<feed xmlns='http://www.w3.org/2005/Atom'>
<title>tailscale/control/controlknobs/controlknobs.go, branch clairew/suggest-non-mullvad-exit-node</title>
<subtitle>The easiest, most secure way to use WireGuard and 2FA</subtitle>
<id>http://git.waynecole.info/tailscale/atom?h=clairew%2Fsuggest-non-mullvad-exit-node</id>
<link rel='self' href='http://git.waynecole.info/tailscale/atom?h=clairew%2Fsuggest-non-mullvad-exit-node'/>
<link rel='alternate' type='text/html' href='http://git.waynecole.info/tailscale/'/>
<updated>2024-02-20T21:25:50Z</updated>
<entry>
<title>cmd/tailscale/cli: suggest exit node</title>
<updated>2024-02-20T21:25:50Z</updated>
<author>
<name>Claire Wang</name>
<email>claire@tailscale.com</email>
</author>
<published>2024-02-13T14:11:02Z</published>
<link rel='alternate' type='text/html' href='http://git.waynecole.info/tailscale/commit/?id=343b29e9715f4d85ed5eaa583d692a8467ee9ad7'/>
<id>urn:sha1:343b29e9715f4d85ed5eaa583d692a8467ee9ad7</id>
<content type='text'>
Updates tailscale/corp#17516

Signed-off-by: Claire Wang &lt;claire@tailscale.com&gt;
</content>
</entry>
<entry>
<title>wgengine/magicsock: implement probing of UDP path lifetime (#10844)</title>
<updated>2024-01-23T17:37:32Z</updated>
<author>
<name>Jordan Whited</name>
<email>jordan@tailscale.com</email>
</author>
<published>2024-01-23T17:37:32Z</published>
<link rel='alternate' type='text/html' href='http://git.waynecole.info/tailscale/commit/?id=8b47322acc2f3dabff40cbc4dcee9576f4d19bc5'/>
<id>urn:sha1:8b47322acc2f3dabff40cbc4dcee9576f4d19bc5</id>
<content type='text'>
This commit implements probing of UDP path lifetime on the tail end of
an active direct connection. Probing configuration has two parts -
Cliffs, which are various timeout cliffs of interest, and
CycleCanStartEvery, which limits how often a probing cycle can start,
per-endpoint. Initially a statically defined default configuration will
be used. The default configuration has cliffs of 10s, 30s, and 60s,
with a CycleCanStartEvery of 24h. Probing results are communicated via
clientmetric counters. Probing is off by default, and can be enabled
via control knob. Probing is purely informational and does not yet
drive any magicsock behaviors.

Updates #540

Signed-off-by: Jordan Whited &lt;jordan@tailscale.com&gt;</content>
</entry>
<entry>
<title>ipn/ipnlocal: refresh node key without blocking if cap enabled (#10529)</title>
<updated>2024-01-04T17:29:04Z</updated>
<author>
<name>James 'zofrex' Sanderson</name>
<email>jsanderson@tailscale.com</email>
</author>
<published>2024-01-04T17:29:04Z</published>
<link rel='alternate' type='text/html' href='http://git.waynecole.info/tailscale/commit/?id=10c595d962a43fa1c01642e1ea295b7eb98e74a6'/>
<id>urn:sha1:10c595d962a43fa1c01642e1ea295b7eb98e74a6</id>
<content type='text'>
Updates tailscale/corp#16016

Signed-off-by: James Sanderson &lt;jsanderson@tailscale.com&gt;
Co-authored-by: Maisem Ali &lt;maisem@tailscale.com&gt;</content>
</entry>
<entry>
<title>linuxfw,wgengine/route,ipn: add c2n and nodeattrs to control linux netfilter</title>
<updated>2023-12-05T19:22:02Z</updated>
<author>
<name>Naman Sood</name>
<email>mail@nsood.in</email>
</author>
<published>2023-12-04T17:08:56Z</published>
<link rel='alternate' type='text/html' href='http://git.waynecole.info/tailscale/commit/?id=0a59754eda9f26ce3aa01be6a610a5a92e968ee1'/>
<id>urn:sha1:0a59754eda9f26ce3aa01be6a610a5a92e968ee1</id>
<content type='text'>
Updates tailscale/corp#14029.

Signed-off-by: Naman Sood &lt;mail@nsood.in&gt;
</content>
</entry>
<entry>
<title>control/controlknobs,wgengine/magicsock: implement SilentDisco toggle (#10195)</title>
<updated>2023-11-13T18:05:04Z</updated>
<author>
<name>Jordan Whited</name>
<email>jordan@tailscale.com</email>
</author>
<published>2023-11-13T18:05:04Z</published>
<link rel='alternate' type='text/html' href='http://git.waynecole.info/tailscale/commit/?id=e84873692706002db42db5ff07179470c6aa50e6'/>
<id>urn:sha1:e84873692706002db42db5ff07179470c6aa50e6</id>
<content type='text'>
This change exposes SilentDisco as a control knob, and plumbs it down to
magicsock.endpoint. No changes are being made to magicsock.endpoint
disco behavior, yet.

Updates #540

Signed-off-by: Jordan Whited &lt;jordan@tailscale.com&gt;
Co-authored-by: Brad Fitzpatrick &lt;bradfitz@tailscale.com&gt;</content>
</entry>
<entry>
<title>net/dns: retry forwarder requests over TCP</title>
<updated>2023-09-25T20:42:07Z</updated>
<author>
<name>Andrew Dunham</name>
<email>andrew@du.nham.ca</email>
</author>
<published>2023-09-07T20:27:50Z</published>
<link rel='alternate' type='text/html' href='http://git.waynecole.info/tailscale/commit/?id=530aaa52f1ff8942467768a67711e222e7911680'/>
<id>urn:sha1:530aaa52f1ff8942467768a67711e222e7911680</id>
<content type='text'>
We weren't correctly retrying truncated requests to an upstream DNS
server with TCP. Instead, we'd return a truncated request to the user,
even if the user was querying us over TCP and thus able to handle a
large response.

Also, add an envknob and controlknob to allow users/us to disable this
behaviour if it turns out to be buggy (✨ DNS ✨).

Updates #9264

Signed-off-by: Andrew Dunham &lt;andrew@du.nham.ca&gt;
Change-Id: Ifb04b563839a9614c0ba03e9c564e8924c1a2bfd
</content>
</entry>
<entry>
<title>control,tailcfg,wgengine/magicsock: add nodeAttr to enable/disable peer MTU</title>
<updated>2023-09-21T11:17:12Z</updated>
<author>
<name>Val</name>
<email>valerie@tailscale.com</email>
</author>
<published>2023-09-21T09:31:48Z</published>
<link rel='alternate' type='text/html' href='http://git.waynecole.info/tailscale/commit/?id=65dc711c7645a5d7de7f6b2a748fa9e4d0e5f080'/>
<id>urn:sha1:65dc711c7645a5d7de7f6b2a748fa9e4d0e5f080</id>
<content type='text'>
Add a nodeAttr to enable/disable peer path MTU discovery.

Updates #311

Signed-off-by: Val &lt;valerie@tailscale.com&gt;
</content>
</entry>
<entry>
<title>tailcfg: add NodeCapMap</title>
<updated>2023-09-18T19:00:34Z</updated>
<author>
<name>Maisem Ali</name>
<email>maisem@tailscale.com</email>
</author>
<published>2023-09-18T15:52:22Z</published>
<link rel='alternate' type='text/html' href='http://git.waynecole.info/tailscale/commit/?id=19a9d9037f9770adb2cc4b812aeb1f1ff02da5af'/>
<id>urn:sha1:19a9d9037f9770adb2cc4b812aeb1f1ff02da5af</id>
<content type='text'>
Like PeerCapMap, add a field to `tailcfg.Node` which provides
a map of Capability to raw JSON messages which are deferred to be
parsed later by the application code which cares about the specific
capabilities. This effectively allows us to prototype new behavior
without having to commit to a schema in tailcfg, and it also opens up
the possibilities to develop custom behavior in tsnet applications w/o
having to plumb through application specific data in the MapResponse.

Updates #4217

Signed-off-by: Maisem Ali &lt;maisem@tailscale.com&gt;
</content>
</entry>
<entry>
<title>tailcfg: define a type for NodeCapability</title>
<updated>2023-09-17T20:16:29Z</updated>
<author>
<name>Maisem Ali</name>
<email>maisem@tailscale.com</email>
</author>
<published>2023-09-06T17:17:25Z</published>
<link rel='alternate' type='text/html' href='http://git.waynecole.info/tailscale/commit/?id=a61caea9111b8304414be768a89063721a5ae46c'/>
<id>urn:sha1:a61caea9111b8304414be768a89063721a5ae46c</id>
<content type='text'>
Instead of untyped string, add a type to identify these.

Updates #cleanup

Signed-off-by: Maisem Ali &lt;maisem@tailscale.com&gt;
</content>
</entry>
<entry>
<title>control/controlknobs: move more controlknobs code from controlclient</title>
<updated>2023-09-12T19:44:35Z</updated>
<author>
<name>Brad Fitzpatrick</name>
<email>bradfitz@tailscale.com</email>
</author>
<published>2023-09-12T19:36:53Z</published>
<link rel='alternate' type='text/html' href='http://git.waynecole.info/tailscale/commit/?id=9203916a4aca8efa520eb326de55491c375ab742'/>
<id>urn:sha1:9203916a4aca8efa520eb326de55491c375ab742</id>
<content type='text'>
Updates #cleanup

Change-Id: I2b8b6ac97589270f307bfb20e33674894ce873b5
Signed-off-by: Brad Fitzpatrick &lt;bradfitz@tailscale.com&gt;
</content>
</entry>
</feed>
