Commit Graph

  • 2c2b2f8cf9
    tsnet: add support to ListenService for identity and app capability headers hwh33/tsnet-services-support Harry Harpham 2025-12-23 18:57:04 -07:00
  • 2917ea8d0e ipn/ipnauth, safesocket: defer named pipe client's token retrieval until ipnserver needs it main Nick Khyl 2025-12-19 12:22:19 -06:00
  • a44e9d9c08
    ipn/ipnlocal: set certificate retrieval function directly in tests Harry Harpham 2025-12-23 09:52:07 -07:00
  • 1584825c9a
    tsnet: use ipnlocal.LocalBackend.SetCertsForTest Harry Harpham 2025-12-22 17:27:17 -07:00
  • 376cd5fc61
    Revert "Reapply "(debugging) Lots of print statements"" Harry Harpham 2025-12-22 16:25:50 -07:00
  • 95318b7cb4
    tsnet: fix TLS-terminated-TCP test Harry Harpham 2025-12-22 16:17:55 -07:00
  • 0bb60fe2ad
    ipn/ipnlocal: add ability to configure TLS certs for tests Harry Harpham 2025-12-22 16:17:12 -07:00
  • e093a20755
    cmd/distsign: add CLI for verifying package signatures awly/distsign-verification-cli Andrew Lytvynov 2025-12-17 15:42:25 -08:00
  • 403873ff1a
    cmd,internal,feature: add workload idenity support to gitops pusher mpminardi/workload-identity-gitops Mario Minardi 2025-12-17 09:49:34 -07:00
  • 9c3a420e15 cmd/tailscale/cli: document why there's no --force-reauth on login Alex Chan 2025-12-22 13:38:13 +00:00
  • 262ec04abc net/dns,ipn/ipnlocal: add nodecap to resolve subdomains fserb/wildcard-revenge Fernando Serboncini 2025-12-12 19:54:42 -05:00
  • ee59470270
    net/udprelay: remove tailscaled_peer_relay_endpoints_total (#18254) Alex Valiushko 2025-12-19 16:15:41 -08:00
  • 19f06d4784
    Reapply "(debugging) Lots of print statements" Harry Harpham 2025-12-19 15:47:02 -07:00
  • 39b84281e0
    working example using TLS termination Harry Harpham 2025-12-19 15:32:23 -07:00
  • 51c6d443ed net/udprelay: add tailscaled_peer_relay_endpoints gauge illotum/udprelay-endpoints-gauge Alex Valiushko 2025-12-19 14:28:56 -08:00
  • 180e100a82
    ipn: ensure TLS termination works for Services by correctly setting FQDN Harry Harpham 2025-12-19 15:25:57 -07:00
  • 13667c5551
    cmd/containerboot: switch to tsclient QueryDNS to convert FQDN to Tailscale IPs chaosinthecrd/query-dns-resolve-containerboot chaosinthecrd 2025-12-17 13:37:33 +00:00
  • 1af9a75732
    tstest/natlab: add test for no control and rotated disco key cmol/nattest_nocontrol_discorotate Claus Lensbøl 2025-12-19 12:14:49 -05:00
  • 90b4358113
    cmd/k8s-operator,ipn/ipnlocal: allow opting out of ACME order replace extension (#18252) Irbe Krumina 2025-12-19 15:59:26 +00:00
  • c40f352103
    net/udprelay: expose peer relay metrics (#18218) Alex Valiushko 2025-12-18 16:12:50 -08:00
  • 706028c3c4
    Clean up test Harry Harpham 2025-12-18 16:16:07 -07:00
  • 0922a4727c
    Implement a few options, check for ACL tags Harry Harpham 2025-12-18 16:06:09 -07:00
  • 645808c3e9
    Clean up test a bit Harry Harpham 2025-12-18 15:53:14 -07:00
  • 18721591ef
    Revert "(debugging) Lots of print statements" Harry Harpham 2025-12-18 15:47:15 -07:00
  • f38c68557d
    (wip) The test works! Harry Harpham 2025-12-18 15:01:00 -07:00
  • 01440eb2f5
    (debugging) Lots of print statements Harry Harpham 2025-12-18 12:49:15 -07:00
  • 8c22e1f60f
    (wip) Add end-to-end test, but it hangs =/ Harry Harpham 2025-12-18 12:47:35 -07:00
  • 9ae9dfd2d4
    types/persist: omit Persist.AttestationKey based on IsZero (#18241) (#18242) release-branch/1.92 Andrew Lytvynov 2025-12-18 10:04:26 -08:00
  • 39881c0187
    cmd/containerboot: switch to tsclient QueryDNS to convert FQDN to Tailscale IPs chaosinthecrd/query-dns-resolve-for-containerboot chaosinthecrd 2025-12-18 17:30:21 +00:00
  • 97e5d59916 net/portmapper, go.mod: unfork our goupnp dependency andrew/goupnp-unfork Andrew Dunham 2025-12-18 12:22:11 -05:00
  • bb3529fcd4
    cmd/containerboot: support egress to Tailscale Service FQDNs (#17493) Tom Proctor 2025-12-18 17:06:42 +00:00
  • 5065307fb8
    VERSION.txt: This is 1.92.4 v1.92.4 chaosinthecrd 2025-12-18 10:30:54 +00:00
  • 0d206ffe68
    ipn/ipnlocal: log cert renewal failures (#18246) (#18247) Irbe Krumina 2025-12-18 10:06:03 +00:00
  • eed5e95e27 docs: use -x for cherry-picks Tom Proctor 2025-12-17 20:19:41 +00:00
  • b73fb467e4
    ipn/ipnlocal: log cert renewal failures (#18246) Irbe Krumina 2025-12-18 09:58:13 +00:00
  • e4847fa77b
    go.toolchain.rev: update to Go 1.25.5 (#18123) Brendan Creane 2025-12-17 18:17:25 -08:00
  • ce7e1dea45
    types/persist: omit Persist.AttestationKey based on IsZero (#18241) Andrew Lytvynov 2025-12-17 17:27:35 -08:00
  • 3e7abb6685
    cmd/k8s-operator: fixes helm template for oauth secret volume mount (#18230) (#18234) Tom Meadows 2025-12-17 22:17:12 +01:00
  • 2f03518e3c
    wgengine/magicksock: clear LastTSMPDiscoAdvertisement when rotating disco keys cmol/trigger_tsmp_disco_advert_via_disco Claus Lensbøl 2025-12-15 15:45:42 -05:00
  • dad2181fd5 net/udprelay: per packet batch example jwhited/udprelay-metrics-per-batch Jordan Whited 2025-12-17 12:57:16 -08:00
  • e07c7b296b
    wgengine: send disco key via TSMP on first contact Claus Lensbøl 2025-12-15 15:40:36 -05:00
  • b21cba0921
    cmd/k8s-operator: fixes helm template for oauth secret volume mount (#18230) Tom Meadows 2025-12-17 20:58:47 +01:00
  • 323604b76c net/dns/resolver: log source IP of forwarded queries Andrew Dunham 2025-12-16 17:19:16 -05:00
  • 8476aa8dd5 net/udprelay: expose peer relay metrics Alex Valiushko 2025-12-15 19:30:24 -08:00
  • 3e89068792
    net/netmon, wgengine/userspace: purge ChangeDelta.Major and address TODOs (#17823) Jonathan Nobels 2025-12-17 12:32:40 -05:00
  • 3b825f37d6
    saving progress chaosinthecrd 2025-12-17 13:37:33 +00:00
  • b1b94f715f
    cmd/tailscale/cli: remove Services-specific subcommands from funnel hwh33/hide-services-subcommands-in-funnel Harry Harpham 2025-12-16 15:49:51 -07:00
  • 0fd1670a59 client/local: add method to set gauge metric to a value Will Norris 2025-12-15 14:01:00 -08:00
  • bb642f8aab
    Working prototype Harry Harpham 2025-12-16 14:25:31 -07:00
  • 9a08e8f1c2 VERSION.txt: this is 1.92.3 v1.92.3 Jonathan Nobels 2025-12-16 15:11:52 -05:00
  • 806fbd098d
    ipn,ipn/local: always accept routes for Tailscale Services (cgnat range) chaosinthecrd/accept-routes-filter chaosinthecrd 2025-12-09 14:00:24 +00:00
  • cdb573189e [DRAFT] appc,wgengine: sketch how connectors 2025 hooks into the datapath mzb/dnat-exp Michael Ben-Ami 2025-12-11 15:31:15 -05:00
  • b342623ab1
    cmd/k8s-operator: allow specifying tailnet on custom resources davidb/k8s-multi-tailnet-resources David Bond 2025-12-15 17:54:11 +00:00
  • 7f36045a16
    k8s-operator: add "tailnet" field to custom resources (#18174) davidb/k8s-multi-tailnet David Bond 2025-12-16 12:31:47 +00:00
  • f174ecb6fd
    words: 33 tails and 26 scales (#18213) stratself 2025-12-16 19:20:33 +07:00
  • d06f48f3a6
    cmd/k8s-operator: add reconciler for Tailnet resource (#18132) David Bond 2025-12-16 11:49:30 +00:00
  • a663639bea net/udprelay: replace map+sync.Mutex with sync.Map for VNI lookup Jordan Whited 2025-12-15 12:14:34 -08:00
  • 6a419deea0
    Update test.yml tomhjp/cigocacher-tool-debug Tom Proctor 2025-12-15 23:44:21 +00:00
  • b0322f0834
    Update test.yml Tom Proctor 2025-12-15 23:33:01 +00:00
  • 951d711054 client/systray: add missing deferred unlock for httpCache mutex Will Norris 2025-12-15 08:20:45 -08:00
  • 5937ce072f
    WIP Tom Proctor 2025-12-15 14:39:37 +00:00
  • 5f64412b63
    tool: add cigocacher tomhjp/cigocacher-tool Tom Proctor 2025-12-15 11:42:57 +00:00
  • d0d993f5d6 .github,cmd/cigocacher: add flags --version --stats --cigocached-host cmd/cigocacher/d0d993f5d6576b5d97d0242c64bbe2de049d6486 Tom Proctor 2025-12-12 13:58:16 +00:00
  • d7a5624841
    cmd/k8s-operator: fix statefulset template yaml indentation (#18194) Tom Meadows 2025-12-15 10:27:59 +00:00
  • cb5fa35f57
    .github/workfkows,Dockerfile,Dockerfile.base: add a test for base image (#18180) Irbe Krumina 2025-12-12 18:10:00 +00:00
  • 5ddb56c47f
    cmd/containerboot: support egress to Tailscale Service FQDNs Tom Proctor 2025-10-08 12:28:06 +01:00
  • 3ef9787379
    tsweb: add Unwrap to loggingResponseWriter for ResponseController (#18195) James 'zofrex' Sanderson 2025-12-12 12:05:05 +00:00
  • f5d1075cd4 ipn/ipnlocal: avoid ResetAndStop panic Brad Fitzpatrick 2025-12-11 08:46:53 -08:00
  • 887bfc3bc5 logpolicy: expose certain metrics as clientmetrics dsnet/logpolicy-metrics Joe Tsai 2025-12-11 11:25:00 -08:00
  • 615eebef65
    clientupdate: support updating to release candidates willh/rc-updates Will Hannah 2025-12-11 16:55:30 -05:00
  • 65182f2119
    ipn/ipnlocal: add ProxyProtocol support to VIP service TCP handler (#18175) Raj Singh 2025-12-12 02:53:21 +05:30
  • 9613b4eecc
    logtail: add metrics (#18184) Joe Tsai 2025-12-11 10:49:48 -08:00
  • 0df4631308 ipn/ipnlocal: avoid ResetAndStop panic Brad Fitzpatrick 2025-12-11 08:46:53 -08:00
  • dbaf0b0472
    cmd/tailscale/cli, util/qrcodes: format QR codes on Linux consoles sfllaw/qr-linux-console Simon Law 2025-12-10 12:13:36 -08:00
  • 6ace3995f0
    portlist: skip tests on Linux 6.14.x with /proc/net/tcp bug (#18185) Simon Law 2025-12-10 18:37:03 -08:00
  • 6428ba01ef
    logtail/filch: rewrite the package (#18143) Joe Tsai 2025-12-10 15:32:30 -08:00
  • c870d3811d
    net/{packet,tstun},wgengine: update disco key when receiving via TSMP (#18158) Claus Lensbøl 2025-12-10 14:27:20 -05:00
  • a402eda16c broken don't merge: tests naman/serveconf-endpointinfo-tests Naman Sood 2025-12-10 14:07:37 -05:00
  • 723b9af21a
    Dockerfile,Dockerfile.base: link iptables to legacy binary (#18177) Irbe Krumina 2025-12-10 18:57:51 +00:00
  • b6ac2220be
    Try to get rid of tstest.Clock percy/corp35008 Percy Wegmann 2025-12-10 12:46:34 -06:00
  • 95a957cdd7 VERSION.txt: this is 1.92.2 v1.92.2 Jonathan Nobels 2025-12-10 13:24:06 -05:00
  • 7508ea4760 cmd/derper: add GCP Certificate Manager support (#18161) Raj Singh 2025-12-10 04:51:53 +05:30
  • 8eda947530
    cmd/derper: add GCP Certificate Manager support (#18161) Raj Singh 2025-12-10 04:51:53 +05:30
  • 1dfdee8521
    net/dns: retrample resolve.conf when another process has trampled it (#18069) Claus Lensbøl 2025-12-09 14:55:26 -05:00
  • a9b37c510c net/udprelay: re-use mono.Time in control packet handling Jordan Whited 2025-12-09 11:25:34 -08:00
  • 363d882306 net/udprelay: use mono.Time instead of time.Time Simar 2025-11-24 19:12:02 -07:00
  • 076d5c7214 appc,feature: add the start of new conn25 app connector Fran Bull 2025-12-08 10:47:32 -08:00
  • 4d80f0eab2 .github/workflows: try using a DevDrive on Windows bradfitz/devdrive Brad Fitzpatrick 2025-12-09 07:41:01 -08:00
  • dd1bb8ee42 .github: add cigocacher release workflow Tom Proctor 2025-12-08 15:45:09 +00:00
  • 378ee20b9a cmd/tailscale/cli: stabilise the output of tailscale lock status --json Alex Chan 2025-11-20 11:28:18 +00:00
  • c3f9d1c22e net/udprelay: XDP PoC jwhited/udprelay-xdp Jordan Whited 2025-12-08 14:51:13 -08:00
  • da0ea8ef3e Revert "ipn/ipnlocal: shut down old control client synchronously on reset" Nick Khyl 2025-12-07 18:26:45 -06:00
  • c7b10cb39f
    scripts/installer.sh: add SteamOS handling (#18159) Erisa A 2025-12-08 20:19:40 +00:00
  • 7d3097d3b5 tka: add some more tests for Bootstrap() Alex Chan 2025-12-08 12:11:04 +00:00
  • 2a0ddb7897
    cmd/k8s-operator: warn if users attempt to expose a headless Service (#18140) Irbe Krumina 2025-12-08 15:19:28 +00:00
  • d5c893195b
    cmd/k8s-operator: don't log errors on not found objects. (#18142) Irbe Krumina 2025-12-08 11:19:01 +00:00
  • d349370e55
    client/systray: change systray to start after graphical.target (#18138) Claus Lensbøl 2025-12-05 11:05:49 -05:00
  • 2078eb56f3 VERSION.txt: this is v1.92.1 v1.92.1 Jonathan Nobels 2025-12-05 10:51:26 -05:00
  • 38a7452d3d
    WIP: improve reliability of natlab cmol/natlab-experiments Claus Lensbøl 2025-12-05 09:08:26 -05:00
  • cf40cf5ccb
    ipn/ipnlocal: add peer API endpoints to Hostinfo on initial client creation (#17851) James 'zofrex' Sanderson 2025-12-05 13:33:47 +00:00