| Age | Commit message (Expand) | Author | Files | Lines |
| 2025-08-05 | wgengine/router: rely on events for deleted IP rules (#16744) | Claus Lensbøl | 1 | -13/+32 |
| 2025-05-12 | util/linuxfw,wgengine/router: add new netfilter rules for HA ingresses (#15896) | Irbe Krumina | 1 | -0/+8 |
| 2025-04-16 | net/netmon: publish events to event bus | David Anderson | 1 | -2/+8 |
| 2025-01-03 | wgengine/router: refactor udm-pro into broader ubnt support | Jason Barnett | 1 | -3/+3 |
| 2024-12-21 | wgengine/router: add ip rules for unifi udm-pro | Jason Barnett | 1 | -0/+22 |
| 2024-10-03 | cmd/containerboot,util/linuxfw: create a SNAT rule for dst/src only once, cle... | Irbe Krumina | 1 | -1/+1 |
| 2024-09-29 | cmd/containerboot,kube,util/linuxfw: configure kube egress proxies to route t... | Irbe Krumina | 1 | -0/+11 |
| 2024-08-22 | go.mod: update to github.com/tailscale/netlink library that doesn't require v... | Percy Wegmann | 1 | -1/+1 |
| 2024-05-09 | wgengine/router: print Docker warning when stateful filtering is enabled | Andrew Dunham | 1 | -1/+3 |
| 2024-05-06 | various: implement stateful firewalling on Linux (#12025) | Andrew Lytvynov | 1 | -5/+86 |
| 2024-04-26 | health, all: remove health.Global, finish plumbing health.Tracker | Brad Fitzpatrick | 1 | -1/+1 |
| 2024-04-23 | cmd{containerboot,k8s-operator},util/linuxfw: support ExternalName Services (... | Irbe Krumina | 1 | -0/+4 |
| 2024-04-16 | all: use Go 1.22 range-over-int | Brad Fitzpatrick | 1 | -1/+1 |
| 2024-03-29 | util/linuxfw,wgengine/router: skip IPv6 firewall configuration in partial ipt... | Irbe Krumina | 1 | -2/+3 |
| 2023-12-05 | util/linuxfw, wgengine: allow ingress to magicsock UDP port on Linux (#10370) | Naman Sood | 1 | -0/+52 |
| 2023-12-05 | wgengine/router: create netfilter runner in setNetfilterMode | James Tucker | 1 | -1/+2 |
| 2023-10-11 | cmd/containerboot: use linuxfw.NetfilterRunner | Maisem Ali | 1 | -0/+16 |
| 2023-10-10 | util/linuxfw: move detection logic | Maisem Ali | 1 | -62/+2 |
| 2023-08-17 | all: use Go 1.21 slices, maps instead of x/exp/{slices,maps} | Brad Fitzpatrick | 1 | -1/+1 |
| 2023-08-14 | wgengine/router: use iptablesRunner when no firewall tool is available: | KevinLiang10 | 1 | -1/+1 |
| 2023-08-08 | wgengine/router: add auto selection heuristic for iptables/nftables | KevinLiang10 | 1 | -0/+60 |
| 2023-07-28 | all: update exp/slices and fix call sites | David Anderson | 1 | -2/+3 |
| 2023-07-19 | util/linuxfw: add nftables support | KevinLiang10 | 1 | -4/+4 |
| 2023-06-27 | util/linuxfw: decoupling IPTables logic from linux router | KevinLiang10 | 1 | -86/+205 |
| 2023-04-20 | all: move network monitoring from wgengine/monitor to net/netmon | Mihai Parparita | 1 | -4/+4 |
| 2023-01-27 | all: update copyright and license headers | Will Norris | 1 | -3/+2 |
| 2022-12-09 | all: update golang.zx2c4.com/wireguard to github.com/tailscale/wireguard-go (... | Jordan Whited | 1 | -1/+1 |
| 2022-12-09 | wgengine/router: fix tests on systems with older Busybox 'ip' binary | Andrew Dunham | 1 | -1/+23 |
| 2022-10-20 | wgengine/router: [linux] add before deleting interface addrs | Maisem Ali | 1 | -0/+83 |
| 2022-09-13 | wgengine: set fwmark masks in netfilter & ip rules | Tom DNetto | 1 | -36/+64 |
| 2022-07-25 | all: use various net/netip parse funcs directly | Brad Fitzpatrick | 1 | -2/+2 |
| 2022-07-25 | net/netaddr: start migrating to net/netip via new netaddr adapter package | Brad Fitzpatrick | 1 | -1/+1 |
| 2021-11-22 | wgengine/router: demote TestDebugListRules fail to skip | Brad Fitzpatrick | 1 | -1/+1 |
| 2021-11-19 | wgengine/router: fix checkIPRuleSupportsV6 to actually use IPv6 | Brad Fitzpatrick | 1 | -1/+1 |
| 2021-11-01 | wgengine/router: remove last non-test "ip" command usage on Linux | Brad Fitzpatrick | 1 | -0/+10 |
| 2021-11-01 | wgengine/router: use netlink for ip rules on Linux | Brad Fitzpatrick | 1 | -22/+70 |
| 2021-10-28 | wgengine/router: add debug test to enumerate rules | Brad Fitzpatrick | 1 | -0/+20 |
| 2021-10-28 | wgengine/router: start using netlink instead of 'ip' on Linux | Brad Fitzpatrick | 1 | -0/+25 |
| 2021-09-07 | tstest: add MemLogger bytes.Buffer wrapper with Logf method | Brad Fitzpatrick | 1 | -8/+3 |
| 2021-07-20 | wgengine/router: take a link monitor | Brad Fitzpatrick | 1 | -2/+18 |
| 2021-05-25 | go.mod: upgrade wireguard-windows, de-fork wireguard-go | Josh Bleecher Snyder | 1 | -1/+1 |
| 2021-04-24 | wgengine/router{win}: ignore broadcast routes added by Windows when removing ... | Maisem Ali | 1 | -16/+0 |
| 2021-04-12 | ipn/ipnlocal,wgengine/router,cmd/tailscale: add flag to allow local lan acces... | Maisem Ali | 1 | -0/+48 |
| 2021-03-26 | wgengine/router: remove unused wireguard *Device argument. | David Anderson | 1 | -1/+1 |
| 2021-02-18 | wgengine/router: make Linux delRoute idempotent, cidrDiff fail late as possible | Brad Fitzpatrick | 1 | -0/+70 |
| 2021-02-04 | ipn: split LocalBackend off into new ipn/ipnlocal package | Brad Fitzpatrick | 1 | -9/+9 |
| 2020-09-28 | wgengine/router: make v6-ness configurable in test, for consistent results. | David Anderson | 1 | -1/+1 |
| 2020-09-24 | wgengine/router: set up basic IPv6 routing/firewalling. | David Anderson | 1 | -148/+215 |
| 2020-07-22 | wgengine/router: don't use 88 or 8888 as table/rule numbers. | David Anderson | 1 | -20/+20 |
| 2020-07-22 | wgengine/router: fix router_test to match the new marks. | David Anderson | 1 | -16/+16 |