| Age | Commit message (Expand) | Author | Files | Lines |
| 2024-05-09 | wgengine/router: print Docker warning when stateful filtering is enabled | Andrew Dunham | 2 | -3/+55 |
| 2024-05-07 | ipn/ipnlocal, all: plumb health trackers in tests | Brad Fitzpatrick | 6 | -21/+41 |
| 2024-05-06 | tailcfg,all: add/plumb Node.IsJailed | Maisem Ali | 3 | -0/+3 |
| 2024-05-06 | ipn/ipnlocal,net/tstun,wgengine: create and plumb jailed packet filter | Maisem Ali | 3 | -0/+21 |
| 2024-05-06 | various: implement stateful firewalling on Linux (#12025) | Andrew Lytvynov | 4 | -21/+150 |
| 2024-05-03 | ipnlocal, magicsock: store last suggested exit node id in local backend (#11959) | Claire Wang | 1 | -0/+6 |
| 2024-05-03 | ssh/tailssh: plumb health.Tracker in test | Brad Fitzpatrick | 1 | -0/+2 |
| 2024-05-02 | wgengine: add exit destination logging enable for wgengine logger (#11952) | Claire Wang | 5 | -9/+15 |
| 2024-04-29 | wgengine/wgcfg/nmcfg: skip expired peers | Andrew Dunham | 1 | -0/+8 |
| 2024-04-28 | net/{interfaces,netmon}, all: merge net/interfaces package into net/netmon | Brad Fitzpatrick | 2 | -4/+3 |
| 2024-04-27 | net/netns, net/dns/resolver, etc: make netmon required in most places | Brad Fitzpatrick | 2 | -3/+3 |
| 2024-04-26 | net/netcheck, wgengine/magicsock: make netmon.Monitor required | Brad Fitzpatrick | 2 | -34/+44 |
| 2024-04-26 | health, wgengine/magicsock: remove last of health package globals | Brad Fitzpatrick | 2 | -4/+6 |
| 2024-04-26 | health, all: remove health.Global, finish plumbing health.Tracker | Brad Fitzpatrick | 12 | -20/+33 |
| 2024-04-26 | ipn/{ipnlocal,localapi},wgengine{,/magicsock}: plumb health.Tracker | Brad Fitzpatrick | 4 | -24/+38 |
| 2024-04-25 | tsd, ipnlocal, etc: add tsd.System.HealthTracker, start some plumbing | Brad Fitzpatrick | 1 | -0/+1 |
| 2024-04-25 | health: break Warnable into a global and per-Tracker value halves | Brad Fitzpatrick | 1 | -3/+3 |
| 2024-04-25 | health: add Tracker type, in prep for removing global variables | Brad Fitzpatrick | 5 | -23/+23 |
| 2024-04-23 | wgengine/router: consolidate routes before reconfiguring router for mobile cl... | Percy Wegmann | 3 | -1/+146 |
| 2024-04-23 | cmd{containerboot,k8s-operator},util/linuxfw: support ExternalName Services (... | Irbe Krumina | 1 | -0/+4 |
| 2024-04-19 | wgengine\router: fix the Tailscale-In firewall rule to work on domain networks | Nick Khyl | 2 | -2/+2 |
| 2024-04-17 | wgengine/magicsock: disable portmapper in tunchan-faked tests | Brad Fitzpatrick | 2 | -4/+11 |
| 2024-04-16 | all: use Go 1.22 range-over-int | Brad Fitzpatrick | 11 | -24/+24 |
| 2024-04-16 | cmd/tailscale/cli: prevent concurrent Start calls in 'up' | Brad Fitzpatrick | 1 | -1/+1 |
| 2024-04-15 | ipn: remove unused Options.LegacyMigrationPrefs | Brad Fitzpatrick | 1 | -7/+7 |
| 2024-04-15 | cmd/tailscale, ipn/ipnlocal: add suggest exit node CLI option (#11407) | Claire Wang | 1 | -0/+14 |
| 2024-04-15 | wgengine/magicsock: rebind/restun if a syscall.EPERM error is returned (#11711) | Charlotte Brandhorst-Satzkorn | 2 | -0/+91 |
| 2024-04-15 | wgengine/router: don't attempt route cleanup on Synology | Brad Fitzpatrick | 1 | -2/+17 |
| 2024-04-11 | wgengine/magicsock: allow disco communication without known endpoints | James Tucker | 2 | -7/+8 |
| 2024-04-09 | cmd/tailscaled: move cleanup to an implicit action during startup | James Tucker | 7 | -14/+14 |
| 2024-04-07 | wgengine/netstack: remove SubnetRouterWrapper | Maisem Ali | 3 | -31/+7 |
| 2024-04-05 | net/netcheck,wgengine/magicsock: align DERP frame receive time heuristics | James Tucker | 2 | -1/+23 |
| 2024-04-04 | wgengine/router: enable ip forwarding on gokrazy | Joonas Kuorilehto | 1 | -0/+28 |
| 2024-04-04 | wgengine/router: provide explicit hook to signal Android when VPN needs to be... | Percy Wegmann | 1 | -2/+25 |
| 2024-04-03 | tailscale: update tailfs functions and vars to use drive naming (#11597) | Charlotte Brandhorst-Satzkorn | 2 | -20/+20 |
| 2024-04-02 | tailscale: update tailfs file and package names (#11590) | Charlotte Brandhorst-Satzkorn | 2 | -5/+5 |
| 2024-03-29 | util/linuxfw,wgengine/router: skip IPv6 firewall configuration in partial ipt... | Irbe Krumina | 2 | -9/+25 |
| 2024-03-25 | tailcfg, ipn/ipnlocal, wgengine/magicsock: add only-tcp-443 node attr | Brad Fitzpatrick | 2 | -1/+16 |
| 2024-03-21 | util/linuxfw,wgengine/router: enable IPv6 configuration when netfilter is dis... | James Tucker | 1 | -3/+9 |
| 2024-03-21 | all: use zstdframe where sensible (#11491) | Joe Tsai | 1 | -9/+2 |
| 2024-03-21 | wgengine/magicsock: don't use endpoint debug ringbuffer on mobile. | Brad Fitzpatrick | 1 | -3/+12 |
| 2024-03-19 | wgengine: fix logger data race in tests | Andrew Dunham | 1 | -1/+5 |
| 2024-03-11 | wgengine/netstack: fix bug with duplicate SYN packets in client limit | Andrew Dunham | 2 | -13/+62 |
| 2024-03-08 | wgengine/magicsock: don't change DERP home when not connected to control | Andrew Dunham | 3 | -11/+172 |
| 2024-03-06 | go.mod: bump gvisor | Andrew Dunham | 1 | -3/+3 |
| 2024-03-05 | wgengine/magicsock: prefer link-local addresses to private ones | Andrew Dunham | 2 | -1/+20 |
| 2024-02-28 | wgengine: plumb the PeerByKey from wgengine to magicsock | Brad Fitzpatrick | 1 | -0/+1 |
| 2024-02-28 | ipn,wgengine: only intercept TailFS traffic on quad 100 | Percy Wegmann | 1 | -14/+2 |
| 2024-02-28 | wgengine{,/wgint}: add wgint.Peer wrapper type, add to wgengine.Engine | Brad Fitzpatrick | 6 | -21/+85 |
| 2024-02-28 | wgengine: rename local variable from 'found' to conventional 'ok' | Brad Fitzpatrick | 1 | -1/+1 |