| Age | Commit message (Expand) | Author | Files | Lines |
| 2026-02-25 | netns,wgengine: add OpenBSD support to netns via an rtable | joshua stein | 1 | -1/+1 |
| 2026-02-24 | ipnext,ipnlocal,wgengine/filter: add extension hooks for custom filter matchers | Michael Ben-Ami | 1 | -1/+5 |
| 2026-02-18 | ipn/ipnlocal, cmd/tailscale: use wildcard. prefix for cert filenames (#18748) | Fernando Serboncini | 2 | -17/+17 |
| 2026-02-17 | ipn/ipnlocal: add basic support for netmap caching (#18530) | M. J. Fromberger | 3 | -8/+186 |
| 2026-02-16 | all: replace UserVisibleError with vizerror package | Will Norris | 1 | -3/+3 |
| 2026-02-13 | ipn/ipnlocal: log errors when suggesting exit nodes (#18728) | Simon Law | 1 | -2/+6 |
| 2026-02-13 | ipn/ipnlocal/netmapcache: include packet filters in the cache (#18715) | M. J. Fromberger | 3 | -33/+115 |
| 2026-02-10 | ipn/ipnlocal: log traffic steering scores and suggested exit nodes (#18681) | Simon Law | 1 | -2/+21 |
| 2026-02-10 | magicsock, ipnlocal: revert eventbus-based node/filter updates, remove Synchr... | Brad Fitzpatrick | 3 | -45/+14 |
| 2026-02-10 | net/dns, ipn/local: skip health warnings in dns forwarder when accept-dns is ... | Jonathan Nobels | 3 | -23/+37 |
| 2026-02-06 | tailcfg: add peerRelay bool to hostinfo | KevinLiang10 | 1 | -0/+4 |
| 2026-02-06 | ipn/ipnlocal: skip AuthKey use if profiles exist (#18619) | Will Hannah | 1 | -1/+3 |
| 2026-02-03 | ipn/ipnlocal: add wildcard TLS certificate support for subdomains (#18356) | Fernando Serboncini | 2 | -40/+312 |
| 2026-02-03 | ipn/ipnlocal/netmapcache: ensure cache updates preserve unchanged data (#18590) | M. J. Fromberger | 2 | -0/+20 |
| 2026-01-30 | wgengine/netstack: add local tailscale service IPs to route and terminate loc... | KevinLiang10 | 2 | -4/+69 |
| 2026-01-30 | net/dns,ipn/ipnlocal: add nodecap to resolve subdomains (#18258) | Fernando Serboncini | 2 | -0/+45 |
| 2026-01-28 | ipn/ipnlocal/netmapcache: report the correct error for a missing column (#18547) | M. J. Fromberger | 2 | -6/+64 |
| 2026-01-26 | ipn/ipnlocal/netmapcache: add a package to split and cache network maps (#18497) | M. J. Fromberger | 3 | -0/+701 |
| 2026-01-26 | appc,ipn/ipnlocal: Add split DNS entries for conn25 peers | Fran Bull | 2 | -0/+112 |
| 2026-01-23 | all: remove AUTHORS file and references to it | Will Norris | 48 | -48/+48 |
| 2026-01-23 | ipn/ipnlocal: manage per-profile subdirectories in TailscaleVarRoot (#18485) | M. J. Fromberger | 2 | -0/+111 |
| 2026-01-16 | tsnet: add support for Services | Harry Harpham | 2 | -0/+23 |
| 2026-01-16 | ipn/ipnlocal: allow retrieval of serve config ETags from local API | Harry Harpham | 2 | -31/+43 |
| 2026-01-16 | net/netmon: move TailscaleInterfaceIndex out of netmon.State (#18428) | Jonathan Nobels | 3 | -6/+33 |
| 2026-01-14 | ipn,ipn/local: always accept routes for Tailscale Services (cgnat range) (#18... | Tom Meadows | 2 | -4/+106 |
| 2026-01-05 | cmd/tailscaled: disable state encryption / attestation by default (#18336) | Andrew Lytvynov | 1 | -1/+7 |
| 2026-01-05 | ipn/ipnlocal: don't fail profile unmarshal due to attestation keys (#18335) | Andrew Lytvynov | 2 | -7/+79 |
| 2025-12-19 | cmd/k8s-operator,ipn/ipnlocal: allow opting out of ACME order replace extensi... | Irbe Krumina | 1 | -1/+4 |
| 2025-12-18 | ipn/ipnlocal: log cert renewal failures (#18246) | Irbe Krumina | 1 | -1/+5 |
| 2025-12-17 | net/netmon, wgengine/userspace: purge ChangeDelta.Major and address TODOs (#1... | Jonathan Nobels | 4 | -26/+25 |
| 2025-12-12 | ipn/ipnlocal: add ProxyProtocol support to VIP service TCP handler (#18175) | Raj Singh | 1 | -88/+79 |
| 2025-12-11 | ipn/ipnlocal: avoid ResetAndStop panic | Brad Fitzpatrick | 1 | -1/+8 |
| 2025-12-09 | cmd/tailscale/cli: stabilise the output of `tailscale lock status --json` | Alex Chan | 1 | -0/+1 |
| 2025-12-08 | Revert "ipn/ipnlocal: shut down old control client synchronously on reset" | Nick Khyl | 1 | -10/+29 |
| 2025-12-05 | ipn/ipnlocal: add peer API endpoints to Hostinfo on initial client creation (... | James 'zofrex' Sanderson | 2 | -10/+102 |
| 2025-12-04 | cmd/tailscale,ipn: add Unix socket support for serve | Peter A. | 2 | -2/+287 |
| 2025-12-04 | ipn/ipnlocal: fix LocalBackend deadlock when packet arrives during profile sw... | Nick Khyl | 1 | -10/+10 |
| 2025-12-03 | ipn/ipnlocal: shut down old control client synchronously on reset | Nick Khyl | 1 | -29/+10 |
| 2025-11-26 | syncs: add means of declare locking assumptions for debug mode validation | Brad Fitzpatrick | 1 | -0/+39 |
| 2025-11-26 | tstest/integration: add integration test for Tailnet Lock | Alex Chan | 2 | -283/+54 |
| 2025-11-25 | ipn/ipnlocal: don't panic if there are no suitable exit nodes | Alex Chan | 2 | -0/+66 |
| 2025-11-25 | ipn/ipnlocal: test traffic-steering when feature is not enabled (#17997) | Simon Law | 2 | -0/+23 |
| 2025-11-25 | ipn/ipnlocal: do not call controlclient.Client.Shutdown with b.mu held | Nick Khyl | 1 | -7/+10 |
| 2025-11-24 | ipn/ipnlocal: replace log.Printf with logf (#18045) | Simon Law | 2 | -9/+15 |
| 2025-11-24 | ipn/ipnlocal: fix panic in driveTransport on network error | Andrew Dunham | 2 | -36/+89 |
| 2025-11-20 | cmd/tailscaled,ipn: show a health warning when state store fails to open (#17... | Andrew Lytvynov | 1 | -0/+9 |
| 2025-11-20 | ipn/ipnlocal: add validations when setting serve config (#17950) | Harry Harpham | 2 | -13/+468 |
| 2025-11-19 | ipn/ipnlocal: remove the always-true CanSupportNetworkLock() | Alex Chan | 1 | -28/+0 |
| 2025-11-19 | ipn/ipnlocal: reduce profileManager boilerplate in network-lock tests | Alex Chan | 1 | -83/+33 |
| 2025-11-19 | ipn/ipnlocal, tka: compact TKA state after every sync | Alex Chan | 2 | -5/+230 |