tailscale - The easiest, most secure way to use WireGuard and 2FA

Age	Commit message (Collapse)	Author	Files	Lines
2025-08-20	cmd/natc,tsconsensus: add cluster config admin	Fran Bull	1	-0/+20
	Add the ability for operators of natc in consensus mode to remove servers from the raft cluster config, without losing other state. Updates #14667 Signed-off-by: Fran Bull <fran@tailscale.com>
2025-08-20	tsconsensus,cmd/natc: add 'follower only' bootstrap option	Fran Bull	2	-28/+91
	Currently consensus has a bootstrap routine where a tsnet node tries to join each other node with the cluster tag, and if it is not able to join any other node it starts its own cluster. That algorithm is racy, and can result in split brain (more than one leader/cluster) if all the nodes for a cluster are started at the same time. Add a FollowOnly argument to the bootstrap function. If provided this tsnet node will never lead, it will try (and retry with exponential back off) to follow any node it can contact. Add a --follow-only flag to cmd/natc that uses this new tsconsensus functionality. Also slightly reorganize some arguments into opts structs. Updates #14667 Signed-off-by: Fran Bull <fran@tailscale.com>
2025-08-19	tsconsensus: check for bootstrap error	Fran Bull	1	-3/+17
	We have been unintentionally ignoring errors from calling bootstrap. bootstrap sometimes calls raft.BootstrapCluster which sometimes returns a safe to ignore error, handle that case appropriately. Updates #14667 Signed-off-by: Fran Bull <fran@tailscale.com>
2025-06-20	tsconsensus: skipping slow non-applicable tests on Windows for now	Brad Fitzpatrick	1	-0/+5
	Updates #16340 Change-Id: I61b0186295c095f99c5be81dc4dced5853025d35 Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2025-06-16	tsconsensus: protect from data race	Fran Bull	1	-6/+6
	lock for access to a.peers Fixes #16284 Signed-off-by: Fran Bull <fran@tailscale.com>
2025-05-30	tsconsensus: enable writing state to disk	Fran Bull	3	-7/+67
	The comments in the raft code say to only use the InMemStore for tests. Updates #16027 Signed-off-by: Fran Bull <fran@tailscale.com>
2025-04-11	tsconsensus: mark 2 tests that were flaky in CI	Fran Bull	1	-0/+3
	Updates #15627 Signed-off-by: Fran Bull <fran@tailscale.com>
2025-04-08	tsconsensus: add a tsconsensus package	Fran Bull	6	-0/+1891
	tsconsensus enables tsnet.Server instances to form a consensus. tsconsensus wraps hashicorp/raft with * the ability to do discovery via tailscale tags * inter node communication over tailscale * routing of commands to the leader Updates #14667 Signed-off-by: Fran Bull <fran@tailscale.com>