This website requires JavaScript.
600f25dac9
tailcfg: add JSON unmarshal helper for view of node/peer capabilities
Adrian Dewhurst
2025-02-03 14:08:26 -05:00
95e2353294
wgengine/wgcfg/nmcfg: coalesce, limit some debug logs
Brad Fitzpatrick
2025-02-03 09:59:07 -08:00
10fe10ea10
derp/derphttp,ipn/localapi,net/captivedetection: add cache resistance to captive portal detection
James Tucker
2025-01-31 12:54:50 -08:00
17ca2b7721
cmd/tailscale/cli: update tailscale down to accept an optional --reason
Nick Khyl
2025-01-31 16:12:32 -06:00
496347c724
go.mod: bump inetaf/tcpproxy
Brad Fitzpatrick
2025-02-03 08:53:23 -08:00
d832467461
client/tailscale,ipn/ipn{local,server},util/syspolicy: implement the AlwaysOn.OverrideWithReason policy setting
Nick Khyl
2025-01-31 16:14:13 -06:00
2c02f712d1
util/syspolicy/internal/metrics: replace dots with underscores for metric names
Nick Khyl
2025-01-31 16:09:15 -06:00
a0537dc027
ipn/ipnlocal: fix a panic in setPrefsLockedOnEntry when cc is nil
Nick Khyl
2025-01-31 18:27:37 -06:00
2e95313b8b
ssh,tempfork/gliderlabs/ssh: replace github.com/tailscale/golang-x-crypto/ssh with golang.org/x/crypto/ssh
Percy Wegmann
2025-01-31 12:19:22 -06:00
0a51bbc765
ipn/ipnauth,util/syspolicy: improve comments
Nick Khyl
2025-01-31 11:22:15 -06:00
02ad21717f
ipn/ipn{auth,server,local}: initial support for the always-on mode
Nick Khyl
2025-01-30 18:29:02 -06:00
535a3dbebd
ipn/ipnauth: implement an Actor representing tailscaled itself
Nick Khyl
2025-01-29 15:49:31 -06:00
081595de63
ipn/{ipnauth, ipnserver}: extend the ipnauth.Actor interface with a CheckProfileAccess method
Nick Khyl
2025-01-29 15:34:20 -06:00
4e7f4086b2
ipn: generate LoginProfileView and use it instead of *LoginProfile where appropriate
Nick Khyl
2025-01-30 11:24:25 -06:00
7d5fe13d27
types/views: make SliceEqualAnyOrder also do short slice optimization
Brad Fitzpatrick
2025-01-30 08:46:21 +00:00
8ee72cd33c
cli/funnel: fix comment typo (#14840 )
Andrea Gottardo
2025-01-30 14:21:32 -08:00
08dd4994d0
VERSION.txt: this is v1.81.0 (#14838 )
Andrea Gottardo
2025-01-30 13:04:29 -08:00
138a83efe1
cmd/containerboot: wait for consistent state on shutdown (#14263 )
Tom Proctor
2025-01-30 13:51:10 +00:00
c2af1cd9e3
prober: support multiple probes running concurrently
Anton Tolchanov
2025-01-29 15:35:37 +00:00
a49af98b31
cmd/k8s-operator: temporarily disable HA Ingress controller (#14833 )
Irbe Krumina
2025-01-30 13:36:33 +02:00
0ed4aa028f
control/controlclient: flesh out a recently added comment
Brad Fitzpatrick
2025-01-30 07:23:36 +00:00
ed8bb3b564
control/controlclient: add missing word in comment
Brad Fitzpatrick
2025-01-30 07:22:52 +00:00
3f39211f98
cmd/k8s-operator: check that cluster traffic is routed to egress ProxyGroup Pod before marking it as ready (#14792 )
Irbe Krumina
2025-01-30 10:47:45 +02:00
8bd04bdd3a
go.mod: bump gorilla/csrf for security fix (#14822 )
Brad Fitzpatrick and Patrick O'Doherty
2025-01-29 20:44:01 +00:00
b60f6b849a
Revert "ssh,tempfork/gliderlabs/ssh: replace github.com/tailscale/golang-x-crypto/ssh with golang.org/x/crypto/ssh"
Percy Wegmann
2025-01-29 10:25:50 -06:00
52f88f782a
cmd/k8s-operator: don't set deprecated configfile hash on new proxies (#14817 )
Irbe Krumina
2025-01-29 17:48:05 +02:00
b406f209c3
cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't terminate while cluster traffic is still routed to them (#14436 )
Irbe Krumina
2025-01-29 09:35:50 +02:00
eb299302ba
types/views: fix SliceEqualAnyOrderFunc short optimization
Andrew Dunham
2025-01-24 13:26:08 -05:00
0aa54151f2
.github: Bump actions/checkout from 3.6.0 to 4.2.2 (#14139 )
dependabot[bot]
2025-01-28 15:03:13 -07:00
f1514a944a
go.toolchain.rev: bump from Go 1.23.3 to 1.23.5 (#14814 )
Mario Minardi
2025-01-28 14:35:24 -07:00
46fd4e58a2
ssh,tempfork/gliderlabs/ssh: replace github.com/tailscale/golang-x-crypto/ssh with golang.org/x/crypto/ssh
Percy Wegmann
2025-01-27 13:05:27 -06:00
3abfbf50ae
tsnet: return from Accept when the listener gets closed
Anton Tolchanov
2025-01-28 12:10:28 +00:00
6f10fe8ab1
cmd/tailscale: add warning to help text of --force-reauth (#14778 )
yejingchen
2025-01-28 18:05:49 +08:00
079973de82
tempfork/acme: fix TestSyncedToUpstream with Windows line endings
Brad Fitzpatrick
2025-01-27 22:03:22 +00:00
ba1f9a3918
types/persist: remove Persist.LegacyFrontendPrivateMachineKey
Brad Fitzpatrick
2025-01-24 19:56:33 -08:00
2691b9f6be
tempfork/acme: add new package for x/crypto package acme fork, move
Brad Fitzpatrick
2025-01-27 03:07:21 +00:00
bd9725c5f8
health: relax no-derp-home warnable to not fire if not in map poll
Brad Fitzpatrick
2025-01-27 14:21:25 +00:00
bfde8079a0
health: do Warnable dependency filtering in tailscaled
Brad Fitzpatrick
2025-01-27 13:37:49 +00:00
76dc028b38
.github: Bump github/codeql-action from 3.28.1 to 3.28.5 (#14794 )
dependabot[bot]
2025-01-27 12:36:42 -07:00
3fec806523
.github: Bump actions/setup-go from 5.2.0 to 5.3.0 (#14793 )
dependabot[bot]
2025-01-27 12:36:04 -07:00
bce05ec6c3
control/controlclient,tempfork/httprec: don't link httptest, test certs for c2n
Brad Fitzpatrick
2025-01-26 17:06:06 +00:00
8c925899e1
go.mod: bump depaware, add --internal flag to stop hiding internal packages
Brad Fitzpatrick
2025-01-26 17:09:44 +00:00
04029b857f
tstest/deptest: verify that tailscale.com BadDeps actually exist
Brad Fitzpatrick
2025-01-26 18:12:46 +00:00
e701fde6b3
control/controlknobs: make Knobs.AsDebugJSON automatic, not require maintenance
Brad Fitzpatrick
2025-01-26 18:23:38 +00:00
66b2e9fd07
envknob/featureknob: allow use of exit node on unraid (#14754 )
Derek Kaser
2025-01-26 10:35:58 -05:00
68a66ee81b
feature/capture: move packet capture to feature/*, out of iOS + CLI
Brad Fitzpatrick
2025-01-23 20:39:28 -08:00
2c98c44d9a
control/controlclient: sanitize invalid DERPMap nil Region from control
Brad Fitzpatrick
2025-01-23 13:58:40 -08:00
82e41ddc42
cmd/natc: expose netstack metrics in client metrics in natc
James Tucker
2025-01-23 16:31:40 -08:00
2089f4b603
ipn/ipnlocal: add debug envknob for ACME directory URL (#14771 )
Tom Proctor
2025-01-25 00:29:00 +00:00
ca39c4e150
cmd/natc,wgengine/netstack: tune buffer size and segment lifetime in natc
James Tucker
2025-01-23 16:23:41 -08:00
1a7274fccb
control/controlclient: skip SetControlClientStatus when queue has newer results later
Brad Fitzpatrick
2025-01-24 13:09:21 -08:00
cbf1a9abe1
go.{mod,sum}: update web-client-prebuilt (#14772 )
Mario Minardi
2025-01-24 17:04:12 -07:00
716e4fcc97
client/web: remove advanced options from web client login (#14770 )
Mario Minardi
2025-01-24 16:29:58 -07:00
69bc164c62
ipn/ipnlocal: include DNS SAN in cert CSR (#14764 )
Tom Proctor
2025-01-24 17:04:26 +00:00
d69c70ee5b
tailcfg: adjust ServiceName.Validate to use vizerror
Adrian Dewhurst
2025-01-23 14:26:16 -05:00
05afa31df3
util/clientmetric: use counter in aggcounter
Kristoffer Dalby
2025-01-24 12:51:01 +01:00
450bc9a6b8
cmd/derper,derp: make TCP write timeout configurable
Percy Wegmann
2025-01-23 14:32:22 -06:00
5e9056a356
derp: move Conn interface to derp.go
Percy Wegmann
2025-01-23 09:08:54 -06:00
f0b63d0eec
wgengine/filter: add check for unknown proto
Kristoffer Dalby
2025-01-08 10:53:07 +01:00
f39ee8e520
net/tstun: add back outgoing drop metric
Kristoffer Dalby
2024-12-20 09:12:37 +01:00
5756bc1704
wgengine/filter: return drop reason for metrics
Kristoffer Dalby
2024-12-20 09:09:06 +01:00
3a39f08735
util/usermetric: add more drop labels
Kristoffer Dalby
2024-12-20 09:09:53 +01:00
61bea75092
cmd/tailscale: fix, test some recent doc inconsistencies
Brad Fitzpatrick
2025-01-23 18:40:17 -08:00
f0db47338e
cmd/tailscaled,util/syspolicy/source,util/winutil/gp: disallow acquiring the GP lock during service startup
Nick Khyl
2025-01-16 15:48:07 -06:00
413fb5b933
control/controlclient: delete unreferenced mapSession UserProfiles
Brad Fitzpatrick
2025-01-23 12:45:06 -08:00
d6abbc2e61
net/tstun: move TAP support out to separate package feature/tap
Brad Fitzpatrick
2025-01-22 18:07:57 -08:00
f1710f4a42
appc,ipn/ipnlocal: log DNS parsing errors in app connectors (#14607 )
Andrew Lytvynov
2025-01-23 09:03:56 -08:00
a00623e8c4
derp,wgengine/magicsock: remove unexpected label (#14711 )
Mike O'Driscoll
2025-01-23 09:04:03 -05:00
3033a96b02
cmd/k8s-operator: fix reconciler name clash (#14712 )
Tom Proctor
2025-01-23 10:47:21 +00:00
1562a6f2f2
feature/*: make Wake-on-LAN conditional, start supporting modular features
Brad Fitzpatrick
2025-01-22 11:56:36 -08:00
3fb8a1f6bf
ipn/ipnlocal: re-advertise appc routes on startup, take 2 (#14740 )
Andrew Lytvynov
2025-01-22 16:50:25 -08:00
3dabea0fc2
cmd/tailscale: define CLI tools to manipulate macOS network and system extensions (#14727 )
Andrea Gottardo
2025-01-22 16:01:07 -08:00
0fa7b4a236
tailcfg: add ServiceName
Adrian Dewhurst
2025-01-21 17:07:34 -05:00
d1b378504c
.github: Bump slackapi/slack-github-action from 1.27.0 to 2.0.0 (#14141 )
dependabot[bot]
2025-01-22 11:46:13 -07:00
8b65598614
util/slicesx: add AppendNonzero
Brad Fitzpatrick
2025-01-22 10:05:43 -08:00
17022ad0e9
tailcfg: remove now-unused TailscaleFunnelEnabled method
Brad Fitzpatrick
2025-01-22 06:33:05 -08:00
e4779146b5
delete extra struct in tailcfg
KevinLiang10
2025-01-22 10:45:30 -05:00
550923d953
fix handler related and some nit
KevinLiang10
2025-01-22 09:24:49 -05:00
0a57051f2e
add blank line
KevinLiang10
2025-01-21 16:54:27 -05:00
ccd1643043
add copyright header
KevinLiang10
2025-01-21 16:47:22 -05:00
8c8750f1b3
ipn/ipnlocal: Support TCP and Web VIP services
KevinLiang10
2025-01-20 12:02:53 -05:00
cb3b1a1dcf
tsweb: add missing debug pprof endpoints
Brad Fitzpatrick
2025-01-22 06:20:14 -08:00
042ed6bf69
net/bakedroots: add LetsEncrypt ISRG Root X2
Brad Fitzpatrick
2025-01-21 17:19:42 -08:00
150cd30b1d
ipn/ipnlocal: also use LetsEncrypt-baked-in roots for cert validation
Brad Fitzpatrick
2025-01-21 15:30:55 -08:00
e12b2a7267
cmd/tailscale/cli: clean up how optional commands get registered
Brad Fitzpatrick
2025-01-21 15:42:12 -08:00
8b9d5fd6bc
go.mod: bump github.com/inetaf/tcpproxy
James Tucker
2025-01-21 10:34:28 -08:00
b50d32059f
tsnet: block in Server.Dial until backend is Running
Brad Fitzpatrick
2025-01-21 09:50:45 -08:00
2729942638
prober: fix nil pointer access in tcp-in-tcp probes
Percy Wegmann
2025-01-18 20:41:36 -06:00
7f3c1932b5
tsnet: fix panic on race between listener.Close and incoming packet
Brad Fitzpatrick
2025-01-21 10:23:58 -08:00
51adaec35a
Revert "ipn/ipnlocal: re-advertise appc routes on startup (#14609 )"
Brad Fitzpatrick
2025-01-21 08:02:24 -08:00
bcc262269f
build(deps): bump braces from 3.0.2 to 3.0.3 in /cmd/tsconnect (#12468 )
dependabot[bot]
2025-01-20 22:24:13 -07:00
817ba1c300
cmd/{k8s-operator,containerboot},kube/kubetypes: parse Ingresses for ingress ProxyGroup (#14583 )
Irbe Krumina
2025-01-21 05:21:03 +00:00
69a985fb1e
ipn/ipnlocal,tailcfg: communicate to control whether funnel is enabled (#14688 )
Irbe Krumina
2025-01-21 05:17:27 +00:00
70c7b0d77f
build(deps): bump nanoid from 3.3.4 to 3.3.8 in /cmd/tsconnect (#14352 )
dependabot[bot]
2025-01-20 13:05:37 -07:00
682c06a0e7
.github: Bump golangci/golangci-lint-action from 6.1.0 to 6.2.0 (#14696 )
dependabot[bot]
2025-01-20 12:48:50 -07:00
33e62a31bd
.github: Bump peter-evans/create-pull-request from 7.0.5 to 7.0.6 (#14695 )
dependabot[bot]
2025-01-20 11:18:42 -07:00
174af763eb
.github: Bump actions/upload-artifact from 4.4.3 to 4.6.0 (#14697 )
dependabot[bot]
2025-01-20 10:57:18 -07:00
6e3c746942
derp: add bytes dropped metric (#14698 )
Mike O'Driscoll
2025-01-20 12:31:26 -05:00
6c30840cac
ipn: [serve] warn that foreground funnel won't work if shields are up (#14685 )
Irbe Krumina
2025-01-19 19:00:21 +00:00
c79b736a85
ipnlocal: allow overriding os.Hostname() via syspolicy (#14676 )
Andrea Gottardo and Nick Khyl
2025-01-17 14:52:47 -08:00