| Age | Commit message (Expand) | Author | Files | Lines |
| 2024-02-27 | wgengine/netstack: add a per-client limit for in-flight TCP forwards | Andrew Dunham | 2 | -21/+489 |
| 2024-02-27 | tailcfg: add latitude, longitude for node location (#11162) | Claire Wang | 4 | -0/+21 |
| 2024-02-27 | cmd/k8s-operator: reconcile tailscale Ingresses when their backend Services c... | Irbe Krumina | 2 | -2/+178 |
| 2024-02-27 | cmd/k8s-operator: configure all proxies with declarative config (#11238) | Irbe Krumina | 8 | -169/+175 |
| 2024-02-27 | cmd/k8s-operator,k8s-operator,go.{mod,sum},tstest/tools: add Tailscale Kubern... | Irbe Krumina | 5 | -1/+1652 |
| 2024-02-27 | tailfs: fix race condition in tailfs_test | Percy Wegmann | 1 | -1/+32 |
| 2024-02-27 | scripts/installer.sh: auto-start tailscale on Alpine (#11214) | Keli | 1 | -0/+1 |
| 2024-02-26 | ipn/ipnstate, wgengine/wgint: add handshake attempts accessors | Brad Fitzpatrick | 4 | -1/+33 |
| 2024-02-26 | wgengine: make pendOpen time later, after dup check | Brad Fitzpatrick | 1 | -4/+4 |
| 2024-02-26 | wgengine: reduce critical section | Brad Fitzpatrick | 1 | -4/+5 |
| 2024-02-26 | types/key: remove copy returning array by value | Brad Fitzpatrick | 1 | -4/+3 |
| 2024-02-27 | health: warn about reverse path filtering and exit nodes | Anton Tolchanov | 6 | -19/+69 |
| 2024-02-26 | cmd/tailscaled, ipn/ipnlocal, wgengine: shutdown tailscaled if wgdevice is cl... | Nick Khyl | 6 | -16/+46 |
| 2024-02-26 | net/dns: do not wait for the interface registry key to appear if the windowsM... | Nick Khyl | 1 | -5/+40 |
| 2024-02-26 | go.mod: update web-client-prebuilt module | OSS Updater | 2 | -3/+3 |
| 2024-02-26 | client/web: use grants on web UI frontend | Sonia Appasamy | 10 | -310/+548 |
| 2024-02-26 | client/web: restrict serveAPI endpoints to peer capabilities | Sonia Appasamy | 3 | -127/+357 |
| 2024-02-26 | wgengine/netstack: expose TCP forwarder drops via clientmetrics | Anton Tolchanov | 1 | -8/+38 |
| 2024-02-26 | tailfs: replace webdavfs with reverse proxies | Percy Wegmann | 33 | -2008/+1186 |
| 2024-02-25 | all: remove LenIter, use Go 1.22 range-over-int instead | Brad Fitzpatrick | 18 | -81/+45 |
| 2024-02-25 | net/dns/publicdns: add Mullvad family DNS to the list of known DoH servers
| mrrfv | 1 | -0/+3 |
| 2024-02-24 | wgengine/wglog: add TS_DEBUG_RAW_WGLOG envknob for raw wg logs | Brad Fitzpatrick | 1 | -0/+4 |
| 2024-02-24 | wgengine/wgcfg: don't send UAPI to disable keep-alives on new peers | Brad Fitzpatrick | 2 | -2/+2 |
| 2024-02-23 | net/dns: timeout DOH requests after 10s without response headers | James Tucker | 1 | -0/+3 |
| 2024-02-23 | cmd/derper: apply TCP keepalive and timeout to TLS as well | James Tucker | 1 | -3/+3 |
| 2024-02-23 | .github/workflows: fix typo in XDG_CACHE_HOME | James Tucker | 1 | -1/+1 |
| 2024-02-23 | net/interfaces: reduce & cleanup logs on iOS | James Tucker | 1 | -5/+5 |
| 2024-02-23 | cli/debug: rename DERP debug mode (#11220) | Andrea Gottardo | 1 | -4/+4 |
| 2024-02-23 | client/web: update vite and vitest to latest versions (#11200) | Mario Minardi | 4 | -294/+496 |
| 2024-02-23 | cmd/tailscale: add node attribute instructions to share command help | Percy Wegmann | 1 | -35/+52 |
| 2024-02-23 | wgengine/wglog: quieten WireGuard logs for allowedips | James Tucker | 2 | -0/+24 |
| 2024-02-22 | net/tshttpproxy: log when we're using a proxy | Andrew Dunham | 1 | -1/+25 |
| 2024-02-22 | client/web: update plugin-react-swc to latest version (#11199) | Mario Minardi | 2 | -60/+73 |
| 2024-02-22 | client/web: update vite-plugin-svgr to latest version (#11197) | Mario Minardi | 15 | -93/+125 |
| 2024-02-22 | cmd/derper: add user timeout and reduce TCP keepalive | James Tucker | 2 | -2/+28 |
| 2024-02-22 | util/syspolicy: add 'ResetToDefaults' (#11194) | Andrea Gottardo | 2 | -5/+7 |
| 2024-02-21 | cmd/derper, derp, tailcfg: add admission controller URL option | Brad Fitzpatrick | 3 | -24/+107 |
| 2024-02-21 | derp: plumb context to Server.verifyClient | Brad Fitzpatrick | 1 | -3/+3 |
| 2024-02-21 | cmd/tailscale/cli: pass "-o 'CanonicalizeHostname no'" to ssh | Paul Scott | 1 | -0/+1 |
| 2024-02-21 | cmd/testwrapper: apply results of all unit tests to coverage for all packages | Percy Wegmann | 1 | -0/+1 |
| 2024-02-20 | util/syspolicy: add ManagedBy keys for Windows (#11183) | Andrea Gottardo | 2 | -0/+14 |
| 2024-02-20 | net/ktimeout: add a package to set TCP user timeout | James Tucker | 5 | -0/+136 |
| 2024-02-19 | prober: add TLS probe constructor to split dial addr from cert name | Brad Fitzpatrick | 2 | -11/+20 |
| 2024-02-17 | ipn/ipnlocal: remove ancient transition mechanism for https certs | Brad Fitzpatrick | 1 | -17/+2 |
| 2024-02-16 | logpolicy: allow longer idle log upload connections | James Tucker | 1 | -0/+5 |
| 2024-02-16 | net/dns: fix infinite loop when run on Amazon Linux 2023 | Andrew Dunham | 1 | -1/+29 |
| 2024-02-16 | tool/gocross: pass flags for visionOS and visionOS Simulator (#11127) | Andrea Gottardo | 1 | -0/+6 |
| 2024-02-16 | cmd/tailscale: support clickable IPv6 web client addresses | Will Norris | 1 | -1/+1 |
| 2024-02-16 | cmd/tailscale: make web client URL clickable | Will Norris | 1 | -1/+1 |
| 2024-02-16 | ipn/ipnlocal: fix doctor API endpoint (#11155) | San | 1 | -0/+1 |