This website requires JavaScript.
a567f56445
ipn/store/kubestore: sanitize keys loaded to in-memory store (#15178 )
Irbe Krumina
2025-03-03 08:04:18 -08:00
986daca5ee
scripts/installer.sh: explicitly chmod 0644 installed files (#15171 )
Irbe Krumina
2025-03-02 10:22:15 -08:00
dc18091678
ipn: update AddPeer to include TaildropTarget (#15091 )
kari-ts
2025-02-28 14:17:28 -08:00
74d7d8a77b
ipn/store/awsstore: allow providing a KMS key
Lee Briggs and Brad Fitzpatrick
2025-01-24 11:15:28 -08:00
ef906763ee
util/eventbus: initial implementation of an in-process event bus
David Anderson and M. J. Fromberger
2025-02-27 16:31:56 -08:00
8c2717f96a
ipn/ipnlocal: send vipServices info via c2n even it's incomplete (#15166 )
KevinLiang10
2025-02-28 13:51:07 -05:00
2791b5d5cc
go.{mod,sum}: bump mkctr (#15161 )
Irbe Krumina
2025-02-28 01:28:08 -08:00
7180812f47
licenses: add README
Will Norris
2025-02-27 13:40:43 -08:00
90273a7f70
safesocket: return an error for LocalTCPPortAndToken for tailscaled (#15144 )
Jonathan Nobels
2025-02-27 18:55:46 -05:00
6df0aa58bb
cmd/containerboot: fix nil pointer exception (#15090 )
Irbe Krumina
2025-02-27 15:05:04 -08:00
b85d18d14e
ipn/{ipnlocal,store},kube/kubeclient: store TLS cert and key pair to a Secret in a single operation. (#15147 )
Irbe Krumina
2025-02-27 14:41:05 -08:00
3d28aa19cb
all: statically enforce json/v2 interface satisfaction (#15154 )
Joe Tsai
2025-02-27 12:33:31 -08:00
f5522e62d1
client/web: fix CSRF handler order in web UI (#15143 )
Patrick O'Doherty
2025-02-27 11:58:45 -08:00
ae303d41dd
go.mod: bump github.com/go-json-experiment/json (#15010 )
Joe Tsai
2025-02-27 11:35:54 -08:00
c174d3c795
scripts/installer.sh: ensure default umask for the installer (#15139 )
Irbe Krumina
2025-02-26 09:02:40 -08:00
820bdb870a
maths: add exponentially weighted moving average type
James Tucker
2025-02-14 18:36:24 -08:00
d7508b24c6
go.mod: bump golang.org/x/crypto (#15123 )
Andrew Lytvynov
2025-02-25 08:39:56 -08:00
83c104652d
cmd/derper: add --socket flag to change unix socket path to tailscaled
Brad Fitzpatrick
2025-02-24 20:11:14 -08:00
8d7033fe7f
ipn/ipnlocal,util/syspolicy,docs/windows/policy: implement the ReconnectAfter policy setting
Nick Khyl
2025-02-24 14:50:04 -06:00
d1b0e1af06
cmd/testwrapper/flakytest: add Marked to check if in flakytest (#15119 )
Paul Scott
2025-02-24 13:26:41 -08:00
781c1e9624
tstest/deptest: add DepChecker.ExtraEnv option for callers to set
Brad Fitzpatrick
2025-02-24 12:14:14 -08:00
f5997b3c57
go.toolchain.rev: bump Tailscale Go 1.24 for a Tailscale revert + upstream bump
Brad Fitzpatrick
2025-02-20 08:14:49 -08:00
dcd7cd3c6a
client/systray: show message on localapi permission error
Will Norris
2025-02-20 15:55:42 -08:00
074372d6c5
scripts/installer.sh: add SparkyLinux as a Debian derivative (#15076 )
Erisa A
2025-02-20 18:22:08 +00:00
2c3338c46b
client/tailscale: fix Client.BuildURL and Client.BuildTailnetURL (#15064 )
Andrew Lytvynov
2025-02-19 17:19:54 -08:00
836c01258d
go.toolchain.branch: update to Go 1.24 (#15016 )
2025-02-19 10:55:49 -08:00
cc923713f6
tempfork/acme: pull in latest changes for Go 1.24 (#15062 )
Andrew Lytvynov
2025-02-19 10:42:06 -08:00
323747c3e0
various: disable MPTCP when setting TCP_USER_TIMEOUT sockopt (#15063 )
Andrew Lytvynov
2025-02-19 10:41:45 -08:00
09982e1918
ipn/ipnlocal: reset always-on override and apply policy settings on start
Nick Khyl
2025-02-18 15:52:10 -06:00
1f1a26776b
client/tailscale,cmd/k8s-operator,internal/client/tailscale: move VIP service client methods into internal control client
Percy Wegmann
2025-02-12 10:34:28 -06:00
9c731b848b
cmd/gitops-pusher: log error details when unable to fetch ACL ETag
Percy Wegmann
2025-02-18 14:06:22 -06:00
ec5f04b274
appc: fix a deadlock in route advertisements (#15031 )
Andrew Lytvynov and Irbe Krumina
2025-02-18 11:31:14 -08:00
052eefbcce
tsnet: require I_Acknowledge_This_API_Is_Experimental to use AuthenticatedAPITransport()
Percy Wegmann
2025-02-14 15:34:33 -06:00
9ae9de469a
internal/client/tailscale: change Client from alias into wrapper
Percy Wegmann
2025-02-12 10:43:09 -06:00
8a792ab540
tsnet: provide AuthenticatedAPITransport for use with tailscale.com/client/tailscale/v2
Percy Wegmann
2025-02-07 09:28:09 -06:00
4f0222388a
cmd,tsnet,internal/client: create internal shim to deprecated control plane API
Percy Wegmann
2025-02-07 09:09:36 -06:00
d923979e65
client/tailscale: mark control API client deprecated
Percy Wegmann
2025-02-07 08:54:35 -06:00
cbf3852b5d
cmd/testwrapper: temporarily remove test coverage support
Brad Fitzpatrick
2025-02-17 08:58:38 -08:00
b21eec7621
ipn/ipnlocal,tailcfg: don't send WireIngress if IngressEnabled already true (#14960 )
Irbe Krumina
2025-02-16 09:38:02 +00:00
606f7ef2c6
net/netcheck: remove unnecessary custom map clone function
James Tucker
2025-02-14 17:15:20 -08:00
6df5c8f32e
various: keep tailscale connected when Always On mode is enabled on Windows
Nick Khyl
2025-02-13 16:46:24 -06:00
e11ff28443
cmd/k8s-operator: allow to optionally configure an HTTP endpoint for the HA Ingress (#14986 )
Irbe Krumina
2025-02-14 18:07:17 +00:00
45f29a208a
control/controlclient,tailcfg:types: remove MaxKeyduration from NetMap
James Sanderson
2025-01-30 14:20:27 +00:00
717fa68f3a
tailcfg: read max key duration from node cap map [capver 114]
James Sanderson
2025-01-29 21:13:01 +00:00
4c3c04a413
ipn, tailscale/cli: add TaildropTargetStatus and remove race with FileTargets (#15017 )
kari-ts
2025-02-14 09:56:50 -08:00
e142571397
ipn/ipnlocal: add GetFilterForTest (#15025 )
James 'zofrex' Sanderson
2025-02-14 15:25:48 +00:00
1d035db4df
types/bools: fix doc typo (#15021 )
Joe Tsai
2025-02-13 16:12:00 -08:00
db231107a2
ssh/tailssh: accept passwords and public keys
Percy Wegmann
2025-02-10 11:43:08 -06:00
f2f7fd12eb
go.mod: bump bart
James Tucker
2025-02-12 17:19:17 -08:00
7aef4fd44d
ipn/ipn{local,server}: extract logic that determines the "best" Tailscale profile to use
Nick Khyl
2025-02-12 17:43:53 -06:00
b7f508fccf
Revert "control/controlclient: delete unreferenced mapSession UserProfiles"
Brad Fitzpatrick
2025-02-11 14:00:50 -08:00
01efddea01
docs/windows/policy: update ADMX/ADML policy definitions to include the new Always On setting
Nick Khyl
2025-02-11 15:10:26 -06:00
2994dde535
licenses: update license notices
License Updater
2025-02-10 15:02:25 +00:00
9b32ba7f54
ipn/ipn{local,server}: move "staying alive in server mode" from ipnserver to LocalBackend
Nick Khyl
2025-02-11 12:53:20 -06:00
bc0cd512ee
ipn/desktop: add a new package for managing desktop sessions on Windows
Nick Khyl
2025-02-10 17:47:10 -06:00
5eacf61844
ipn/ipnauth: implement WindowsActor
Nick Khyl
2025-02-07 14:01:52 -06:00
e9e2bc5bd7
ipn/ipn{auth,server}: update ipnauth.Actor to carry a context
Nick Khyl
2025-02-07 10:47:14 -06:00
5a082fccec
tailcfg: remove ancient UserProfiles.Roles field
Brad Fitzpatrick
2025-02-11 13:02:42 -08:00
926a43fe51
tailcfg: make NetPortRange.Bits omitempty
Andrew Dunham
2025-02-11 14:58:57 -05:00
f35c49d211
net/dns: update to illarion/gonotify/v3 to fix a panic
Anton
2025-02-11 17:39:53 +00:00
c4984632ca
net/dns: add a simple test for resolv.conf inotify watcher
Anton
2025-02-11 17:26:07 +00:00
b865ceea20
tailcfg: update + clean up machine API docs, remove some dead code
Brad Fitzpatrick
2025-02-11 10:09:29 -08:00
8b347060f8
types/bool: add Int (#14984 )
Joe Tsai
2025-02-11 10:23:36 -08:00
27f8e2e31d
go.mod: bump x/* deps
Brad Fitzpatrick
2025-02-11 08:56:04 -08:00
2f98197857
tempfork/sshtest/ssh: add fork of golang.org/x/crypto/ssh for testing only
Brad Fitzpatrick
2025-02-11 07:26:49 -08:00
9706c9f4ff
types/netmap,*: pass around UserProfiles as views (pointers) instead
Brad Fitzpatrick
2025-01-24 19:41:30 -08:00
1047d11102
go.toolchain.rev: bump to Go 1.23.6 (#14976 )
Andrew Lytvynov
2025-02-10 19:03:07 -08:00
48dd4bbe21
ipn/ipn{local,server}: remove ResetForClientDisconnect in favor of SetCurrentUser(nil)
Nick Khyl
2025-02-07 11:18:57 -06:00
11cd98fab0
.github: Bump golangci/golangci-lint-action from 6.2.0 to 6.3.1 (#14963 )
dependabot[bot]
2025-02-10 10:09:44 -07:00
76fe556fcd
.github: Bump github/codeql-action from 3.28.5 to 3.28.9 (#14962 )
dependabot[bot]
2025-02-10 09:58:08 -07:00
122255765a
ipn/ipnlocal: fix (*profileManager).DefaultUserProfileID for users other than current
Nick Khyl
2025-02-07 15:27:31 -06:00
532e38bdc8
scripts/installer.sh: fix --yes argument for freebsd (#14958 )
Erisa A
2025-02-08 14:45:41 +00:00
7b3e5b5df3
wgengine/netstack: respond to service IPs in Linux tun mode
Adrian Dewhurst
2025-02-06 17:21:00 -05:00
e1523fe686
cmd/natc: remove speculative tuning from natc
James Tucker
2025-02-06 10:51:01 -08:00
e113b106a6
go.mod,wgengine/netstack: use cubic congestion control, bump gvisor
James Tucker
2025-02-06 10:45:45 -08:00
4903d6c80b
wgengine/netstack: block link writes when full rather than drop
James Tucker
2025-02-06 10:35:16 -08:00
caafe68eb2
scripts/installer.sh: add BigLinux as a Manjaro derivative (#14936 )
Erisa A
2025-02-06 22:19:16 +00:00
08a96a86af
cmd/tailscale: make ssh command work when tailscaled is built with the ts_include_cli tag
Sandro Jäckel
2024-05-12 22:57:10 +02:00
83808029d8
wgengine/netstack: disable RACK on all platforms
James Tucker
2025-02-03 16:18:07 -08:00
431216017b
scripts/installer.sh: add FreeBSD 14 (#14925 )
Erisa A
2025-02-06 16:32:51 +00:00
d08f830d50
cmd/derper: support no mesh key (#14931 )
Mike O'Driscoll
2025-02-06 10:53:08 -05:00
9a9ce12a3e
cmd/derper: close setec after use (#14929 )
Mike O'Driscoll
2025-02-06 10:52:42 -05:00
1bf4c6481a
safesocket: add ability for Darwin clients to set explicit credentials (#14702 )
Jonathan Nobels
2025-02-06 09:51:00 -05:00
05ac21ebe4
all: use new LocalAPI client package location
Brad Fitzpatrick
2025-02-05 10:53:06 -08:00
8ecce0e98d
client: add missing localclient aliases (#14921 )
Percy Wegmann
2025-02-05 15:06:20 -06:00
f57fa3cbc3
client,localclient: move localclient.go to client/local package
Percy Wegmann
2025-02-05 10:37:59 -06:00
3f2bec5f64
ssh: don't use -l option for shells on OpenBSD
Percy Wegmann
2025-02-05 12:01:01 -06:00
0e6d99cc36
docs/windows/policy: remove an extra closing >
Nick Khyl
2025-02-05 12:04:32 -06:00
8287842269
ssh: refactor OS names into constants
Percy Wegmann
2025-02-04 10:08:19 -06:00
e4bee94857
ssh: don't use -l option for shells on FreeBSD
Percy Wegmann
2025-02-03 16:22:05 -06:00
e6e00012b2
cmd/derper: remove logging of mesh key (#14915 )
Mike O'Driscoll
2025-02-05 11:36:05 -05:00
d5316a4fbb
cmd/derper: add setec secret support (#14890 )
Mike O'Driscoll
2025-02-05 10:41:18 -05:00
e19c01f5b3
clientupdate: refuse to update in tsnet binaries (#14911 )
Andrew Lytvynov
2025-02-04 15:51:03 -08:00
9726e1f208
ipn/{ipnserver,localapi},tsnet: use ipnauth.Self as the actor in tsnet localapi handlers
Nick Khyl
2025-02-04 15:52:21 -06:00
0b7087c401
logpolicy: expose MaxBufferSize and MaxUploadSize options (#14903 )
Joe Tsai
2025-02-04 12:51:27 -08:00
00fe8845b1
ipn/{ipnauth,ipnlocal,ipnserver}: move the AlwaysOn policy check from ipnserver to ipnauth
Nick Khyl
2025-02-04 14:20:06 -06:00
5ef934b62d
cmd/k8s-operator: reinstate HA Ingress reconciler (#14887 )
Irbe Krumina
2025-02-04 15:09:43 +02:00
cfe578870d
derp: tcp-write-timeout=0 should disable write deadline (#14895 )
Jordan Whited
2025-02-03 15:14:16 -08:00
80a100b3cb
net/netmon: add extra panic guard around ParseRIB
James Tucker
2025-02-03 10:24:42 -08:00
97c4c0ecf0
ipn/ipnlocal: add VIP service IPs to localnets
Adrian Dewhurst
2025-01-31 15:25:48 -05:00