| Age | Commit message (Expand) | Author | Files | Lines |
| 2026-04-22 | wgengine/magicsock: replace peers slice with peersByID map; add Upsert/Remove... | Brad Fitzpatrick | 5 | -192/+359 |
| 2026-04-15 | magicsock: invalidate endpoint on trust timeout (#19415) | Alex Valiushko | 2 | -8/+237 |
| 2026-04-14 | wgengine/magicsock: remove pickPort, use port 0 to avoid TOCTOU race | Avery Pennarun | 1 | -14/+12 |
| 2026-04-14 | util/linuxfw,wgengine/router: allow incoming CGNAT range traffic with nodeattr | Naman Sood | 4 | -11/+110 |
| 2026-04-14 | wgengine: replace reflect.DeepEqual with typed Equal for maybeReconfigInputs ... | Fernando Serboncini | 2 | -4/+151 |
| 2026-04-14 | wgengine/magicsock: deflake TestTwoDevicePing compare-metrics-stats | Brad Fitzpatrick | 1 | -72/+107 |
| 2026-04-13 | all: fix six tests that failed with -count=2 | Brad Fitzpatrick | 1 | -0/+3 |
| 2026-04-13 | wgengine/netstack: fix data race on in-flight connection test globals | Brad Fitzpatrick | 2 | -9/+13 |
| 2026-04-10 | wgengine/router/osrouter: fix privileged tests missing fake netfilter runner | Amal Bansode | 1 | -0/+4 |
| 2026-04-10 | tstest: add RequireRoot helper | Brad Fitzpatrick | 1 | -3/+1 |
| 2026-04-08 | wgengine/netstack: allow UDP listeners to receive traffic on Service VIP addr... | Tom Meadows | 2 | -0/+216 |
| 2026-04-07 | tsd, all: add Sys.ExtraRootCAs, plumb through TLS dial paths | Brad Fitzpatrick | 3 | -0/+17 |
| 2026-04-07 | wgengine/userspace: add extra check for tsmp learned keys in engine (#19223) | Claus Lensbøl | 2 | -4/+115 |
| 2026-04-05 | cmd/vet: add subtestnames analyzer; fix all existing violations | Brad Fitzpatrick | 7 | -107/+107 |
| 2026-04-01 | tailcfg,ipn/ipnlocal: regulate netmap caching via a node attribute (#19117) | M. J. Fromberger | 1 | -1/+1 |
| 2026-04-01 | wgengine/magicsock: send out disco keys over TSMP periodically (#19212) | Claus Lensbøl | 3 | -4/+53 |
| 2026-03-31 | wgengine/magicsock: assume network up for tests | Harry Harpham | 2 | -1/+14 |
| 2026-03-30 | control/controlclient,ipn/ipnlocal,wgengine: avoid restarting wireguard when ... | Claus Lensbøl | 3 | -1/+121 |
| 2026-03-24 | all: use `bart.Lite` instead of `bart.Table` where appropriate | Alex Chan | 1 | -6/+3 |
| 2026-03-20 | wgengine/magicsock,control/controlclient: do not overwrite discokey with old ... | Claus Lensbøl | 3 | -18/+19 |
| 2026-03-17 | wgengine/netstack: add TS_NETSTACK_KEEPALIVE_{IDLE,INTERVAL} envknobs | Josef Bacik | 1 | -8/+36 |
| 2026-03-13 | wgengine/netstack: don't register subnet/4via6 TCP flows with proxymap | Brad Fitzpatrick | 1 | -6/+9 |
| 2026-03-13 | net/{batching,udprelay},wgengine/magicsock: add SO_RXQ_OVFL clientmetrics | Jordan Whited | 1 | -1/+1 |
| 2026-03-11 | wgengine{,/magicsock}: add DERP hooks for filtering+sending packets | Brad Fitzpatrick | 4 | -11/+51 |
| 2026-03-11 | wgengine: search randomly for unused port instead of in contiguous range (#18... | kari-ts | 1 | -2/+3 |
| 2026-03-11 | wgengine/magicsock: fix three race conditions in TestTwoDevicePing | Brad Fitzpatrick | 1 | -31/+70 |
| 2026-03-10 | wgengine: add API to force a disco key for experiments, testing | Brad Fitzpatrick | 2 | -0/+18 |
| 2026-03-06 | all: use Go 1.26 things, run most gofix modernizers | Brad Fitzpatrick | 8 | -29/+19 |
| 2026-03-05 | types/ptr: deprecate ptr.To, use Go 1.26 new | Brad Fitzpatrick | 2 | -5/+3 |
| 2026-03-05 | all: fix typos in comments | Brad Fitzpatrick | 1 | -1/+1 |
| 2026-03-05 | tstest/natlab: add test for no control and rotated disco key (#18261) | Claus Lensbøl | 1 | -0/+1 |
| 2026-03-04 | util/linuxfw,wgengine/router: add connmark rules for rp_filter workaround (#1... | Mike O'Driscoll | 2 | -12/+226 |
| 2026-03-03 | wgengine/magicsoc,net/tstun: put disco key advertisement behind a nob (#18857) | Claus Lensbøl | 1 | -0/+4 |
| 2026-03-03 | wgengine/magicsock: improve error message for moving Mullvad node keys | Alex Chan | 1 | -2/+12 |
| 2026-02-27 | wgengine/netstack: deliver self-addressed packets via loopback | James Tucker | 3 | -0/+355 |
| 2026-02-26 | go.mod: bump gvisor | Brad Fitzpatrick | 1 | -1/+14 |
| 2026-02-26 | wgengine/magicsock: only run derpActiveFunc after connecting to DERP (#18814) | Fernando Serboncini | 2 | -1/+59 |
| 2026-02-25 | netns,wgengine: add OpenBSD support to netns via an rtable | joshua stein | 1 | -8/+41 |
| 2026-02-24 | ipnext,ipnlocal,wgengine/filter: add extension hooks for custom filter matchers | Michael Ben-Ami | 2 | -17/+257 |
| 2026-02-13 | util/clientmetric, wgengine/watchdog: report watchdog errors in user/client m... | Jonathan Nobels | 2 | -18/+176 |
| 2026-02-10 | magicsock, ipnlocal: revert eventbus-based node/filter updates, remove Synchr... | Brad Fitzpatrick | 2 | -172/+81 |
| 2026-02-09 | tstun,wgengine: add new datapath hooks for intercepting Connectors 2025 | Michael Ben-Ami | 1 | -15/+44 |
| 2026-01-30 | wgengine/netstack: add local tailscale service IPs to route and terminate loc... | KevinLiang10 | 2 | -6/+133 |
| 2026-01-30 | wgengine/magicsock: make debugNeverDirectUDP influence remote peer decisions | Jordan Whited | 2 | -1/+6 |
| 2026-01-26 | ipn/localapi: stop logging "broken pipe" errors (#18487) | Amal Bansode | 1 | -1/+3 |
| 2026-01-23 | all: remove AUTHORS file and references to it | Will Norris | 104 | -104/+104 |
| 2026-01-22 | tsnet: add support for a user-supplied tun.Device | James Tucker | 1 | -1/+85 |
| 2026-01-22 | wgengine: send disco key via TSMP on first contact (#18215) | Claus Lensbøl | 3 | -4/+67 |
| 2026-01-14 | ipn,ipn/local: always accept routes for Tailscale Services (cgnat range) (#18... | Tom Meadows | 1 | -0/+4 |
| 2026-01-09 | wgengine/magicsock: add home DERP region usermetric (#18062) | Raj Singh | 2 | -0/+19 |