| Age | Commit message (Expand) | Author | Files | Lines |
| 2026-01-13 | ipn/store/kubestore: don't load write replica certs in memory (#18395) | Irbe Krumina | 2 | -9/+9 |
| 2026-01-07 | ipn,cmd/tailscale/cli: set correct SNI name for TLS-terminated TCP Services (... | Naman Sood | 1 | -12/+25 |
| 2026-01-06 | cmd/tailscaled,ipn/{ipnlocal,store/kubestore}: don't create attestation keys ... | Irbe Krumina | 2 | -11/+153 |
| 2026-01-05 | cmd/tailscaled: disable state encryption / attestation by default (#18336) | Andrew Lytvynov | 1 | -1/+7 |
| 2026-01-05 | ipn/ipnlocal: don't fail profile unmarshal due to attestation keys (#18335) | Andrew Lytvynov | 2 | -7/+79 |
| 2025-12-23 | ipn/ipnauth, safesocket: defer named pipe client's token retrieval until ipns... | Nick Khyl | 1 | -18/+11 |
| 2025-12-19 | cmd/k8s-operator,ipn/ipnlocal: allow opting out of ACME order replace extensi... | Irbe Krumina | 1 | -1/+4 |
| 2025-12-18 | ipn/ipnlocal: log cert renewal failures (#18246) | Irbe Krumina | 1 | -1/+5 |
| 2025-12-17 | net/netmon, wgengine/userspace: purge ChangeDelta.Major and address TODOs (#1... | Jonathan Nobels | 4 | -26/+25 |
| 2025-12-16 | client/local: add method to set gauge metric to a value | Will Norris | 1 | -10/+11 |
| 2025-12-12 | ipn/ipnlocal: add ProxyProtocol support to VIP service TCP handler (#18175) | Raj Singh | 1 | -88/+79 |
| 2025-12-11 | ipn/ipnlocal: avoid ResetAndStop panic | Brad Fitzpatrick | 1 | -1/+8 |
| 2025-12-09 | cmd/tailscale/cli: stabilise the output of `tailscale lock status --json` | Alex Chan | 2 | -0/+2 |
| 2025-12-08 | Revert "ipn/ipnlocal: shut down old control client synchronously on reset" | Nick Khyl | 1 | -10/+29 |
| 2025-12-05 | ipn/ipnlocal: add peer API endpoints to Hostinfo on initial client creation (... | James 'zofrex' Sanderson | 2 | -10/+102 |
| 2025-12-04 | cmd/tailscale,ipn: add Unix socket support for serve | Peter A. | 4 | -2/+385 |
| 2025-12-04 | ipn/ipnlocal: fix LocalBackend deadlock when packet arrives during profile sw... | Nick Khyl | 1 | -10/+10 |
| 2025-12-03 | ipn/ipnlocal: shut down old control client synchronously on reset | Nick Khyl | 1 | -29/+10 |
| 2025-11-26 | syncs: add means of declare locking assumptions for debug mode validation | Brad Fitzpatrick | 1 | -0/+39 |
| 2025-11-26 | tstest/integration: add integration test for Tailnet Lock | Alex Chan | 2 | -283/+54 |
| 2025-11-25 | cmd/tailscale/cli,ipn,all: make peer relay server port a *uint16 | Jordan Whited | 4 | -13/+9 |
| 2025-11-25 | ipn/serve: validate service paths in HasPathHandler | Sachin Iyer | 2 | -0/+44 |
| 2025-11-25 | ipn/ipnlocal: don't panic if there are no suitable exit nodes | Alex Chan | 2 | -0/+66 |
| 2025-11-25 | ipn/ipnlocal: test traffic-steering when feature is not enabled (#17997) | Simon Law | 2 | -0/+23 |
| 2025-11-25 | ipn/ipnlocal: do not call controlclient.Client.Shutdown with b.mu held | Nick Khyl | 1 | -7/+10 |
| 2025-11-24 | ipn/ipnlocal: replace log.Printf with logf (#18045) | Simon Law | 2 | -9/+15 |
| 2025-11-24 | cmd/tailscale,feature/relayserver,ipn: add relay-server-static-endpoints set ... | Jordan Whited | 4 | -101/+142 |
| 2025-11-24 | ipn/ipnlocal: fix panic in driveTransport on network error | Andrew Dunham | 2 | -36/+89 |
| 2025-11-20 | cmd/tailscaled,ipn: show a health warning when state store fails to open (#17... | Andrew Lytvynov | 4 | -1/+105 |
| 2025-11-20 | ipn/ipnlocal: add validations when setting serve config (#17950) | Harry Harpham | 3 | -42/+483 |
| 2025-11-19 | cmd/tailscale/cli: allow remote target as service destination (#17607) | KevinLiang10 | 3 | -23/+68 |
| 2025-11-19 | ipn/ipnlocal: remove the always-true CanSupportNetworkLock() | Alex Chan | 1 | -28/+0 |
| 2025-11-19 | ipn/ipnlocal: reduce profileManager boilerplate in network-lock tests | Alex Chan | 1 | -83/+33 |
| 2025-11-19 | ipn/ipnlocal, tka: compact TKA state after every sync | Alex Chan | 2 | -5/+230 |
| 2025-11-18 | types/key,wgengine/magicsock,control/controlclient,ipn: add debug disco key r... | James Tucker | 3 | -0/+49 |
| 2025-11-18 | types/netmap,*: remove some redundant fields from NetMap | Brad Fitzpatrick | 6 | -21/+29 |
| 2025-11-18 | all: rename variables with lowercase-l/uppercase-I | Alex Chan | 1 | -2/+2 |
| 2025-11-18 | ipn/localapi: log calls to localapi (#17880) | James 'zofrex' Sanderson | 2 | -16/+41 |
| 2025-11-17 | ipn{,/local},cmd/tailscale: add "sync" flag and pref to disable control map poll | Brad Fitzpatrick | 6 | -5/+100 |
| 2025-11-17 | ipn/ipnlocal: use an in-memory TKA store if FS is unavailable | Alex Chan | 1 | -21/+33 |
| 2025-11-17 | go.mod: bump golang.org/x/crypto (#17907) | Andrew Lytvynov | 1 | -12/+12 |
| 2025-11-17 | ipn: fix typo in comment | Brad Fitzpatrick | 2 | -2/+2 |
| 2025-11-17 | control/controlclient: remove some public API, move to Options & test-only | Brad Fitzpatrick | 1 | -1/+3 |
| 2025-11-16 | syncs: add Mutex/RWMutex alias/wrappers for future mutex debugging | Brad Fitzpatrick | 4 | -9/+10 |
| 2025-11-16 | ipn/ipnlocal: add PROXY protocol support to Funnel/Serve | Andrew Dunham | 4 | -11/+104 |
| 2025-11-16 | types/netmap: remove PrivateKey from NetworkMap | Brad Fitzpatrick | 8 | -400/+124 |
| 2025-11-14 | control/controlclient,ipn/ipnlocal: replace State enum with boolean flags | James Tucker | 2 | -73/+174 |
| 2025-11-14 | ipn/localapi: use constant-time comparison for RequiredPassword (#17906) | Andrew Lytvynov | 1 | -1/+2 |
| 2025-11-14 | various: adds missing apostrophes to comments | Alex Chan | 1 | -1/+1 |
| 2025-11-14 | control/controlclient: make Observer optional | Brad Fitzpatrick | 1 | -7/+0 |