| Age | Commit message (Expand) | Author | Files | Lines |
| 2022-04-19 | cmd/proxy-to-grafana: prevent premature termination | Blake Mizerany | 1 | -5/+6 |
| 2022-04-19 | derp/derphttp,net/netcheck: improve netcheck behavior under MITM proxies | Tom DNetto | 2 | -12/+32 |
| 2022-04-19 | net/dns: schedule DoH upgrade explicitly, fix Resolver.Addr confusion | Brad Fitzpatrick | 10 | -165/+158 |
| 2022-04-19 | net/dns/resolver: count errors when racing DNS queries, fail earlier | Brad Fitzpatrick | 1 | -25/+34 |
| 2022-04-19 | net/dns: remove an unused function | Brad Fitzpatrick | 1 | -8/+0 |
| 2022-04-18 | tailcfg: clarify how SSHPolicy.Rules are evaluated between auth phases | Brad Fitzpatrick | 1 | -3/+15 |
| 2022-04-18 | ssh/tailssh: make checkStillValid also consider username changes | Maisem Ali | 1 | -2/+2 |
| 2022-04-18 | ipn/ipnlocal: also use SSHPolicies when updating filterHash | Maisem Ali | 1 | -1/+5 |
| 2022-04-18 | go.toolchain.rev: update to go1.18.1 (#4438) | Joe Tsai | 1 | -1/+1 |
| 2022-04-18 | hostinfo, tailcfg: add desktop detection on Linux to hostinfo | Tom DNetto | 4 | -1/+33 |
| 2022-04-18 | tailcfg, logtail: provide Debug bit to disable logtail | Brad Fitzpatrick | 3 | -0/+20 |
| 2022-04-18 | net/dns/resolver: make DoH dialer use existing dnscache happy eyeball dialer | Brad Fitzpatrick | 4 | -15/+113 |
| 2022-04-18 | ipn/ipnlocal: add capability for debugging peers over peerapi | Brad Fitzpatrick | 2 | -23/+24 |
| 2022-04-18 | cmd/tailscale: [ssh] enable StrictHostKeyChecking mode | Maisem Ali | 1 | -0/+4 |
| 2022-04-18 | cmd/tailscale, etc: make "tailscale up --ssh" fail fast when unavailable | Brad Fitzpatrick | 4 | -1/+89 |
| 2022-04-18 | cmd/tailscale: unhide 'up --ssh' behind WIP env var | Brad Fitzpatrick | 1 | -4/+1 |
| 2022-04-18 | ssh/tailssh: cache public keys fetched from URLs | Brad Fitzpatrick | 2 | -21/+172 |
| 2022-04-17 | wgengine/monitor: do not set timeJumped on iOS/Android | Maisem Ali | 1 | -26/+33 |
| 2022-04-17 | ssh/tailssh: close sessions on policy change if no longer allowed | Brad Fitzpatrick | 2 | -26/+55 |
| 2022-04-17 | ipn/ipnlocal: only call updateFilter with mutex held | Brad Fitzpatrick | 1 | -15/+16 |
| 2022-04-17 | ipn/ipnlocal: add start of inter-user Taildrop | Brad Fitzpatrick | 3 | -3/+33 |
| 2022-04-17 | net/dnsfallback: update from 'go generate' | Brad Fitzpatrick | 1 | -8/+15 |
| 2022-04-17 | all: add arbitrary capability support | Brad Fitzpatrick | 9 | -5/+218 |
| 2022-04-15 | tailcfg, control/controlclient: TSMP & disco pings | James Tucker | 4 | -37/+110 |
| 2022-04-15 | go.mod: bump u-root | James Tucker | 2 | -6/+7 |
| 2022-04-15 | ssh/tailssh: make the SSH server a singleton, register with LocalBackend | Brad Fitzpatrick | 8 | -53/+78 |
| 2022-04-15 | tailcfg, ssh/tailssh: optionally support SSH public keys in wire policy | Brad Fitzpatrick | 5 | -61/+241 |
| 2022-04-14 | tailcfg, ipn/ipnlocal: add debug flag to enable one-big-CGNAT/10 route | Brad Fitzpatrick | 2 | -3/+12 |
| 2022-04-14 | net/dns/publicdns: add missing call to sync.Once.Do (#4410) | phirework | 1 | -0/+1 |
| 2022-04-14 | net/dns, util/publicdns: extract public DNS mapping into own package (#4405) | phirework | 5 | -75/+151 |
| 2022-04-14 | tailscaled: no longer tune gcpercent | James Tucker | 1 | -9/+0 |
| 2022-04-14 | cmd/nginx-auth: create new Tailscale NGINX auth service (#4400) | Xe Iaso | 8 | -0/+305 |
| 2022-04-13 | ipn/ipnlocal: make peerIPs return a sorted slice | Maisem Ali | 2 | -1/+35 |
| 2022-04-13 | Revert ".github/workflows: work around golang/go#51629" | Brad Fitzpatrick | 4 | -34/+9 |
| 2022-04-13 | go.mod: bump x/tools for go/packages generics fix | Brad Fitzpatrick | 2 | -3/+3 |
| 2022-04-12 | tstest/integration/vms: smoke test derphttp through mitm proxies | Tom DNetto | 5 | -20/+175 |
| 2022-04-12 | ipn/ipnstate: make status page more mobile-friendly | Ilya Mateyko | 1 | -0/+1 |
| 2022-04-12 | cmd/tailscale: add id-token subcommand | Maisem Ali | 4 | -5/+54 |
| 2022-04-11 | net/tsaddr, wgengine/netstack: add IPv6 range that forwards to site-relative ... | Brad Fitzpatrick | 6 | -4/+156 |
| 2022-04-11 | cmd/tailscale: Add file get --loop flag. | David Eger | 1 | -25/+66 |
| 2022-04-11 | wgengine/monitor: ignore duplicate RTM_NEWADDRs | James Tucker | 2 | -7/+161 |
| 2022-04-11 | wgengine/monitor: add envknob TS_DEBUG_NETLINK | James Tucker | 1 | -6/+28 |
| 2022-04-11 | tstest/integration/vms: test on stable nixos (21.11) | Tom DNetto | 5 | -2/+32 |
| 2022-04-08 | go.mod: bump rtnetlink for address label encoding (#4386) | James Tucker | 2 | -47/+14 |
| 2022-04-08 | shell.nix: use tailscale-go for compilation | Tom DNetto | 1 | -12/+39 |
| 2022-04-08 | net/dns, net/dns/resolver, wgengine: refactor DNS request path (#4364) | Tom | 4 | -57/+97 |
| 2022-04-08 | tstest/integration/vms: consistently use two dashes for command-line switches | Tom DNetto | 1 | -1/+1 |
| 2022-04-08 | cmd/tailscale: make web mode preserve URL scheme in Synology redirect | Xiaochao Dong (@damnever) | 1 | -5/+4 |
| 2022-04-07 | go.mod: bump netstack for clone reset fix (#4379) | James Tucker | 3 | -4/+4 |
| 2022-04-07 | control/controlbase: don't enforce a max protocol version at handshake time. | David Anderson | 6 | -28/+18 |