<feed xmlns='http://www.w3.org/2005/Atom'>
<title>tailscale/wgengine/magicsock/debugknobs.go, branch knyar/netmapdiff2</title>
<subtitle>The easiest, most secure way to use WireGuard and 2FA</subtitle>
<id>http://git.waynecole.info/tailscale/atom?h=knyar%2Fnetmapdiff2</id>
<link rel='self' href='http://git.waynecole.info/tailscale/atom?h=knyar%2Fnetmapdiff2'/>
<link rel='alternate' type='text/html' href='http://git.waynecole.info/tailscale/'/>
<updated>2025-07-15T19:29:07Z</updated>
<entry>
<title>tailcfg,wgengine/magicsock: set peer relay CapVer (#16531)</title>
<updated>2025-07-15T19:29:07Z</updated>
<author>
<name>Jordan Whited</name>
<email>jordan@tailscale.com</email>
</author>
<published>2025-07-15T19:29:07Z</published>
<link rel='alternate' type='text/html' href='http://git.waynecole.info/tailscale/commit/?id=d65c0fd2d04a49fb11964cf0457df499a0e6e366'/>
<id>urn:sha1:d65c0fd2d04a49fb11964cf0457df499a0e6e366</id>
<content type='text'>
Updates tailscale/corp#27502
Updates tailscale/corp#30051

Signed-off-by: Jordan Whited &lt;jordan@tailscale.com&gt;</content>
</entry>
<entry>
<title>wgengine/magicsock: add envknob to toggle UDP relay feature (#16396)</title>
<updated>2025-06-27T01:39:47Z</updated>
<author>
<name>Jordan Whited</name>
<email>jordan@tailscale.com</email>
</author>
<published>2025-06-27T01:39:47Z</published>
<link rel='alternate' type='text/html' href='http://git.waynecole.info/tailscale/commit/?id=b2bf7e988e110e2a7245ac67792f666e1cd114f1'/>
<id>urn:sha1:b2bf7e988e110e2a7245ac67792f666e1cd114f1</id>
<content type='text'>
Updates tailscale/corp#27502

Signed-off-by: Jordan Whited &lt;jordan@tailscale.com&gt;</content>
</entry>
<entry>
<title>wgengine/magicsock: allow a CSV list for pretendpoint</title>
<updated>2024-07-10T16:57:28Z</updated>
<author>
<name>Lee Briggs</name>
<email>lee@leebriggs.co.uk</email>
</author>
<published>2024-07-10T01:47:46Z</published>
<link rel='alternate' type='text/html' href='http://git.waynecole.info/tailscale/commit/?id=b546a6e758a9e0f7f44dd926d2cf539232426aab'/>
<id>urn:sha1:b546a6e758a9e0f7f44dd926d2cf539232426aab</id>
<content type='text'>
Load Balancers often have more than one ingress IP, so allowing us to
add multiple means we can offer multiple options.

Updates #12578

Change-Id: I4aa49a698d457627d2f7011796d665c67d4c7952
Signed-off-by: Lee Briggs &lt;lee@leebriggs.co.uk&gt;
</content>
</entry>
<entry>
<title>wgengine/magicsock: add debug envknob for injecting an endpoint</title>
<updated>2024-07-08T14:59:40Z</updated>
<author>
<name>Brad Fitzpatrick</name>
<email>bradfitz@tailscale.com</email>
</author>
<published>2024-07-08T14:21:21Z</published>
<link rel='alternate' type='text/html' href='http://git.waynecole.info/tailscale/commit/?id=42dac7c5c2598c27918528daa4405fbb79e5f0f5'/>
<id>urn:sha1:42dac7c5c2598c27918528daa4405fbb79e5f0f5</id>
<content type='text'>
For testing. Lee wants to play with 'AWS Global Accelerator Custom
Routing with Amazon Elastic Kubernetes Service'. If this works well
enough, we can promote it.

Updates #12578

Change-Id: I5018347ed46c15c9709910717d27305d0aedf8f4
Signed-off-by: Brad Fitzpatrick &lt;bradfitz@tailscale.com&gt;
</content>
</entry>
<entry>
<title>control/controlknobs,tailcfg,wgengine/magicsock: remove DRPO shutoff switch</title>
<updated>2024-07-07T02:50:53Z</updated>
<author>
<name>Brad Fitzpatrick</name>
<email>bradfitz@tailscale.com</email>
</author>
<published>2024-07-07T02:29:58Z</published>
<link rel='alternate' type='text/html' href='http://git.waynecole.info/tailscale/commit/?id=d2fef01206cd7a96d684f9c69ba9e767de824ab4'/>
<id>urn:sha1:d2fef01206cd7a96d684f9c69ba9e767de824ab4</id>
<content type='text'>
The DERP Return Path Optimization (DRPO) is over four years old (and
on by default for over two) and we haven't had problems, so time to
remove the emergency shutoff code (controlknob) which we've never
used. The controlknobs are only meant for new features, to mitigate
risk. But we don't want to keep them forever, as they kinda pollute
the code.

Updates #150

Change-Id: If021bc8fd1b51006d8bddd1ffab639bb1abb0ad1
Signed-off-by: Brad Fitzpatrick &lt;bradfitz@tailscale.com&gt;
</content>
</entry>
<entry>
<title>all: cleanup unused code, part 2 (#10670)</title>
<updated>2023-12-22T01:40:03Z</updated>
<author>
<name>Andrew Lytvynov</name>
<email>awly@tailscale.com</email>
</author>
<published>2023-12-22T01:40:03Z</published>
<link rel='alternate' type='text/html' href='http://git.waynecole.info/tailscale/commit/?id=2716250ee823f21c984e2989c596bc2aaa495613'/>
<id>urn:sha1:2716250ee823f21c984e2989c596bc2aaa495613</id>
<content type='text'>
And enable U1000 check in staticcheck.

Updates #cleanup

Signed-off-by: Andrew Lytvynov &lt;awly@tailscale.com&gt;</content>
</entry>
<entry>
<title>wgengine/magicsock: replace CanPMTUD() with ShouldPMTUD()</title>
<updated>2023-09-21T11:17:12Z</updated>
<author>
<name>Val</name>
<email>valerie@tailscale.com</email>
</author>
<published>2023-09-18T19:21:46Z</published>
<link rel='alternate' type='text/html' href='http://git.waynecole.info/tailscale/commit/?id=95635857dc23d442fb43d0cabc13ad73486492cf'/>
<id>urn:sha1:95635857dc23d442fb43d0cabc13ad73486492cf</id>
<content type='text'>
Replace CanPMTUD() with ShouldPMTUD() to check if peer path MTU discovery should
be enabled, in preparation for adding support for enabling/disabling peer MTU
dynamically.

Updated #311

Signed-off-by: Val &lt;valerie@tailscale.com&gt;
</content>
</entry>
<entry>
<title>wgengine/magicsock: rename debugPMTUD() to debugEnablePMTUD()</title>
<updated>2023-09-21T11:17:12Z</updated>
<author>
<name>Val</name>
<email>valerie@tailscale.com</email>
</author>
<published>2023-09-13T14:18:35Z</published>
<link rel='alternate' type='text/html' href='http://git.waynecole.info/tailscale/commit/?id=055f3fd843cecd531c821d7608e855bd8cc4317e'/>
<id>urn:sha1:055f3fd843cecd531c821d7608e855bd8cc4317e</id>
<content type='text'>
Make the debugknob variable name for enabling peer path MTU discovery match the
env variable name.

Updates #311

Signed-off-by: Val &lt;valerie@tailscale.com&gt;
</content>
</entry>
<entry>
<title>wgengine/magicsock: make peerMap also keyed by NodeID</title>
<updated>2023-09-11T19:43:47Z</updated>
<author>
<name>Brad Fitzpatrick</name>
<email>bradfitz@tailscale.com</email>
</author>
<published>2023-09-11T17:13:00Z</published>
<link rel='alternate' type='text/html' href='http://git.waynecole.info/tailscale/commit/?id=d050700a3bfade74d00b559d07b7656d0fa4adf7'/>
<id>urn:sha1:d050700a3bfade74d00b559d07b7656d0fa4adf7</id>
<content type='text'>
In prep for incremental netmap update plumbing (#1909), make peerMap
also keyed by NodeID, as all the netmap node mutations passed around
later will be keyed by NodeID.

In the process, also:

* add envknob.InDevMode, as a signal that we can panic more aggressively
  in unexpected cases.
* pull two moderately large blocks of code in Conn.SetNetworkMap out
  into their own methods
* convert a few more sets from maps to set.Set

Updates #1909

Change-Id: I7acdd64452ba58e9d554140ee7a8760f9043f961
Signed-off-by: Brad Fitzpatrick &lt;bradfitz@tailscale.com&gt;
</content>
</entry>
<entry>
<title>magicsock: set the don't fragment sockopt (#8715)</title>
<updated>2023-08-11T08:34:51Z</updated>
<author>
<name>salman aljammaz</name>
<email>salman@tailscale.com</email>
</author>
<published>2023-08-11T08:34:51Z</published>
<link rel='alternate' type='text/html' href='http://git.waynecole.info/tailscale/commit/?id=99e06d3544b6d48dc0482b76f63f58f4841a6d25'/>
<id>urn:sha1:99e06d3544b6d48dc0482b76f63f58f4841a6d25</id>
<content type='text'>
This sets the Don't Fragment flag, for now behind the
TS_DEBUG_ENABLE_PMTUD envknob.

Updates #311.

Signed-off-by: Val &lt;valerie@tailscale.com&gt;
Signed-off-by: salman &lt;salman@tailscale.com&gt;</content>
</entry>
</feed>
