Commit Graph

  • e4bee94857 ssh: don't use -l option for shells on FreeBSD Percy Wegmann 2025-02-03 16:22:05 -06:00
  • e6e00012b2 cmd/derper: remove logging of mesh key (#14915) Mike O'Driscoll 2025-02-05 11:36:05 -05:00
  • 527d273520 build(deps-dev): bump vitest from 1.3.1 to 1.6.1 in /client/web dependabot/npm_and_yarn/client/web/vitest-1.6.1 dependabot[bot] 2025-02-05 15:42:27 +00:00
  • d5316a4fbb cmd/derper: add setec secret support (#14890) Mike O'Driscoll 2025-02-05 10:41:18 -05:00
  • f0747df4b8 cmd/k8s-operator,k8s-operator: WIP: allow setting static endpoints via ProxyClass irbekrm/pc_pretendpoints Irbe Krumina 2025-02-05 09:32:47 +00:00
  • e19c01f5b3 clientupdate: refuse to update in tsnet binaries (#14911) Andrew Lytvynov 2025-02-04 15:51:03 -08:00
  • 9726e1f208 ipn/{ipnserver,localapi},tsnet: use ipnauth.Self as the actor in tsnet localapi handlers Nick Khyl 2025-02-04 15:52:21 -06:00
  • 0b6a337039 WIP percy/movelocalapi Percy Wegmann 2025-02-04 15:18:24 -06:00
  • e6a5c1ee16 client,localclient: apitype to localclient package Percy Wegmann 2025-02-04 15:15:46 -06:00
  • 58a312edca client,localclient: move local client code to localclient package Percy Wegmann 2025-02-04 15:15:34 -06:00
  • 0b7087c401 logpolicy: expose MaxBufferSize and MaxUploadSize options (#14903) Joe Tsai 2025-02-04 12:51:27 -08:00
  • 00fe8845b1 ipn/{ipnauth,ipnlocal,ipnserver}: move the AlwaysOn policy check from ipnserver to ipnauth Nick Khyl 2025-02-04 14:20:06 -06:00
  • 1dd9794e26 (do not merge) local dev hack to send device certs zach/temporary-cert-testing Zach Hauser 2025-02-04 10:25:46 -08:00
  • 5ef934b62d cmd/k8s-operator: reinstate HA Ingress reconciler (#14887) Irbe Krumina 2025-02-04 15:09:43 +02:00
  • cfe578870d derp: tcp-write-timeout=0 should disable write deadline (#14895) Jordan Whited 2025-02-03 15:14:16 -08:00
  • 80a100b3cb net/netmon: add extra panic guard around ParseRIB James Tucker 2025-02-03 10:24:42 -08:00
  • 97c4c0ecf0 ipn/ipnlocal: add VIP service IPs to localnets Adrian Dewhurst 2025-01-31 15:25:48 -05:00
  • 600f25dac9 tailcfg: add JSON unmarshal helper for view of node/peer capabilities Adrian Dewhurst 2025-02-03 14:08:26 -05:00
  • 0d92be0cdf net/netmon: add socket reopen to darwin route monitor raggi/netmon-darwin-route-restart James Tucker 2025-02-03 10:50:55 -08:00
  • 95e2353294 wgengine/wgcfg/nmcfg: coalesce, limit some debug logs Brad Fitzpatrick 2025-02-03 09:59:07 -08:00
  • 66f36e3bb2 net/netmon: add extra panic guard around ParseRIB James Tucker 2025-02-03 10:24:42 -08:00
  • 10fe10ea10 derp/derphttp,ipn/localapi,net/captivedetection: add cache resistance to captive portal detection James Tucker 2025-01-31 12:54:50 -08:00
  • 17ca2b7721 cmd/tailscale/cli: update tailscale down to accept an optional --reason Nick Khyl 2025-01-31 16:12:32 -06:00
  • 496347c724 go.mod: bump inetaf/tcpproxy Brad Fitzpatrick 2025-02-03 08:53:23 -08:00
  • d832467461 client/tailscale,ipn/ipn{local,server},util/syspolicy: implement the AlwaysOn.OverrideWithReason policy setting Nick Khyl 2025-01-31 16:14:13 -06:00
  • 2c02f712d1 util/syspolicy/internal/metrics: replace dots with underscores for metric names Nick Khyl 2025-01-31 16:09:15 -06:00
  • a0537dc027 ipn/ipnlocal: fix a panic in setPrefsLockedOnEntry when cc is nil Nick Khyl 2025-01-31 18:27:37 -06:00
  • e0963cb117 Set dns policy to ClusterFirstWithHostNet operator_direct_connections Lee Briggs 2025-01-31 14:53:05 -08:00
  • 2e95313b8b ssh,tempfork/gliderlabs/ssh: replace github.com/tailscale/golang-x-crypto/ssh with golang.org/x/crypto/ssh Percy Wegmann 2025-01-31 12:19:22 -06:00
  • a9e5f88193 derp/derphttp: set cache-control to disallow caching of captive portal checks raggi/derp-204-cache-control James Tucker 2025-01-31 12:54:50 -08:00
  • 0a51bbc765 ipn/ipnauth,util/syspolicy: improve comments Nick Khyl 2025-01-31 11:22:15 -06:00
  • 02ad21717f ipn/ipn{auth,server,local}: initial support for the always-on mode Nick Khyl 2025-01-30 18:29:02 -06:00
  • 535a3dbebd ipn/ipnauth: implement an Actor representing tailscaled itself Nick Khyl 2025-01-29 15:49:31 -06:00
  • 081595de63 ipn/{ipnauth, ipnserver}: extend the ipnauth.Actor interface with a CheckProfileAccess method Nick Khyl 2025-01-29 15:34:20 -06:00
  • 3e708bddc5 change port and protocol Lee Briggs 2025-01-30 17:17:55 -08:00
  • 6bfc02c402 Merge remote-tracking branch 'upstream/main' into operator_direct_connections Lee Briggs 2025-01-30 17:14:04 -08:00
  • 4e7f4086b2 ipn: generate LoginProfileView and use it instead of *LoginProfile where appropriate Nick Khyl 2025-01-30 11:24:25 -06:00
  • 50501f00a6 version/mkversion: support tags ending in -pre raggi/mkversion-pre James Tucker 2025-01-30 14:47:40 -08:00
  • 7d5fe13d27 types/views: make SliceEqualAnyOrder also do short slice optimization Brad Fitzpatrick 2025-01-30 08:46:21 +00:00
  • 8ee72cd33c cli/funnel: fix comment typo (#14840) Andrea Gottardo 2025-01-30 14:21:32 -08:00
  • 08dd4994d0 VERSION.txt: this is v1.81.0 (#14838) v1.81.0-pre Andrea Gottardo 2025-01-30 13:04:29 -08:00
  • 649a71f8ac VERSION.txt: this is v1.80.0 (#14837) v1.80.0 Andrea Gottardo 2025-01-30 12:52:55 -08:00
  • 39a4dfb85c WIP: Testing Netmaps + client packet filter end to end zofrex/x-poc-e2e-netmap-packetfilter-test James Sanderson 2025-01-30 16:04:29 +00:00
  • 138a83efe1 cmd/containerboot: wait for consistent state on shutdown (#14263) Tom Proctor 2025-01-30 13:51:10 +00:00
  • c2af1cd9e3 prober: support multiple probes running concurrently Anton Tolchanov 2025-01-29 15:35:37 +00:00
  • a49af98b31 cmd/k8s-operator: temporarily disable HA Ingress controller (#14833) Irbe Krumina 2025-01-30 13:36:33 +02:00
  • 0ed4aa028f control/controlclient: flesh out a recently added comment Brad Fitzpatrick 2025-01-30 07:23:36 +00:00
  • ed8bb3b564 control/controlclient: add missing word in comment Brad Fitzpatrick 2025-01-30 07:22:52 +00:00
  • 3f39211f98 cmd/k8s-operator: check that cluster traffic is routed to egress ProxyGroup Pod before marking it as ready (#14792) Irbe Krumina 2025-01-30 10:47:45 +02:00
  • 8bd04bdd3a go.mod: bump gorilla/csrf for security fix (#14822) Brad Fitzpatrick 2025-01-29 20:44:01 +00:00
  • b60f6b849a Revert "ssh,tempfork/gliderlabs/ssh: replace github.com/tailscale/golang-x-crypto/ssh with golang.org/x/crypto/ssh" Percy Wegmann 2025-01-29 10:25:50 -06:00
  • 52f88f782a cmd/k8s-operator: don't set deprecated configfile hash on new proxies (#14817) Irbe Krumina 2025-01-29 17:48:05 +02:00
  • b406f209c3 cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't terminate while cluster traffic is still routed to them (#14436) Irbe Krumina 2025-01-29 09:35:50 +02:00
  • eb299302ba types/views: fix SliceEqualAnyOrderFunc short optimization Andrew Dunham 2025-01-24 13:26:08 -05:00
  • efe4de7115 util/syspolicy: define RequireReasonToDisconnect angott/26146-define Andrea Gottardo 2025-01-27 17:40:10 -08:00
  • 0aa54151f2 .github: Bump actions/checkout from 3.6.0 to 4.2.2 (#14139) dependabot[bot] 2025-01-28 15:03:13 -07:00
  • f1514a944a go.toolchain.rev: bump from Go 1.23.3 to 1.23.5 (#14814) Mario Minardi 2025-01-28 14:35:24 -07:00
  • 46fd4e58a2 ssh,tempfork/gliderlabs/ssh: replace github.com/tailscale/golang-x-crypto/ssh with golang.org/x/crypto/ssh Percy Wegmann 2025-01-27 13:05:27 -06:00
  • 6d0c8d0880 various: bump go dependeny to 1.23.5 mpminardi/bump-go-patch Mario Minardi 2025-01-28 10:43:29 -07:00
  • 3abfbf50ae tsnet: return from Accept when the listener gets closed Anton Tolchanov 2025-01-28 12:10:28 +00:00
  • 6f10fe8ab1 cmd/tailscale: add warning to help text of --force-reauth (#14778) yejingchen 2025-01-28 18:05:49 +08:00
  • 079973de82 tempfork/acme: fix TestSyncedToUpstream with Windows line endings Brad Fitzpatrick 2025-01-27 22:03:22 +00:00
  • ba1f9a3918 types/persist: remove Persist.LegacyFrontendPrivateMachineKey Brad Fitzpatrick 2025-01-24 19:56:33 -08:00
  • 2691b9f6be tempfork/acme: add new package for x/crypto package acme fork, move Brad Fitzpatrick 2025-01-27 03:07:21 +00:00
  • bd9725c5f8 health: relax no-derp-home warnable to not fire if not in map poll Brad Fitzpatrick 2025-01-27 14:21:25 +00:00
  • bfde8079a0 health: do Warnable dependency filtering in tailscaled Brad Fitzpatrick 2025-01-27 13:37:49 +00:00
  • 76dc028b38 .github: Bump github/codeql-action from 3.28.1 to 3.28.5 (#14794) dependabot[bot] 2025-01-27 12:36:42 -07:00
  • 3fec806523 .github: Bump actions/setup-go from 5.2.0 to 5.3.0 (#14793) dependabot[bot] 2025-01-27 12:36:04 -07:00
  • af366d8761 .github: test installer script on latest ubuntu with wget knyar/installmore Anton Tolchanov 2025-01-27 14:31:46 +00:00
  • 290d23ff83 .github: allow triggering installer.sh check manually knyar/install Anton Tolchanov 2024-02-26 11:06:10 +00:00
  • bce05ec6c3 control/controlclient,tempfork/httprec: don't link httptest, test certs for c2n Brad Fitzpatrick 2025-01-26 17:06:06 +00:00
  • 8c925899e1 go.mod: bump depaware, add --internal flag to stop hiding internal packages Brad Fitzpatrick 2025-01-26 17:09:44 +00:00
  • 04029b857f tstest/deptest: verify that tailscale.com BadDeps actually exist Brad Fitzpatrick 2025-01-26 18:12:46 +00:00
  • e701fde6b3 control/controlknobs: make Knobs.AsDebugJSON automatic, not require maintenance Brad Fitzpatrick 2025-01-26 18:23:38 +00:00
  • 66b2e9fd07 envknob/featureknob: allow use of exit node on unraid (#14754) Derek Kaser 2025-01-26 10:35:58 -05:00
  • 68a66ee81b feature/capture: move packet capture to feature/*, out of iOS + CLI Brad Fitzpatrick 2025-01-23 20:39:28 -08:00
  • 2c98c44d9a control/controlclient: sanitize invalid DERPMap nil Region from control Brad Fitzpatrick 2025-01-23 13:58:40 -08:00
  • 82e41ddc42 cmd/natc: expose netstack metrics in client metrics in natc James Tucker 2025-01-23 16:31:40 -08:00
  • 2089f4b603 ipn/ipnlocal: add debug envknob for ACME directory URL (#14771) Tom Proctor 2025-01-25 00:29:00 +00:00
  • ca39c4e150 cmd/natc,wgengine/netstack: tune buffer size and segment lifetime in natc James Tucker 2025-01-23 16:23:41 -08:00
  • 1a7274fccb control/controlclient: skip SetControlClientStatus when queue has newer results later Brad Fitzpatrick 2025-01-24 13:09:21 -08:00
  • cbf1a9abe1 go.{mod,sum}: update web-client-prebuilt (#14772) Mario Minardi 2025-01-24 17:04:12 -07:00
  • 716e4fcc97 client/web: remove advanced options from web client login (#14770) Mario Minardi 2025-01-24 16:29:58 -07:00
  • 6a69c05c04 control/controlclient: add debug netmap refcount raggi/hello-temp James Tucker 2025-01-24 13:29:10 -08:00
  • a62fb13b63 util/execqueue: add metrics Andrew Dunham 2025-01-24 15:42:12 -05:00
  • 0b4d9065e6 control/controlclient: skip SetControlClientStatus when queue has newer results later Brad Fitzpatrick 2025-01-24 13:09:21 -08:00
  • f3db001121 util/execqueue: add metrics andrew/execqueue-metrics Andrew Dunham 2025-01-24 15:42:12 -05:00
  • c119162ab6 tstest/controll: add a trolling control server for stressing clients bradfitz/controll Brad Fitzpatrick 2024-11-14 09:50:27 -08:00
  • 69bc164c62 ipn/ipnlocal: include DNS SAN in cert CSR (#14764) Tom Proctor 2025-01-24 17:04:26 +00:00
  • d69c70ee5b tailcfg: adjust ServiceName.Validate to use vizerror Adrian Dewhurst 2025-01-23 14:26:16 -05:00
  • 05afa31df3 util/clientmetric: use counter in aggcounter Kristoffer Dalby 2025-01-24 12:51:01 +01:00
  • 450bc9a6b8 cmd/derper,derp: make TCP write timeout configurable Percy Wegmann 2025-01-23 14:32:22 -06:00
  • 5e9056a356 derp: move Conn interface to derp.go Percy Wegmann 2025-01-23 09:08:54 -06:00
  • f0b63d0eec wgengine/filter: add check for unknown proto Kristoffer Dalby 2025-01-08 10:53:07 +01:00
  • f39ee8e520 net/tstun: add back outgoing drop metric Kristoffer Dalby 2024-12-20 09:12:37 +01:00
  • 5756bc1704 wgengine/filter: return drop reason for metrics Kristoffer Dalby 2024-12-20 09:09:06 +01:00
  • 3a39f08735 util/usermetric: add more drop labels Kristoffer Dalby 2024-12-20 09:09:53 +01:00
  • 61bea75092 cmd/tailscale: fix, test some recent doc inconsistencies Brad Fitzpatrick 2025-01-23 18:40:17 -08:00
  • 90ccc1e107 ipn/ipnlocal: hacky client changes for test TLS certs tomhjp/dns-01-test-env Tom Proctor 2025-01-23 22:48:11 +00:00
  • ba058bce86 cmd/tailscaled: defer COM initialization and enabling GP lock restrictions on Windows until main runs nickkhyl/tailscaled-deferredinit Nick Khyl 2025-01-23 15:15:00 -06:00