-
87b3d7b7e5
ipn/localapi,client/local: honour Retry-After on cert rate-limit (#20315)
Tom Meadows
2026-07-08 13:34:40 +01:00
-
9106b237eb
cmd/tailscale/cli: fix nil dereference in configure kubeconfig (#20324)
Saleh
2026-07-08 12:39:54 +03:00
-
887005d255
cmd/tailscale: add 'configure pve-appliance' to make Proxmox VM of appliance
Brad Fitzpatrick
2026-07-06 11:24:30 -07:00
-
c1ae2bb1f8
cmd/tailscale, ipn, feature/remoteconfig: add remote-config support
Brad Fitzpatrick
2026-07-06 21:07:51 +00:00
-
2051c5f358
wgengine,util/execqueue: wait for in-flight linkChange before closing
Adel-Ayoub
2026-07-06 09:36:42 +01:00
-
3d52c3f03e
all: fix more typos caused by unnecessary repetition
Alex Chan
2026-07-06 09:56:25 +01:00
-
81e37f8812
feat(tsconnect/wasm): add upgradeTLS to wrapped conns

codingetandClaude
2026-07-06 09:00:19 +00:00
-
943b97e2f3
wgengine/magicsock: skip sendDiscoPingsLocked when TS_DEBUG_NEVER_DIRECT_UDP (#20298)
Alex Valiushko
2026-07-03 10:14:26 -07:00
-
b838d5caf7
all: fix typos where we repeat repeat ourselves
Alex Chan
2026-07-03 15:36:14 +01:00
-
72c22667b8
util/winutil: fix a typo where we repeat we repeat ourselves
Alex Chan
2026-07-03 08:21:14 +01:00
-
be16cc0d3d
cmd/tailscale/cli/jsonoutput: extract routecheck’s output format
Simon Law
2026-06-01 10:25:33 -07:00
-
5cbe32e0bc
cmd/tailscale/cli/jsonoutput: add support for --format=json
Simon Law
2026-06-29 15:39:17 -07:00
-
ca91eafce5
cmd/tailscale/cli: add
tailscale exit-node suggest --force-probe
Simon Law
2026-05-05 18:53:44 -07:00
-
932260511e
ipn/ipnlocal: use routecheck reports to make exit node suggestions
Simon Law
2026-04-24 10:25:10 -07:00
-
cb7e536804
feature/routecheck,ipn/routecheck: probe reachability in the background
Simon Law
2026-04-23 17:44:57 -07:00
-
d8ee47d1cf
ipn/ipnext, feature/routecheck: subscribe routecheck to the IPN bus

Simon LawandBrad Fitzpatrick
2026-06-10 02:33:16 -07:00
-
8d830599b1
ipn/ipnstate,tailcfg: define IsRouter for PeerStatus and Node
Simon Law
2026-06-12 17:43:56 -07:00
-
7b2432abae
net/routecheck: tweak routecheck documentation and coding style
Simon Law
2026-06-24 16:29:48 -07:00
-
52fdadbf8b
wgengine/netstack: accept IPv4 fragments before reassembly
Brad Fitzpatrick
2026-07-02 04:29:58 +00:00
-
74235b46c1
licenses: update license notices
License Updater
2026-06-29 16:17:35 +00:00
-
9013b6ec1b
net/dns: simplify split DNS compile path
Maisem Ali
2026-06-28 19:08:45 -07:00
-
10672a63f4
net/dns: support global resolvers in macOS tailscaled
Maisem Ali
2026-06-28 18:25:10 -07:00
-
b727675a8b
feature/conn25: allow ICMP packets
Fran Bull
2026-07-02 09:49:49 -07:00
-
76eece2d15
gokrazy, Makefile: improve appliance build tooling
Brad Fitzpatrick
2026-07-01 15:01:34 +00:00
-
4c22d22df5
cmd/fbstatus: add framebuffer status display for the Tailscale appliance
Brad Fitzpatrick
2026-07-01 15:01:06 +00:00
-
6ab63e9a85
cmd/tailscale/cli: add service list command
Adriano Sela Aviles
2026-06-17 14:18:05 -07:00
-
c57b917ac1
gokrazy/gafpush, Makefile: add OTA push tool for appliance development
Brad Fitzpatrick
2026-07-01 17:15:28 +00:00
-
f96db5e383
go.mod: update ts-gokrazy for local dev workflow
Brad Fitzpatrick
2026-07-01 13:14:56 -07:00
-
df40abc610
ipn/ipnlocal: fix reporting of active ipnext extensions
Nick Khyl
2026-07-01 15:06:51 -07:00
-
a8f3c861a4
util/progresstracking: add Ticker, NewWriter, and CountingWriter
Brad Fitzpatrick
2026-07-01 15:00:47 +00:00
-
d0fcb668d5
cmd/tailscale/cli: add 'tailscale configure flash-appliance'
Brad Fitzpatrick
2026-06-30 14:11:46 +00:00
-
64422f274d
kube/certs: use Let's Encrypt's recommended retry schedule (#20292)
Tom Meadows
2026-07-01 11:50:54 +01:00
-
85d8644215
feature/conn25: keep mappings with active flows

Fran BullandMichael Ben-Ami
2026-06-29 11:17:21 -07:00
-
b228748a22
feature/conn25: return expired addrs from index lookups

Fran BullandMichael Ben-Ami
2026-06-29 11:13:05 -07:00
-
b6e17df646
cmd/tailscaled, util/syspolicy: add JSON syspolicy file support
Brad Fitzpatrick
2026-06-30 18:14:00 +00:00
-
07cefc083d
ipn/{ipn,ipnlocal}: add per-user policy snapshots to IPN bus (#20135)
kari-ts
2026-06-30 12:44:29 -07:00
-
fad8b9b8a9
clientupdate, cmd/tailscale: verify signed GAFs, wire up tailscale update for Gokrazy
Brad Fitzpatrick
2026-06-29 20:34:10 +00:00
-
66af25733c
tstest/natlab/vmtest, client/web: add web client integration tests
Brad Fitzpatrick
2026-06-29 17:43:31 +00:00
-
8b5060faf5
ipn/ipnlocal: sort profiles by date created when possible (#20223)
Will Hannah
2026-06-30 09:01:32 -04:00
-
ec6e598550
kube/certs: widen runCertLoop per-call timeout to 30m (#20289)
Tom Meadows
2026-06-30 13:39:50 +01:00
-
477d5a43df
ipn/ipnlocal, feature/conn25: add hook for accepting PeerAPI DNS
Adrian Dewhurst
2026-06-29 12:12:10 -04:00
-
1c77079fd7
ipn/ipnlocal, feature/acme: move most remaining cert code into feature/acme
Brad Fitzpatrick
2026-06-27 13:26:38 +00:00
-
825b7c479f
wgengine/magicsock: fix data race in TestNetworkSendErrors (#20261)
Simon Law
2026-06-29 09:38:07 -07:00
-
28e1320906
wgengine/magicsock: fix warnings about nil health.Tracker (#20264)
Simon Law
2026-06-29 09:18:39 -07:00
-
5ebc7497ea
tsnet: link in feature/acme by default
Brad Fitzpatrick
2026-06-29 08:49:39 -07:00
-
4bb6f35c1f
ipn/ipnlocal: consolidate test-only LocalBackend methods behind ForTest
Brad Fitzpatrick
2026-06-27 14:07:10 +00:00
-
1c0e833749
ipn/ipnlocal: normalize IPv6-mapped IPv4 addrs in WhoIs

Bouke van der BijlandClaude
2026-06-24 14:14:36 +02:00
-
5bd52667fb
.github,.policy-tests.yml: test .policy.yml in CI
Brad Fitzpatrick
2026-06-26 20:57:03 +00:00
-
97e7ea8b0b
go.mod,tsnet,tstest/natlab/vmtest: bump prometheus/common to v0.69.0
Brad Fitzpatrick
2026-06-26 21:18:38 +00:00
-
b64209b248
ipn/config: add RelayServerPort and RelayServerStaticEndpoints to config file (#18300)
Raj Singh
2026-06-26 15:45:29 -05:00
-
79e3bbbfa6
.policy.yml: tweak policy after testing
Brad Fitzpatrick
2026-06-26 19:03:26 +00:00
-
a95119a973
CODEOWNERS,.policy.yml: replace CODEOWNERS with a policy-bot policy
Brad Fitzpatrick
2026-06-25 21:54:13 +00:00
-
f5eac39ea7
feature/acme, ipn/ipnlocal: start moving ACME/cert state into an extension
Brad Fitzpatrick
2026-06-25 17:34:13 +00:00
-
8379d5955f
ipn: remove the last traces of Prefs.AllowSingleHosts
Alex Chan
2026-06-26 09:37:39 +01:00
-
e21fd6b77a
ipn/ipnlocal: add webclient support for tvOS (#20256)
Jonathan Nobels
2026-06-26 08:58:23 -04:00
-
af999f05cf
k8s-operator/dnsrecords: fix dnsRR dropping reconcile events on lock err (#19968)
Alex Freestone
2026-06-26 13:52:05 +01:00
-
6fc5290ce7
tool/gocross: retry downloading Go three times
Alex Chan
2026-06-26 10:06:50 +01:00
-
2fbd30824b
tailcfg,net/routecheck: add NodeAttrClientSideReachabilityRouteCheck (#20169)
Simon Law
2026-06-25 18:22:15 -07:00
-
9169b206be
Revert "control/controlclient: continue map poll during key expiry to receive extensions" (#20257)
Alex Chan
2026-06-25 23:24:12 +01:00
-
6e1de5b651
cmd/containerboot: refresh DNS config on SelfChange (#20236)
Tom Meadows
2026-06-25 14:50:25 +01:00
-
9f92a4728e
util/cmpver: add a test for comparing three-digit versions
Alex Chan
2026-06-24 16:49:25 +01:00
-
dd1df38200
ipn/ipnlocal: pass capability set, not netmap, to two helpers
Brad Fitzpatrick
2026-06-24 22:03:50 +00:00
-
87cb2a8d1e
wgengine: replace Engine.SetNetworkMap with SetSelfNode
Brad Fitzpatrick
2026-06-24 20:38:25 +00:00
-
1b2062f3c1
net/tstun: invoke conn25 app connector hook on injected reads
Michael Ben-Ami
2026-06-23 16:51:51 -04:00
-
77d2c87b17
wgengine/router/osrouter,util/linuxfw: remove orphaned tailnet addrs (#20199)
Brendan Creane
2026-06-24 13:41:36 -07:00
-
453c078baf
.github: add zizmor GitHub Actions linting (#20243)
Patrick O'Doherty
2026-06-24 13:14:54 -07:00
-
aefb1531d1
net/tsdial, ipn/ipnlocal: stop using netmap.NetworkMap in Dialer
Brad Fitzpatrick
2026-06-24 02:08:09 +00:00
-
8dde9b725b
tstest/natlab/vmtest: serialize ensureDebugSSHKey across parallel boots
Brad Fitzpatrick
2026-06-24 13:23:39 +00:00
-
0bc0cb8131
tstest/natlab/vmtest: retry SSHExec on transient SSH failures
Brad Fitzpatrick
2026-06-24 05:31:27 +00:00
-
281404e9e3
cmd/tailscale/cli: fix capitalisation of flags
Alex Chan
2026-06-24 16:00:42 +01:00
-
c33a55737b
ipn/ipnlocal: reduce excessive logging of exit node suggestions (#20237)
Amal Bansode
2026-06-24 08:40:23 -07:00
-
d4f2917c1b
wgengine, ipn/ipnlocal: route PeerForIP through LocalBackend's live data
Brad Fitzpatrick
2026-06-23 19:37:47 +00:00
-
e9ae398199
wgengine: drop userspaceEngine.peerSequence
Brad Fitzpatrick
2026-06-23 19:14:48 +00:00
-
badd0c4f93
wgengine/magicsock: consider VNI as part of peer relay handshake suppression
Jordan Whited
2026-06-23 10:10:33 -07:00
-
b7422fa873
.gitattributes: explicitly mark text files as such with eol
James Tucker
2026-06-22 14:40:53 -07:00
-
49e060bbcb
wgengine: add Engine.ProbeLocks, drop PeerForIP lock-probe overload
Brad Fitzpatrick
2026-06-23 18:52:37 +00:00
-
72876a91d5
.github: pin govulncheck@1.3.0 (#20219)
Patrick O'Doherty
2026-06-23 11:51:46 -07:00
-
d22bf51e57
util/cloudenv: detect Hetzner Cloud
Brad Fitzpatrick
2026-06-23 17:54:12 +00:00
-
1d69894084
ipn/ipnlocal, drive: stop using netmap.NetworkMap in Taildrive too
Brad Fitzpatrick
2026-06-18 14:14:17 +00:00
-
988b0905bb
wgengine/wglog: stop using netmap.NetworkMap here too
Brad Fitzpatrick
2026-06-18 01:18:29 +00:00
-
295bf20cfd
prober: deflake TestHTTPBandwidth
Brad Fitzpatrick
2026-06-23 15:14:15 +00:00
-
af2f228a18
ipn/ipnlocal, types/netmap, tsnet: filter unsigned peers on delta path
Brad Fitzpatrick
2026-06-23 03:21:10 +00:00
-
0b551986fe
cmd/k8s-operator: scope HA Service hostname check per-tailnet (#20114)
tsushanth
2026-06-23 06:25:11 -07:00
-
d6c8702e90
tstest/natlab/vnet: deflake TestPacketSideEffects and TestProtocolQEMU
Brad Fitzpatrick
2026-06-18 14:38:32 +00:00
-
e0677ccc76
net/tstun, wgengine/filter: track UDP flow state for injected packets
Brad Fitzpatrick
2026-06-22 18:46:33 +00:00
-
568c0bda24
go.mod: bump wireguard-go (#20203)
Alex Valiushko
2026-06-22 13:45:50 -07:00
-
e9e209673e
net/netcheck: ensure recent history has a full report
Anton Tolchanov
2026-06-17 08:47:45 +00:00
-
f442cda999
ipn/ipnlocal: consider all DERP regions for exit node recommendations
Anton Tolchanov
2026-06-15 07:29:30 +00:00
-
6a275c01db
util/linuxfw: clamp MSS to PMTU in both forward directions (#20077)
Samy Djemaï
2026-06-22 12:25:15 +02:00
-
59159d9180
prober: add HTTP bandwidth probe and dial-address override (#20185)
Mike O'Driscoll
2026-06-19 15:33:29 -04:00
-
07f63534b1
licenses: update license notices
License Updater
2026-06-15 16:35:26 +00:00
-
53ef7f92cb
sessionrecording: close idle connections after upload
Gesa Stupperich
2026-06-19 10:33:50 +01:00
-
0861dafddf
net/dns: restore SELinux context on /etc/resolv.conf after rename (#20167)
Brendan Creane
2026-06-18 16:36:56 -07:00
-
54005752a5
wgengine/magicsock: suppress TSMP disco advert when bestAddr is peer relay
Jordan Whited
2026-06-18 10:52:44 -07:00
-
00b9e8d8ce
ipn: add fmt.Stringer support to NotifyWatchOpt (#20072)
Simon Law
2026-06-18 10:27:16 -07:00
-
c3c2aa7093
all: don't repeat the the word "the" unnecessarily
Alex Chan
2026-06-18 16:15:58 +01:00
-
35a1a413f9
cmd/{containerboot,k8s-operator}: add 4via6 support in singleton egress (#19983)
BeckyPauley
2026-06-18 16:13:10 +01:00
-
e3b16135b2
util/set: add iterator support to Set[T] (#20159)
Simon Law
2026-06-18 00:12:56 -07:00
-
be2f554dd3
control/controlknobs,wgengine/magicsock: disable TSMP disco advert if netmap caching is disabled
Jordan Whited
2026-06-17 18:01:25 -07:00
-
8f210454dd
wgengine/netlog: stop using netmap.NetworkMap type, use LocalBackend
Brad Fitzpatrick
2026-06-16 19:31:18 +00:00