| Age | Commit message (Expand) | Author | Files | Lines |
| 2026-03-04 | ipn/ipnlocal: skip writing netmaps to disk when disabled (#18883) | M. J. Fromberger | 1 | -2/+4 |
| 2026-03-04 | cmd/tailscale,ipn,net/netutil: remove rp_filter strict mode warnings (#18863) | Mike O'Driscoll | 2 | -60/+0 |
| 2026-02-25 | netns,wgengine: add OpenBSD support to netns via an rtable | joshua stein | 1 | -1/+1 |
| 2026-02-24 | ipnext,ipnlocal,wgengine/filter: add extension hooks for custom filter matchers | Michael Ben-Ami | 2 | -1/+39 |
| 2026-02-18 | ipn/ipnlocal, cmd/tailscale: use wildcard. prefix for cert filenames (#18748) | Fernando Serboncini | 2 | -17/+17 |
| 2026-02-17 | ipn/ipnlocal: add basic support for netmap caching (#18530) | M. J. Fromberger | 3 | -8/+186 |
| 2026-02-16 | all: replace UserVisibleError with vizerror package | Will Norris | 1 | -3/+3 |
| 2026-02-13 | ipn/ipnlocal: log errors when suggesting exit nodes (#18728) | Simon Law | 1 | -2/+6 |
| 2026-02-13 | ipn/ipnlocal/netmapcache: include packet filters in the cache (#18715) | M. J. Fromberger | 3 | -33/+115 |
| 2026-02-10 | ipn/ipnlocal: log traffic steering scores and suggested exit nodes (#18681) | Simon Law | 1 | -2/+21 |
| 2026-02-10 | magicsock, ipnlocal: revert eventbus-based node/filter updates, remove Synchr... | Brad Fitzpatrick | 3 | -45/+14 |
| 2026-02-10 | net/dns, ipn/local: skip health warnings in dns forwarder when accept-dns is ... | Jonathan Nobels | 3 | -23/+37 |
| 2026-02-06 | tailcfg: add peerRelay bool to hostinfo | KevinLiang10 | 1 | -0/+4 |
| 2026-02-06 | cmd/tailscale: add event bus queue depth debugging | James Tucker | 1 | -0/+58 |
| 2026-02-06 | ipn/ipnlocal: skip AuthKey use if profiles exist (#18619) | Will Hannah | 1 | -1/+3 |
| 2026-02-03 | ipn/ipnlocal: add wildcard TLS certificate support for subdomains (#18356) | Fernando Serboncini | 2 | -40/+312 |
| 2026-02-03 | ipn/ipnlocal/netmapcache: ensure cache updates preserve unchanged data (#18590) | M. J. Fromberger | 2 | -0/+20 |
| 2026-01-30 | wgengine/netstack: add local tailscale service IPs to route and terminate loc... | KevinLiang10 | 2 | -4/+69 |
| 2026-01-30 | net/dns,ipn/ipnlocal: add nodecap to resolve subdomains (#18258) | Fernando Serboncini | 2 | -0/+45 |
| 2026-01-28 | ipn/ipnlocal/netmapcache: report the correct error for a missing column (#18547) | M. J. Fromberger | 2 | -6/+64 |
| 2026-01-26 | ipn/localapi: stop logging "broken pipe" errors (#18487) | Amal Bansode | 1 | -1/+4 |
| 2026-01-26 | ipn/ipnlocal/netmapcache: add a package to split and cache network maps (#18497) | M. J. Fromberger | 3 | -0/+701 |
| 2026-01-26 | appc,ipn/ipnlocal: Add split DNS entries for conn25 peers | Fran Bull | 2 | -0/+112 |
| 2026-01-23 | all: remove AUTHORS file and references to it | Will Norris | 121 | -121/+121 |
| 2026-01-23 | ipn/ipnlocal: manage per-profile subdirectories in TailscaleVarRoot (#18485) | M. J. Fromberger | 2 | -0/+111 |
| 2026-01-16 | tsnet: add support for Services | Harry Harpham | 2 | -0/+23 |
| 2026-01-16 | ipn/ipnlocal: allow retrieval of serve config ETags from local API | Harry Harpham | 3 | -36/+48 |
| 2026-01-16 | net/netmon: move TailscaleInterfaceIndex out of netmon.State (#18428) | Jonathan Nobels | 3 | -6/+33 |
| 2026-01-14 | ipn,ipn/local: always accept routes for Tailscale Services (cgnat range) (#18... | Tom Meadows | 2 | -4/+106 |
| 2026-01-13 | ipn/store/kubestore: don't load write replica certs in memory (#18395) | Irbe Krumina | 2 | -9/+9 |
| 2026-01-07 | ipn,cmd/tailscale/cli: set correct SNI name for TLS-terminated TCP Services (... | Naman Sood | 1 | -12/+25 |
| 2026-01-06 | cmd/tailscaled,ipn/{ipnlocal,store/kubestore}: don't create attestation keys ... | Irbe Krumina | 2 | -11/+153 |
| 2026-01-05 | cmd/tailscaled: disable state encryption / attestation by default (#18336) | Andrew Lytvynov | 1 | -1/+7 |
| 2026-01-05 | ipn/ipnlocal: don't fail profile unmarshal due to attestation keys (#18335) | Andrew Lytvynov | 2 | -7/+79 |
| 2025-12-23 | ipn/ipnauth, safesocket: defer named pipe client's token retrieval until ipns... | Nick Khyl | 1 | -18/+11 |
| 2025-12-19 | cmd/k8s-operator,ipn/ipnlocal: allow opting out of ACME order replace extensi... | Irbe Krumina | 1 | -1/+4 |
| 2025-12-18 | ipn/ipnlocal: log cert renewal failures (#18246) | Irbe Krumina | 1 | -1/+5 |
| 2025-12-17 | net/netmon, wgengine/userspace: purge ChangeDelta.Major and address TODOs (#1... | Jonathan Nobels | 4 | -26/+25 |
| 2025-12-16 | client/local: add method to set gauge metric to a value | Will Norris | 1 | -10/+11 |
| 2025-12-12 | ipn/ipnlocal: add ProxyProtocol support to VIP service TCP handler (#18175) | Raj Singh | 1 | -88/+79 |
| 2025-12-11 | ipn/ipnlocal: avoid ResetAndStop panic | Brad Fitzpatrick | 1 | -1/+8 |
| 2025-12-09 | cmd/tailscale/cli: stabilise the output of `tailscale lock status --json` | Alex Chan | 2 | -0/+2 |
| 2025-12-08 | Revert "ipn/ipnlocal: shut down old control client synchronously on reset" | Nick Khyl | 1 | -10/+29 |
| 2025-12-05 | ipn/ipnlocal: add peer API endpoints to Hostinfo on initial client creation (... | James 'zofrex' Sanderson | 2 | -10/+102 |
| 2025-12-04 | cmd/tailscale,ipn: add Unix socket support for serve | Peter A. | 4 | -2/+385 |
| 2025-12-04 | ipn/ipnlocal: fix LocalBackend deadlock when packet arrives during profile sw... | Nick Khyl | 1 | -10/+10 |
| 2025-12-03 | ipn/ipnlocal: shut down old control client synchronously on reset | Nick Khyl | 1 | -29/+10 |
| 2025-11-26 | syncs: add means of declare locking assumptions for debug mode validation | Brad Fitzpatrick | 1 | -0/+39 |
| 2025-11-26 | tstest/integration: add integration test for Tailnet Lock | Alex Chan | 2 | -283/+54 |
| 2025-11-25 | cmd/tailscale/cli,ipn,all: make peer relay server port a *uint16 | Jordan Whited | 4 | -13/+9 |