summaryrefslogtreecommitdiffhomepage
AgeCommit message (Expand)AuthorFilesLines
2024-10-07VIPirbekrm/egressconfigIrbe Krumina12-48/+119
2024-10-04use labels more consistent with existing proxiesTom Proctor3-13/+25
2024-10-04partial code review commentsTom Proctor4-14/+27
2024-10-04make kube-generate-allTom Proctor3-5/+5
2024-10-04Partial code commentsTom Proctor3-17/+9
2024-10-04Add controller unit testsTom Proctor4-3/+210
2024-10-04Review feedbackTom Proctor2-13/+7
2024-10-04Fix rebase issuesTom Proctor3-10/+10
2024-10-04cmd/{containerboot,k8s-operator},k8s-operator,kube: add ProxyGroup controllerTom Proctor14-19/+854
2024-10-04cmd/{k8s-operator,containerboot},k8s-operator,kube: reconcile ExternalName Se...Irbe Krumina20-37/+1651
2024-10-03cmd/containerboot,util/linuxfw: create a SNAT rule for dst/src only once, cle...Irbe Krumina9-73/+272
2024-10-03safeweb: add StrictTransportSecurityOptions config (#13679)Patrick O'Doherty2-0/+61
2024-10-03ssh/tailssh: pass window size pixels in IoctlSetWinsize eventsBrad Fitzpatrick1-2/+4
2024-10-03logpolicy: force TLS 1.3 handshakeAndrea Gottardo1-0/+2
2024-10-03wgengine/netstack: check userspace ping success on WindowsBrad Fitzpatrick3-1/+118
2024-10-03control/controlclient: include HTTP status string in error message tooBrad Fitzpatrick1-1/+1
2024-10-02wgengine/magicsock: avoid log spam from ReceiveFunc on shutdownBrad Fitzpatrick1-1/+1
2024-10-02tailcfg: add func to check for known valid ServiceProtos (#13668)Naman Sood1-0/+10
2024-10-02ipn/ipnlocal: don't run portlist code unless service collection is onBrad Fitzpatrick1-29/+8
2024-10-02wf/firewall: allow link-local multicast for permitted local routes when the k...Nick Khyl2-2/+60
2024-10-02tstest: add the start of a testing wishlistBrad Fitzpatrick1-0/+17
2024-10-02net/dns: tweak DoH timeout, limit MaxConnsPerHost, require TLS 1.3 (#13564)Andrea Gottardo1-5/+23
2024-10-02control/control{client,http}: don't noise dial localhost:443 in http-only testsBrad Fitzpatrick4-13/+41
2024-10-02control/controlhttp: rename a param from addr to optAddr for clarityBrad Fitzpatrick1-14/+20
2024-10-02net/dnscache: don't fall back to an IPv6 dial if we don't have IPv6Brad Fitzpatrick1-2/+2
2024-10-02control/controlclient: bound ReportHealthChange context lifetime to Direct cl...Brad Fitzpatrick1-1/+7
2024-10-02net/captivedetection: set Timeout on net.Dialer (#13613)Andrea Gottardo1-1/+5
2024-10-02docs/windows/policy: add ADMX policy setting to configure the AuthKeyNick Khyl2-0/+31
2024-10-01.github: Bump github/codeql-action from 3.26.8 to 3.26.9 (#13625)dependabot[bot]1-3/+3
2024-10-01net/portmapper: don't treat 0.0.0.0 as a valid IPBrad Fitzpatrick1-0/+4
2024-10-01net/portmapper: don't return unspecified/local external IPsAndrew Dunham2-21/+92
2024-10-01control/controlhttp: fix connectivity on Alaska Air wifiBrad Fitzpatrick2-0/+31
2024-10-01control/controlhttp: factor out some code in prep for future changeBrad Fitzpatrick2-12/+24
2024-10-01cmd/tailscale/cli: make 'tailscale debug ts2021' try twiceBrad Fitzpatrick1-5/+20
2024-09-30ssh: Add logic to set accepted environment variables in SSH session (#13559)Mario Minardi6-55/+294
2024-09-30.github: Bump peter-evans/create-pull-request from 7.0.1 to 7.0.5 (#13626)dependabot[bot]2-2/+2
2024-09-30logpolicy: don't create a filch buffer if logging is disabledAnton Tolchanov1-31/+43
2024-09-29cmd/tsidp: add --dir flagMaisem Ali1-0/+2
2024-09-29cmd/containerboot,kube,util/linuxfw: configure kube egress proxies to route t...Irbe Krumina14-25/+1667
2024-09-27cmd/k8s-operator: remove auth key once proxy has logged in (#13612)Irbe Krumina3-26/+114
2024-09-27ipn/ipnlocal: add advertised and primary route metricsKristoffer Dalby3-1/+91
2024-09-27cmd/k8s-operator,k8s-operator: add ProxyGroup CRD (#13591)Tom Proctor11-15/+776
2024-09-26go.mod: upgrade golangci-lintAndrew Dunham2-247/+212
2024-09-26net/captivedetection: exclude ipsec interfaces from captive portal detection ...Andrea Gottardo1-1/+1
2024-09-26wgengine: make opts.Metrics mandatoryKristoffer Dalby1-1/+6
2024-09-26{ipn,net,tsnet}: use tsaddr helpersKristoffer Dalby2-28/+11
2024-09-26client/web: use tsaddr helpersKristoffer Dalby1-15/+5
2024-09-26cmd/tailscale: use tsaddr helpersKristoffer Dalby1-32/+4
2024-09-26net/tsaddr: add WithoutExitRoutes and IsExitRouteKristoffer Dalby2-0/+181
2024-09-25ssh/tailssh: add logic for matching against AcceptEnv patterns (#13466)Mario Minardi2-0/+250