| Age | Commit message (Expand) | Author | Files | Lines |
| 2022-04-21 | .github/workflows: add cross-androidcross-android | James Tucker | 2 | -2/+5 |
| 2022-04-21 | .github/workflows: add cross-android | James Tucker | 1 | -0/+3 |
| 2022-04-21 | .github/workflows: add cross-android | James Tucker | 1 | -0/+53 |
| 2022-04-21 | Revert "wgengine/router,util/kmod: load & log xt_mark" | Brad Fitzpatrick | 6 | -225/+0 |
| 2022-04-21 | net/dns/resolver, net/tsaddr: fix reverse lookups in 4to6 IP range | Tom DNetto | 3 | -2/+29 |
| 2022-04-20 | wgengine/router,util/kmod: load & log xt_mark | James Tucker | 6 | -0/+225 |
| 2022-04-20 | tailcfg: document SSHPrincipal.PubKeys URL expansions | Brad Fitzpatrick | 1 | -0/+4 |
| 2022-04-20 | ssh/tailssh: fix double SSH-2.0- prefix in greeting banner | Brad Fitzpatrick | 1 | -1/+1 |
| 2022-04-20 | ipn/ipnlocal: close peerapi listeners on LocalBackend.Shutdown | Brad Fitzpatrick | 1 | -0/+1 |
| 2022-04-20 | ssh/tailssh: send banner messages during auth, move more to conn | Maisem Ali | 8 | -193/+212 |
| 2022-04-20 | scripts/install: add Alma Linux. | Denton Gentry | 1 | -1/+1 |
| 2022-04-20 | scripts/installer: support LinuxMint Debian. | Denton Gentry | 1 | -7/+20 |
| 2022-04-20 | scripts/installer: call emerge with --ask=n | Denton Gentry | 1 | -1/+1 |
| 2022-04-20 | scripts/installer: add ParrotOS support | Denton Gentry | 1 | -0/+11 |
| 2022-04-20 | cmd/tailscale: add "debug via" subcommand to do CIDR math for via ranges | Brad Fitzpatrick | 2 | -0/+67 |
| 2022-04-20 | ssh/tailssh: support expansions in public key fetch URL too | Brad Fitzpatrick | 2 | -1/+37 |
| 2022-04-20 | ssh/tailssh: terminate ssh auth early if no policy can match | Maisem Ali | 5 | -154/+221 |
| 2022-04-20 | ipn/ipnlocal: use the fake peerapi listener as fallback if netstack available | Brad Fitzpatrick | 1 | -2/+9 |
| 2022-04-20 | wgengine/monitor: split the unexpected stringification log line | Maisem Ali | 1 | -2/+3 |
| 2022-04-20 | wgengine/monitor: ignore OS-specific uninteresting interfaces | Maisem Ali | 6 | -4/+32 |
| 2022-04-20 | ipn/ipnlocal: make peerapi listener on Android avoid the kernel | Brad Fitzpatrick | 1 | -0/+54 |
| 2022-04-20 | tstest/iosdeps: add test for forbidden iOS dependencies | Brad Fitzpatrick | 2 | -0/+104 |
| 2022-04-20 | ipn/ipnlocal: reject tailscale up --ssh if disabled on tailnet | Brad Fitzpatrick | 3 | -2/+12 |
| 2022-04-20 | wgengine/router: make supportsV6NAT check catch more cases | Brad Fitzpatrick | 1 | -2/+8 |
| 2022-04-20 | cmd/nginx-auth: maintainer scripts and tailnet checking (#4460) | Xe Iaso | 9 | -11/+107 |
| 2022-04-19 | cmd/proxy-to-grafana: prevent premature termination | Blake Mizerany | 1 | -5/+6 |
| 2022-04-19 | derp/derphttp,net/netcheck: improve netcheck behavior under MITM proxies | Tom DNetto | 2 | -12/+32 |
| 2022-04-19 | net/dns: schedule DoH upgrade explicitly, fix Resolver.Addr confusion | Brad Fitzpatrick | 10 | -165/+158 |
| 2022-04-19 | net/dns/resolver: count errors when racing DNS queries, fail earlier | Brad Fitzpatrick | 1 | -25/+34 |
| 2022-04-19 | net/dns: remove an unused function | Brad Fitzpatrick | 1 | -8/+0 |
| 2022-04-18 | tailcfg: clarify how SSHPolicy.Rules are evaluated between auth phases | Brad Fitzpatrick | 1 | -3/+15 |
| 2022-04-18 | ssh/tailssh: make checkStillValid also consider username changes | Maisem Ali | 1 | -2/+2 |
| 2022-04-18 | ipn/ipnlocal: also use SSHPolicies when updating filterHash | Maisem Ali | 1 | -1/+5 |
| 2022-04-18 | go.toolchain.rev: update to go1.18.1 (#4438) | Joe Tsai | 1 | -1/+1 |
| 2022-04-18 | hostinfo, tailcfg: add desktop detection on Linux to hostinfo | Tom DNetto | 4 | -1/+33 |
| 2022-04-18 | tailcfg, logtail: provide Debug bit to disable logtail | Brad Fitzpatrick | 3 | -0/+20 |
| 2022-04-18 | net/dns/resolver: make DoH dialer use existing dnscache happy eyeball dialer | Brad Fitzpatrick | 4 | -15/+113 |
| 2022-04-18 | ipn/ipnlocal: add capability for debugging peers over peerapi | Brad Fitzpatrick | 2 | -23/+24 |
| 2022-04-18 | cmd/tailscale: [ssh] enable StrictHostKeyChecking mode | Maisem Ali | 1 | -0/+4 |
| 2022-04-18 | cmd/tailscale, etc: make "tailscale up --ssh" fail fast when unavailable | Brad Fitzpatrick | 4 | -1/+89 |
| 2022-04-18 | cmd/tailscale: unhide 'up --ssh' behind WIP env var | Brad Fitzpatrick | 1 | -4/+1 |
| 2022-04-18 | ssh/tailssh: cache public keys fetched from URLs | Brad Fitzpatrick | 2 | -21/+172 |
| 2022-04-17 | wgengine/monitor: do not set timeJumped on iOS/Android | Maisem Ali | 1 | -26/+33 |
| 2022-04-17 | ssh/tailssh: close sessions on policy change if no longer allowed | Brad Fitzpatrick | 2 | -26/+55 |
| 2022-04-17 | ipn/ipnlocal: only call updateFilter with mutex held | Brad Fitzpatrick | 1 | -15/+16 |
| 2022-04-17 | ipn/ipnlocal: add start of inter-user Taildrop | Brad Fitzpatrick | 3 | -3/+33 |
| 2022-04-17 | net/dnsfallback: update from 'go generate' | Brad Fitzpatrick | 1 | -8/+15 |
| 2022-04-17 | all: add arbitrary capability support | Brad Fitzpatrick | 9 | -5/+218 |
| 2022-04-15 | tailcfg, control/controlclient: TSMP & disco pings | James Tucker | 4 | -37/+110 |
| 2022-04-15 | go.mod: bump u-root | James Tucker | 2 | -6/+7 |