| Age | Commit message (Expand) | Author | Files | Lines |
| 2025-02-12 | ipn/ipn{local,server}: extract logic that determines the "best" Tailscale pro... | Nick Khyl | 3 | -43/+118 |
| 2025-02-11 | ipn/ipn{local,server}: move "staying alive in server mode" from ipnserver to ... | Nick Khyl | 3 | -52/+112 |
| 2025-02-11 | ipn/desktop: add a new package for managing desktop sessions on Windows | Nick Khyl | 7 | -0/+994 |
| 2025-02-11 | ipn/ipnauth: implement WindowsActor | Nick Khyl | 2 | -3/+109 |
| 2025-02-11 | ipn/ipn{auth,server}: update ipnauth.Actor to carry a context | Nick Khyl | 5 | -6/+77 |
| 2025-02-11 | types/netmap,*: pass around UserProfiles as views (pointers) instead | Brad Fitzpatrick | 4 | -22/+35 |
| 2025-02-10 | ipn/ipn{local,server}: remove ResetForClientDisconnect in favor of SetCurrent... | Nick Khyl | 2 | -36/+7 |
| 2025-02-10 | ipn/ipnlocal: fix (*profileManager).DefaultUserProfileID for users other than... | Nick Khyl | 2 | -26/+28 |
| 2025-02-06 | safesocket: add ability for Darwin clients to set explicit credentials (#14702) | Jonathan Nobels | 1 | -0/+7 |
| 2025-02-05 | all: use new LocalAPI client package location | Brad Fitzpatrick | 3 | -16/+17 |
| 2025-02-04 | ipn/{ipnserver,localapi},tsnet: use ipnauth.Self as the actor in tsnet locala... | Nick Khyl | 2 | -11/+10 |
| 2025-02-04 | ipn/{ipnauth,ipnlocal,ipnserver}: move the AlwaysOn policy check from ipnserv... | Nick Khyl | 6 | -18/+63 |
| 2025-02-03 | ipn/ipnlocal: add VIP service IPs to localnets | Adrian Dewhurst | 1 | -0/+27 |
| 2025-02-03 | tailcfg: add JSON unmarshal helper for view of node/peer capabilities | Adrian Dewhurst | 1 | -4/+1 |
| 2025-02-03 | derp/derphttp,ipn/localapi,net/captivedetection: add cache resistance to capt... | James Tucker | 1 | -2/+8 |
| 2025-02-01 | client/tailscale,ipn/ipn{local,server},util/syspolicy: implement the AlwaysOn... | Nick Khyl | 4 | -15/+87 |
| 2025-01-31 | ipn/ipnlocal: fix a panic in setPrefsLockedOnEntry when cc is nil | Nick Khyl | 1 | -1/+1 |
| 2025-01-31 | ssh,tempfork/gliderlabs/ssh: replace github.com/tailscale/golang-x-crypto/ssh... | Percy Wegmann | 1 | -1/+1 |
| 2025-01-31 | ipn/ipnauth,util/syspolicy: improve comments | Nick Khyl | 2 | -3/+7 |
| 2025-01-31 | ipn/ipn{auth,server,local}: initial support for the always-on mode | Nick Khyl | 4 | -2/+44 |
| 2025-01-31 | ipn/ipnauth: implement an Actor representing tailscaled itself | Nick Khyl | 1 | -0/+46 |
| 2025-01-31 | ipn/{ipnauth, ipnserver}: extend the ipnauth.Actor interface with a CheckProf... | Nick Khyl | 4 | -1/+27 |
| 2025-01-30 | ipn: generate LoginProfileView and use it instead of *LoginProfile where appr... | Nick Khyl | 12 | -151/+254 |
| 2025-01-29 | Revert "ssh,tempfork/gliderlabs/ssh: replace github.com/tailscale/golang-x-cr... | Percy Wegmann | 1 | -1/+1 |
| 2025-01-28 | ssh,tempfork/gliderlabs/ssh: replace github.com/tailscale/golang-x-crypto/ssh... | Percy Wegmann | 1 | -1/+1 |
| 2025-01-27 | types/persist: remove Persist.LegacyFrontendPrivateMachineKey | Brad Fitzpatrick | 3 | -29/+3 |
| 2025-01-27 | tempfork/acme: add new package for x/crypto package acme fork, move | Brad Fitzpatrick | 1 | -1/+1 |
| 2025-01-24 | feature/capture: move packet capture to feature/*, out of iOS + CLI | Brad Fitzpatrick | 2 | -63/+51 |
| 2025-01-25 | ipn/ipnlocal: add debug envknob for ACME directory URL (#14771) | Tom Proctor | 2 | -2/+19 |
| 2025-01-24 | ipn/ipnlocal: include DNS SAN in cert CSR (#14764) | Tom Proctor | 1 | -3/+4 |
| 2025-01-23 | appc,ipn/ipnlocal: log DNS parsing errors in app connectors (#14607) | Andrew Lytvynov | 3 | -6/+14 |
| 2025-01-22 | feature/*: make Wake-on-LAN conditional, start supporting modular features | Brad Fitzpatrick | 2 | -131/+53 |
| 2025-01-22 | ipn/ipnlocal: re-advertise appc routes on startup, take 2 (#14740) | Andrew Lytvynov | 2 | -3/+87 |
| 2025-01-22 | tailcfg: add ServiceName | Adrian Dewhurst | 7 | -32/+33 |
| 2025-01-22 | fix handler related and some nit | KevinLiang10 | 3 | -20/+22 |
| 2025-01-22 | ipn/ipnlocal: Support TCP and Web VIP services | KevinLiang10 | 5 | -20/+674 |
| 2025-01-21 | ipn/ipnlocal: also use LetsEncrypt-baked-in roots for cert validation | Brad Fitzpatrick | 1 | -2/+17 |
| 2025-01-21 | Revert "ipn/ipnlocal: re-advertise appc routes on startup (#14609)" | Brad Fitzpatrick | 2 | -79/+3 |
| 2025-01-21 | ipn/ipnlocal,tailcfg: communicate to control whether funnel is enabled (#14688) | Irbe Krumina | 2 | -4/+189 |
| 2025-01-19 | ipn: [serve] warn that foreground funnel won't work if shields are up (#14685) | Irbe Krumina | 2 | -8/+97 |
| 2025-01-17 | ipnlocal: allow overriding os.Hostname() via syspolicy (#14676) | Andrea Gottardo | 1 | -0/+31 |
| 2025-01-15 | ipn/ipnserver: fix a deadlock in (*Server).blockWhileIdentityInUse | Nick Khyl | 2 | -1/+58 |
| 2025-01-15 | ipn/ipnserver: fix TestConcurrentOSUserSwitchingOnWindows | Nick Khyl | 1 | -1/+14 |
| 2025-01-15 | ipn/ipnlocal: re-advertise appc routes on startup (#14609) | Andrew Lytvynov | 2 | -3/+79 |
| 2025-01-14 | ipn/ipnserver: fix race condition where LocalBackend is reset after a differe... | Nick Khyl | 2 | -8/+74 |
| 2025-01-14 | ipn/{ipnlocal,ipnserver}: remove redundant (*LocalBackend).ResetForClientDisc... | Nick Khyl | 3 | -36/+42 |
| 2025-01-14 | ipn/{ipnauth,ipnlocal,ipnserver}, client/tailscale: make ipnserver.Server tes... | Nick Khyl | 3 | -0/+380 |
| 2025-01-14 | ipn/ipnserver: use ipnauth.Actor instead of *ipnserver.actor whenever possible | Nick Khyl | 2 | -12/+20 |
| 2025-01-14 | all: add Node.HomeDERP int, phase out "127.3.3.40:$region" hack [capver 111] | Brad Fitzpatrick | 3 | -16/+8 |
| 2025-01-14 | ipn/ipnlocal: allow Peer API access via either V4MasqAddr or V6MasqAddr when ... | Nick Khyl | 1 | -4/+6 |