2025-02-06 10:53:08 -05:00
9a9ce12a3e
cmd/derper: close setec after use (#14929 )
2025-02-06 10:52:42 -05:00
1bf4c6481a
safesocket: add ability for Darwin clients to set explicit credentials (#14702 )
2025-02-06 09:51:00 -05:00
05ac21ebe4
all: use new LocalAPI client package location
2025-02-05 10:53:06 -08:00
8ecce0e98d
client: add missing localclient aliases (#14921 )
2025-02-05 15:06:20 -06:00
f57fa3cbc3
client,localclient: move localclient.go to client/local package
2025-02-05 10:37:59 -06:00
3f2bec5f64
ssh: don't use -l option for shells on OpenBSD
2025-02-05 12:01:01 -06:00
0e6d99cc36
docs/windows/policy: remove an extra closing >
2025-02-05 12:04:32 -06:00
8287842269
ssh: refactor OS names into constants
2025-02-04 10:08:19 -06:00
e4bee94857
ssh: don't use -l option for shells on FreeBSD
2025-02-03 16:22:05 -06:00
e6e00012b2
cmd/derper: remove logging of mesh key (#14915 )
2025-02-05 11:36:05 -05:00
d5316a4fbb
cmd/derper: add setec secret support (#14890 )
2025-02-05 10:41:18 -05:00
e19c01f5b3
clientupdate: refuse to update in tsnet binaries (#14911 )
2025-02-04 15:51:03 -08:00
9726e1f208
ipn/{ipnserver,localapi},tsnet: use ipnauth.Self as the actor in tsnet localapi handlers
2025-02-04 15:52:21 -06:00
0b7087c401
logpolicy: expose MaxBufferSize and MaxUploadSize options (#14903 )
2025-02-04 12:51:27 -08:00
00fe8845b1
ipn/{ipnauth,ipnlocal,ipnserver}: move the AlwaysOn policy check from ipnserver to ipnauth
2025-02-04 14:20:06 -06:00
5ef934b62d
cmd/k8s-operator: reinstate HA Ingress reconciler (#14887 )
2025-02-04 15:09:43 +02:00
cfe578870d
derp: tcp-write-timeout=0 should disable write deadline (#14895 )
2025-02-03 15:14:16 -08:00
80a100b3cb
net/netmon: add extra panic guard around ParseRIB
2025-02-03 10:24:42 -08:00
97c4c0ecf0
ipn/ipnlocal: add VIP service IPs to localnets
2025-01-31 15:25:48 -05:00
600f25dac9
tailcfg: add JSON unmarshal helper for view of node/peer capabilities
2025-02-03 14:08:26 -05:00
95e2353294
wgengine/wgcfg/nmcfg: coalesce, limit some debug logs
2025-02-03 09:59:07 -08:00
10fe10ea10
derp/derphttp,ipn/localapi,net/captivedetection: add cache resistance to captive portal detection
2025-01-31 12:54:50 -08:00
17ca2b7721
cmd/tailscale/cli: update tailscale down to accept an optional --reason
2025-01-31 16:12:32 -06:00
496347c724
go.mod: bump inetaf/tcpproxy
2025-02-03 08:53:23 -08:00
d832467461
client/tailscale,ipn/ipn{local,server},util/syspolicy: implement the AlwaysOn.OverrideWithReason policy setting
2025-01-31 16:14:13 -06:00
2c02f712d1
util/syspolicy/internal/metrics: replace dots with underscores for metric names
2025-01-31 16:09:15 -06:00
a0537dc027
ipn/ipnlocal: fix a panic in setPrefsLockedOnEntry when cc is nil
2025-01-31 18:27:37 -06:00
2e95313b8b
ssh,tempfork/gliderlabs/ssh: replace github.com/tailscale/golang-x-crypto/ssh with golang.org/x/crypto/ssh
2025-01-31 12:19:22 -06:00
0a51bbc765
ipn/ipnauth,util/syspolicy: improve comments
2025-01-31 11:22:15 -06:00
02ad21717f
ipn/ipn{auth,server,local}: initial support for the always-on mode
2025-01-30 18:29:02 -06:00
535a3dbebd
ipn/ipnauth: implement an Actor representing tailscaled itself
2025-01-29 15:49:31 -06:00
081595de63
ipn/{ipnauth, ipnserver}: extend the ipnauth.Actor interface with a CheckProfileAccess method
2025-01-29 15:34:20 -06:00
4e7f4086b2
ipn: generate LoginProfileView and use it instead of *LoginProfile where appropriate
2025-01-30 11:24:25 -06:00
7d5fe13d27
types/views: make SliceEqualAnyOrder also do short slice optimization
2025-01-30 08:46:21 +00:00
8ee72cd33c
cli/funnel: fix comment typo (#14840 )
2025-01-30 14:21:32 -08:00
08dd4994d0
VERSION.txt: this is v1.81.0 (#14838 )
2025-01-30 13:04:29 -08:00
138a83efe1
cmd/containerboot: wait for consistent state on shutdown (#14263 )
2025-01-30 13:51:10 +00:00
c2af1cd9e3
prober: support multiple probes running concurrently
2025-01-29 15:35:37 +00:00
a49af98b31
cmd/k8s-operator: temporarily disable HA Ingress controller (#14833 )
2025-01-30 13:36:33 +02:00
0ed4aa028f
control/controlclient: flesh out a recently added comment
2025-01-30 07:23:36 +00:00
ed8bb3b564
control/controlclient: add missing word in comment
2025-01-30 07:22:52 +00:00
3f39211f98
cmd/k8s-operator: check that cluster traffic is routed to egress ProxyGroup Pod before marking it as ready (#14792 )
2025-01-30 10:47:45 +02:00
8bd04bdd3a
go.mod: bump gorilla/csrf for security fix (#14822 )
2025-01-29 20:44:01 +00:00
b60f6b849a
Revert "ssh,tempfork/gliderlabs/ssh: replace github.com/tailscale/golang-x-crypto/ssh with golang.org/x/crypto/ssh"
2025-01-29 10:25:50 -06:00
52f88f782a
cmd/k8s-operator: don't set deprecated configfile hash on new proxies (#14817 )
2025-01-29 17:48:05 +02:00
b406f209c3
cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't terminate while cluster traffic is still routed to them (#14436 )
2025-01-29 09:35:50 +02:00
eb299302ba
types/views: fix SliceEqualAnyOrderFunc short optimization
2025-01-24 13:26:08 -05:00
0aa54151f2
.github: Bump actions/checkout from 3.6.0 to 4.2.2 (#14139 )
2025-01-28 15:03:13 -07:00
f1514a944a
go.toolchain.rev: bump from Go 1.23.3 to 1.23.5 (#14814 )
2025-01-28 14:35:24 -07:00
46fd4e58a2
ssh,tempfork/gliderlabs/ssh: replace github.com/tailscale/golang-x-crypto/ssh with golang.org/x/crypto/ssh
2025-01-27 13:05:27 -06:00
3abfbf50ae
tsnet: return from Accept when the listener gets closed
2025-01-28 12:10:28 +00:00
6f10fe8ab1
cmd/tailscale: add warning to help text of --force-reauth (#14778 )
2025-01-28 18:05:49 +08:00
079973de82
tempfork/acme: fix TestSyncedToUpstream with Windows line endings
2025-01-27 22:03:22 +00:00
ba1f9a3918
types/persist: remove Persist.LegacyFrontendPrivateMachineKey
2025-01-24 19:56:33 -08:00
2691b9f6be
tempfork/acme: add new package for x/crypto package acme fork, move
2025-01-27 03:07:21 +00:00
bd9725c5f8
health: relax no-derp-home warnable to not fire if not in map poll
2025-01-27 14:21:25 +00:00
bfde8079a0
health: do Warnable dependency filtering in tailscaled
2025-01-27 13:37:49 +00:00
76dc028b38
.github: Bump github/codeql-action from 3.28.1 to 3.28.5 (#14794 )
2025-01-27 12:36:42 -07:00
3fec806523
.github: Bump actions/setup-go from 5.2.0 to 5.3.0 (#14793 )
2025-01-27 12:36:04 -07:00
bce05ec6c3
control/controlclient,tempfork/httprec: don't link httptest, test certs for c2n
2025-01-26 17:06:06 +00:00
8c925899e1
go.mod: bump depaware, add --internal flag to stop hiding internal packages
2025-01-26 17:09:44 +00:00
04029b857f
tstest/deptest: verify that tailscale.com BadDeps actually exist
2025-01-26 18:12:46 +00:00
e701fde6b3
control/controlknobs: make Knobs.AsDebugJSON automatic, not require maintenance
2025-01-26 18:23:38 +00:00
66b2e9fd07
envknob/featureknob: allow use of exit node on unraid (#14754 )
2025-01-26 10:35:58 -05:00
68a66ee81b
feature/capture: move packet capture to feature/*, out of iOS + CLI
2025-01-23 20:39:28 -08:00
2c98c44d9a
control/controlclient: sanitize invalid DERPMap nil Region from control
2025-01-23 13:58:40 -08:00
82e41ddc42
cmd/natc: expose netstack metrics in client metrics in natc
2025-01-23 16:31:40 -08:00
2089f4b603
ipn/ipnlocal: add debug envknob for ACME directory URL (#14771 )
2025-01-25 00:29:00 +00:00
ca39c4e150
cmd/natc,wgengine/netstack: tune buffer size and segment lifetime in natc
2025-01-23 16:23:41 -08:00
1a7274fccb
control/controlclient: skip SetControlClientStatus when queue has newer results later
2025-01-24 13:09:21 -08:00
cbf1a9abe1
go.{mod,sum}: update web-client-prebuilt (#14772 )
2025-01-24 17:04:12 -07:00
716e4fcc97
client/web: remove advanced options from web client login (#14770 )
2025-01-24 16:29:58 -07:00
69bc164c62
ipn/ipnlocal: include DNS SAN in cert CSR (#14764 )
2025-01-24 17:04:26 +00:00
d69c70ee5b
tailcfg: adjust ServiceName.Validate to use vizerror
2025-01-23 14:26:16 -05:00
05afa31df3
util/clientmetric: use counter in aggcounter
2025-01-24 12:51:01 +01:00
450bc9a6b8
cmd/derper,derp: make TCP write timeout configurable
2025-01-23 14:32:22 -06:00
5e9056a356
derp: move Conn interface to derp.go
2025-01-23 09:08:54 -06:00
f0b63d0eec
wgengine/filter: add check for unknown proto
2025-01-08 10:53:07 +01:00
f39ee8e520
net/tstun: add back outgoing drop metric
2024-12-20 09:12:37 +01:00
5756bc1704
wgengine/filter: return drop reason for metrics
2024-12-20 09:09:06 +01:00
3a39f08735
util/usermetric: add more drop labels
2024-12-20 09:09:53 +01:00
61bea75092
cmd/tailscale: fix, test some recent doc inconsistencies
2025-01-23 18:40:17 -08:00
f0db47338e
cmd/tailscaled,util/syspolicy/source,util/winutil/gp: disallow acquiring the GP lock during service startup
2025-01-16 15:48:07 -06:00
413fb5b933
control/controlclient: delete unreferenced mapSession UserProfiles
2025-01-23 12:45:06 -08:00
d6abbc2e61
net/tstun: move TAP support out to separate package feature/tap
2025-01-22 18:07:57 -08:00
f1710f4a42
appc,ipn/ipnlocal: log DNS parsing errors in app connectors (#14607 )
2025-01-23 09:03:56 -08:00
a00623e8c4
derp,wgengine/magicsock: remove unexpected label (#14711 )
2025-01-23 09:04:03 -05:00
3033a96b02
cmd/k8s-operator: fix reconciler name clash (#14712 )
2025-01-23 10:47:21 +00:00
1562a6f2f2
feature/*: make Wake-on-LAN conditional, start supporting modular features
2025-01-22 11:56:36 -08:00
3fb8a1f6bf
ipn/ipnlocal: re-advertise appc routes on startup, take 2 (#14740 )
2025-01-22 16:50:25 -08:00
3dabea0fc2
cmd/tailscale: define CLI tools to manipulate macOS network and system extensions (#14727 )
2025-01-22 16:01:07 -08:00
0fa7b4a236
tailcfg: add ServiceName
2025-01-21 17:07:34 -05:00
d1b378504c
.github: Bump slackapi/slack-github-action from 1.27.0 to 2.0.0 (#14141 )
2025-01-22 11:46:13 -07:00
8b65598614
util/slicesx: add AppendNonzero
2025-01-22 10:05:43 -08:00
17022ad0e9
tailcfg: remove now-unused TailscaleFunnelEnabled method
2025-01-22 06:33:05 -08:00
e4779146b5
delete extra struct in tailcfg
2025-01-22 10:45:30 -05:00
550923d953
fix handler related and some nit
2025-01-22 09:24:49 -05:00
0a57051f2e
add blank line
2025-01-21 16:54:27 -05:00
ccd1643043
add copyright header
2025-01-21 16:47:22 -05:00
Mike O'Driscoll
Jonathan Nobels
Brad Fitzpatrick
Percy Wegmann
Nick Khyl
Andrew Lytvynov
Joe Tsai
Irbe Krumina
Jordan Whited
James Tucker
Adrian Dewhurst
Andrea Gottardo
Tom Proctor
Anton Tolchanov
Andrew Dunham
dependabot[bot]
Mario Minardi
yejingchen
Derek Kaser
Kristoffer Dalby
KevinLiang10