| Age | Commit message (Expand) | Author | Files | Lines |
| 2024-10-07 | VIPirbekrm/egressconfig | Irbe Krumina | 12 | -48/+119 |
| 2024-10-04 | use labels more consistent with existing proxies | Tom Proctor | 3 | -13/+25 |
| 2024-10-04 | partial code review comments | Tom Proctor | 4 | -14/+27 |
| 2024-10-04 | make kube-generate-all | Tom Proctor | 3 | -5/+5 |
| 2024-10-04 | Partial code comments | Tom Proctor | 3 | -17/+9 |
| 2024-10-04 | Add controller unit tests | Tom Proctor | 4 | -3/+210 |
| 2024-10-04 | Review feedback | Tom Proctor | 2 | -13/+7 |
| 2024-10-04 | Fix rebase issues | Tom Proctor | 3 | -10/+10 |
| 2024-10-04 | cmd/{containerboot,k8s-operator},k8s-operator,kube: add ProxyGroup controller | Tom Proctor | 14 | -19/+854 |
| 2024-10-04 | cmd/{k8s-operator,containerboot},k8s-operator,kube: reconcile ExternalName Se... | Irbe Krumina | 20 | -37/+1651 |
| 2024-10-03 | cmd/containerboot,util/linuxfw: create a SNAT rule for dst/src only once, cle... | Irbe Krumina | 9 | -73/+272 |
| 2024-10-03 | safeweb: add StrictTransportSecurityOptions config (#13679) | Patrick O'Doherty | 2 | -0/+61 |
| 2024-10-03 | ssh/tailssh: pass window size pixels in IoctlSetWinsize events | Brad Fitzpatrick | 1 | -2/+4 |
| 2024-10-03 | logpolicy: force TLS 1.3 handshake | Andrea Gottardo | 1 | -0/+2 |
| 2024-10-03 | wgengine/netstack: check userspace ping success on Windows | Brad Fitzpatrick | 3 | -1/+118 |
| 2024-10-03 | control/controlclient: include HTTP status string in error message too | Brad Fitzpatrick | 1 | -1/+1 |
| 2024-10-02 | wgengine/magicsock: avoid log spam from ReceiveFunc on shutdown | Brad Fitzpatrick | 1 | -1/+1 |
| 2024-10-02 | tailcfg: add func to check for known valid ServiceProtos (#13668) | Naman Sood | 1 | -0/+10 |
| 2024-10-02 | ipn/ipnlocal: don't run portlist code unless service collection is on | Brad Fitzpatrick | 1 | -29/+8 |
| 2024-10-02 | wf/firewall: allow link-local multicast for permitted local routes when the k... | Nick Khyl | 2 | -2/+60 |
| 2024-10-02 | tstest: add the start of a testing wishlist | Brad Fitzpatrick | 1 | -0/+17 |
| 2024-10-02 | net/dns: tweak DoH timeout, limit MaxConnsPerHost, require TLS 1.3 (#13564) | Andrea Gottardo | 1 | -5/+23 |
| 2024-10-02 | control/control{client,http}: don't noise dial localhost:443 in http-only tests | Brad Fitzpatrick | 4 | -13/+41 |
| 2024-10-02 | control/controlhttp: rename a param from addr to optAddr for clarity | Brad Fitzpatrick | 1 | -14/+20 |
| 2024-10-02 | net/dnscache: don't fall back to an IPv6 dial if we don't have IPv6 | Brad Fitzpatrick | 1 | -2/+2 |
| 2024-10-02 | control/controlclient: bound ReportHealthChange context lifetime to Direct cl... | Brad Fitzpatrick | 1 | -1/+7 |
| 2024-10-02 | net/captivedetection: set Timeout on net.Dialer (#13613) | Andrea Gottardo | 1 | -1/+5 |
| 2024-10-02 | docs/windows/policy: add ADMX policy setting to configure the AuthKey | Nick Khyl | 2 | -0/+31 |
| 2024-10-01 | .github: Bump github/codeql-action from 3.26.8 to 3.26.9 (#13625) | dependabot[bot] | 1 | -3/+3 |
| 2024-10-01 | net/portmapper: don't treat 0.0.0.0 as a valid IP | Brad Fitzpatrick | 1 | -0/+4 |
| 2024-10-01 | net/portmapper: don't return unspecified/local external IPs | Andrew Dunham | 2 | -21/+92 |
| 2024-10-01 | control/controlhttp: fix connectivity on Alaska Air wifi | Brad Fitzpatrick | 2 | -0/+31 |
| 2024-10-01 | control/controlhttp: factor out some code in prep for future change | Brad Fitzpatrick | 2 | -12/+24 |
| 2024-10-01 | cmd/tailscale/cli: make 'tailscale debug ts2021' try twice | Brad Fitzpatrick | 1 | -5/+20 |
| 2024-09-30 | ssh: Add logic to set accepted environment variables in SSH session (#13559) | Mario Minardi | 6 | -55/+294 |
| 2024-09-30 | .github: Bump peter-evans/create-pull-request from 7.0.1 to 7.0.5 (#13626) | dependabot[bot] | 2 | -2/+2 |
| 2024-09-30 | logpolicy: don't create a filch buffer if logging is disabled | Anton Tolchanov | 1 | -31/+43 |
| 2024-09-29 | cmd/tsidp: add --dir flag | Maisem Ali | 1 | -0/+2 |
| 2024-09-29 | cmd/containerboot,kube,util/linuxfw: configure kube egress proxies to route t... | Irbe Krumina | 14 | -25/+1667 |
| 2024-09-27 | cmd/k8s-operator: remove auth key once proxy has logged in (#13612) | Irbe Krumina | 3 | -26/+114 |
| 2024-09-27 | ipn/ipnlocal: add advertised and primary route metrics | Kristoffer Dalby | 3 | -1/+91 |
| 2024-09-27 | cmd/k8s-operator,k8s-operator: add ProxyGroup CRD (#13591) | Tom Proctor | 11 | -15/+776 |
| 2024-09-26 | go.mod: upgrade golangci-lint | Andrew Dunham | 2 | -247/+212 |
| 2024-09-26 | net/captivedetection: exclude ipsec interfaces from captive portal detection ... | Andrea Gottardo | 1 | -1/+1 |
| 2024-09-26 | wgengine: make opts.Metrics mandatory | Kristoffer Dalby | 1 | -1/+6 |
| 2024-09-26 | {ipn,net,tsnet}: use tsaddr helpers | Kristoffer Dalby | 2 | -28/+11 |
| 2024-09-26 | client/web: use tsaddr helpers | Kristoffer Dalby | 1 | -15/+5 |
| 2024-09-26 | cmd/tailscale: use tsaddr helpers | Kristoffer Dalby | 1 | -32/+4 |
| 2024-09-26 | net/tsaddr: add WithoutExitRoutes and IsExitRoute | Kristoffer Dalby | 2 | -0/+181 |
| 2024-09-25 | ssh/tailssh: add logic for matching against AcceptEnv patterns (#13466) | Mario Minardi | 2 | -0/+250 |