Commit Graph

  • 29e8699357 Accepting request 1334510 from network:vpn factory Ana Guerrero 2026-02-23 16:15:27 +00:00
  • 46d1bf321b - Update to version 1.94.2: * Memory leak caused by high network map response rates is resolved - fix typo in changelog (version) Richard Rahl 2026-02-23 14:02:37 +00:00
  • 400f152deb Accepting request 1330022 from network:vpn leap-16.0 Ana Guerrero 2026-01-30 17:29:51 +00:00
  • fa646f26f4 Accepting request 1330022 from network:vpn Ana Guerrero 2026-01-30 17:29:51 +00:00
  • e83940d85b - Update to version 1.94.0: * IS SET and NOT SET have been added as device posture operators * India DERP Region City Name updated * Custom DERP servers support GCP Certificate Manager * Tailscale SSH authentication, when successful, results in LOGIN audit messages being sent to the kernel audit subsystem * Tailscale Peer Relay throughput is improved when the SO_REUSEPORT socket option is supported on multi-core systems * Tailscale Peer Relay server handshake transmission is guarded against routing loops over Tailscale * MagicDNS always resolves when using resolv.conf without a DNS manager * tailscaled_peer_relay_forwarded_packets_total and tailscaled_peer_relay_forwarded_bytes_total client metrics are available for Tailscale Peer Relays * Identity tokens are automatically generated for workload identities * --audience flag added to tailscale up command to support auto generation of ID tokens for workload identity * tsnet nodes can host Tailscale Services * The tailscale lock status -json command returns tailnet key authority (TKA) data in a stable format * Tailscale Peer Relays deliver improved throughput through monotonic time comparison optimizations and reduced lock contention * Tailscale Services virtual IPs are now automatically accepted by clients across all platforms regardless of the status of the --accept-routes feature Richard Rahl 2026-01-30 12:03:53 +00:00
  • 84b118492e Accepting request 1330020 from home:rrahl0 Richard Rahl 2026-01-30 12:03:53 +00:00
  • cc1e6c5b13 Accepting request 1328414 from network:vpn Ana Guerrero 2026-01-21 13:18:03 +00:00
  • 4fa888e6e0 Accepting request 1328414 from network:vpn Ana Guerrero 2026-01-21 13:18:03 +00:00
  • 9ec15b6eba - Update to version 1.94.0: * derp/derpserver: add a unique sender cardinality estimate * syncs: add means of declare locking assumptions for debug mode * cmd/k8s-operator: add support for taiscale.com/http-redirect * cmd/k8s-operator fix populateTLSSecret on tests * feature/posture: log method and full URL for posture identity requests * k8s-operator: Fix typos in egress-pod-readiness.go * cmd/tailscale,ipn: add Unix socket support for serve * client/systray: change systray to start after graphical.target * cmd/k8s-operator: warn if users attempt to expose a headless Service * cmd/tailscale/cli, util/qrcodes: format QR codes on Linux consoles * tsnet: ensure funnel listener cleans up after itself when closed * ipn/store/kubestore: don't load write replica certs in memory * tsnet: allow for automatic ID token generation Richard Rahl 2026-01-21 01:34:11 +00:00
  • 2da875e3cc Accepting request 1328413 from home:rrahl0 Richard Rahl 2026-01-21 01:34:11 +00:00
  • bae97085fa Accepting request 1326275 from network:vpn Ana Guerrero 2026-01-09 16:04:11 +00:00
  • fbfd1be108 Accepting request 1326275 from network:vpn Ana Guerrero 2026-01-09 16:04:11 +00:00
  • d56842182e - Update to version 1.92.5: * types/persist: omit Persist.AttestationKey based on IsZero * disable hardware attestation for kubernetes * allow opting out of ACME order replace extension - Update to version 1.92.4: * nothing of importance Richard Rahl 2026-01-09 00:32:50 +00:00
  • bfad000818 Accepting request 1326274 from home:rrahl0 Richard Rahl 2026-01-09 00:32:50 +00:00
  • 25fb6b9615 Accepting request 1323401 from network:vpn Ana Guerrero 2025-12-18 17:32:15 +00:00
  • 1d0ed9cb36 Accepting request 1323401 from network:vpn Ana Guerrero 2025-12-18 17:32:15 +00:00
  • f506379a86 - Update to version 1.92.3: * WireGuard configuration that occurs automatically in the client, no longer results in a panic Richard Rahl 2025-12-17 17:54:35 +00:00
  • a3f1d311dd Accepting request 1323400 from home:rrahl0 Richard Rahl 2025-12-17 17:54:35 +00:00
  • c7d4a8edbd Accepting request 1322628 from network:vpn Ana Guerrero 2025-12-12 20:43:17 +00:00
  • c354fff580 Accepting request 1322628 from network:vpn Ana Guerrero 2025-12-12 20:43:17 +00:00
  • fce1b2083b - Update to version 1.92.2: * cmd/derper: add GCP Certificate Manager support Richard Rahl 2025-12-12 14:29:49 +00:00
  • ee2899ec3f Accepting request 1322627 from home:rrahl0 Richard Rahl 2025-12-12 14:29:49 +00:00
  • d2c4ec3e11 Accepting request 1321351 from network:vpn Ana Guerrero 2025-12-08 10:54:26 +00:00
  • 542ccc498e Accepting request 1321351 from network:vpn Ana Guerrero 2025-12-08 10:54:26 +00:00
  • e599b7f0f3 - Update to version 1.92.1: * fix LocalBackend deadlock when packet arrives during profile switch * wgengine: fix TSMP/ICMP callback leak - Update to version 1.92.0: * no changelog provided - Update to version 1.90.9: * tailscaled no longer deadlocks during event bursts * The client no longer hangs after wake up Richard Rahl 2025-12-06 11:46:21 +00:00
  • 5f4b094985 Accepting request 1321350 from home:rrahl0 Richard Rahl 2025-12-06 11:46:21 +00:00
  • 97d6a0d4fd Accepting request 1318742 from network:vpn Ana Guerrero 2025-11-20 13:50:45 +00:00
  • 9b05fa6de7 Accepting request 1318742 from network:vpn Ana Guerrero 2025-11-20 13:50:45 +00:00
  • d8cbdec28e - Update to version 1.90.8: * tka: move RemoveAll() to CompactableChonk - Update to version 1.90.7: * wgengine/magicsock: validate endpoint.derpAddr * wgengine/magicsock: fix UDPRelayAllocReq/Resp deadlock * net/udprelay: replace VNI pool with selection algorithm * feature/relayserver,ipn/ipnlocal,net/udprelay: plumb DERPMap * feature/relayserver: fix Shutdown() deadlock * net/netmon: do not abandon a subscriber when exiting early * tka: don't try to read AUMs which are partway through being written * tka: rename a mutex to mu instead of single-letter l * ipn/ipnlocal: use an in-memory TKA store if FS is unavailable Richard Rahl 2025-11-19 18:22:06 +00:00
  • 9c10ca3573 Accepting request 1318741 from home:rrahl0 Richard Rahl 2025-11-19 18:22:06 +00:00
  • 05d0c2a1df Accepting request 1315613 from network:vpn Ana Guerrero 2025-11-05 15:19:22 +00:00
  • 5e7bc5a79c Accepting request 1315613 from network:vpn Ana Guerrero 2025-11-05 15:19:22 +00:00
  • 6e9945886e - Update to version 1.90.6: * Routes no longer stall and fail to apply when updated repeatedly in a short period of time * Tailscale SSH no longer hangs for 10s when connecting to tsrecorder. This affected tailnets that use Tailscale SSH recording Richard Rahl 2025-11-04 22:44:16 +00:00
  • 5157204799 Accepting request 1315612 from home:rrahl0 Richard Rahl 2025-11-04 22:44:16 +00:00
  • 1650468da8 Accepting request 1314302 from network:vpn Ana Guerrero 2025-10-29 20:08:12 +00:00
  • 772766874b Accepting request 1314302 from network:vpn Ana Guerrero 2025-10-29 20:08:12 +00:00
  • 9e65c6f447 - Update to version 1.90.4: * deadlock issue no longer occurs in the client when checking for the network to be available * tailscaled no longer sporadically panics when a Trusted Platform Module (TPM) device is present Richard Rahl 2025-10-29 09:57:27 +00:00
  • d9417c285f Accepting request 1314301 from home:rrahl0 Richard Rahl 2025-10-29 09:57:27 +00:00
  • 0dde72b3c5 Accepting request 1314049 from network:vpn Ana Guerrero 2025-10-28 13:49:25 +00:00
  • 046777e64e Accepting request 1314049 from network:vpn Ana Guerrero 2025-10-28 13:49:25 +00:00
  • 9909462d9e - Update to version 1.90.3: * tailscaled shuts down as expected and without panic * tailscaled starts up as expected in a no router configuration environment Richard Rahl 2025-10-28 11:23:52 +00:00
  • dc09a70ce1 Accepting request 1314048 from home:rrahl0 Richard Rahl 2025-10-28 11:23:52 +00:00
  • 5338fd9fa3 Accepting request 1313598 from network:vpn Ana Guerrero 2025-10-27 13:38:42 +00:00
  • 43be21eea5 Accepting request 1313598 from network:vpn Ana Guerrero 2025-10-27 13:38:42 +00:00
  • ce56400c01 - Update to version 1.90.2: * util/linuxfw: fix 32-bit arm regression with iptables * health: compare warnable codes to avoid errors on release branch * feature/tpm: check TPM family data for compatibility Richard Rahl 2025-10-24 18:25:48 +00:00
  • f1af816a76 Accepting request 1313597 from home:rrahl0 Richard Rahl 2025-10-24 18:25:48 +00:00
  • 1f04778326 - Upate to version 1.90.1: * Clients can use configured DNS resolvers for all domains * Node keys will be renewed seamlessly * Unnecessary path discovery packets over DERP servers are suppressed * Node key sealing is GA (generally available) and enabled by default Richard Rahl 2025-10-24 10:11:41 +00:00
  • 7ba47393a4 Accepting request 1313372 from home:rrahl0 Richard Rahl 2025-10-24 10:11:41 +00:00
  • db30034e27 Accepting request 1308397 from network:vpn Ana Guerrero 2025-10-01 16:58:02 +00:00
  • e52f11ba47 Accepting request 1308397 from network:vpn Ana Guerrero 2025-10-01 16:58:02 +00:00
  • be10986d82 - update to version 1.88.3: * cmd/tailscale/cli: add ts2021 debug flag to set a dial plan * control/controlhttp: simplify, fix race dialing, remove priority concept - update to version 1.88.2: * k8s-operator: reset service status before append - require the minimum go version directly, in comparison to using the golang(API) symbol Richard Rahl 2025-10-01 12:22:36 +00:00
  • 8b17f7d84f Accepting request 1308396 from home:rrahl0 Richard Rahl 2025-10-01 12:22:36 +00:00
  • e31a9023ed Accepting request 1305111 from network:vpn Ana Guerrero 2025-09-16 16:18:50 +00:00
  • ca2fdbc2d1 Accepting request 1305111 from network:vpn Ana Guerrero 2025-09-16 16:18:50 +00:00
  • c6036422ee - remove fix-CVE-2025-58058.patch, fixed upstream Richard Rahl 2025-09-16 08:39:20 +00:00
  • a11edb0438 Accepting request 1305110 from home:rrahl0 Richard Rahl 2025-09-16 08:39:20 +00:00
  • 566209601a - update to version 1.88.1: * Tailscale CLI prompts users to confirm impactful actions * Tailscale SSH works as expected when using an IP address instead of a hostname and MagicDNS is disabled * fixed: Taildrive sharing when su not present * Taildrive files remain consistently accessible * new: Tailscale tray GUI * DERP IPs changed for Singapore and Tokyo - remove patch fix-CVE-2025-58058, fixed upstream Richard Rahl 2025-09-12 12:20:11 +00:00
  • 5b8816f08a Accepting request 1304308 from home:rrahl0 Richard Rahl 2025-09-12 12:20:11 +00:00
  • e8033b8603 Accepting request 1301939 from network:vpn Ana Guerrero 2025-08-29 16:37:33 +00:00
  • 3b931db083 Accepting request 1301939 from network:vpn Ana Guerrero 2025-08-29 16:37:33 +00:00
  • c80d751fc0 - add patch fix-CVE-2025-58058.patch, fixing bsc#1248920 Richard Rahl 2025-08-29 12:59:17 +00:00
  • e2ea0eb984 Accepting request 1301938 from home:rrahl0 Richard Rahl 2025-08-29 12:59:17 +00:00
  • c327f5e3dc - update to version 1.86.5: * cmd/k8s-proxy,k8s-operator: fix serve config for userspace mode - update to version 1.86.4: * nothing of relevance - update to version 1.86.3: * nothing of relevance Richard Rahl 2025-08-29 11:17:32 +00:00
  • 805eddd721 Accepting request 1301919 from home:rrahl0 Richard Rahl 2025-08-29 11:17:32 +00:00
  • 8f8f1f7b2c Accepting request 1296390 from network:vpn Dominique Leuenberger 2025-07-30 09:45:45 +00:00
  • 344d5fc194 Accepting request 1296390 from network:vpn Dominique Leuenberger 2025-07-30 09:45:45 +00:00
  • 9967c0490e - update to version 1.86.2: * A deadlock issue that may have occurred in the client * An occasional crash when establishing a new port mapping with a gateway or firewall Richard Rahl 2025-07-29 21:54:32 +00:00
  • a800c2a9bf Accepting request 1296389 from home:rrahl0 Richard Rahl 2025-07-29 21:54:32 +00:00
  • acc0d6f69f Accepting request 1295907 from network:vpn Dominique Leuenberger 2025-07-27 14:26:56 +00:00
  • ba698f2162 Accepting request 1295907 from network:vpn Dominique Leuenberger 2025-07-27 14:26:56 +00:00
  • 7b1310a217 - update to version 1.86.0: * tsStateEncrypted device posture attribute for checking whether the Tailscale client state is encrypted at rest * Cross-site request forgery (CSRF) issue that may have resulted in a log in error when accessing the web interface * Recommended exit node when the previously recommended exit node is offline * tailscale up --exit-node=auto:any and tailscale set --exit-node=auto:any CLI commands track the recommended exit node and automatically switches to it when available exit nodes or network conditions change * tailscaled CLI command flag --encrypt-state encrypts the node state file on the disk using trusted platform module (TPM) Richard Rahl 2025-07-26 16:32:16 +00:00
  • ab9eceb2a5 Accepting request 1295906 from home:rrahl0 Richard Rahl 2025-07-26 16:32:16 +00:00
  • 8da1898a50 Accepting request 1288739 from network:vpn Ana Guerrero 2025-06-27 21:01:27 +00:00
  • e94b75fb7c Accepting request 1288739 from network:vpn Ana Guerrero 2025-06-27 21:01:27 +00:00
  • e3e3aab1be - update to 1.84.3: * ipn/ipnlocal: Update hostinfo to control on service config change Richard Rahl 2025-06-26 17:44:30 +00:00
  • 3cfda7d9da Accepting request 1288738 from home:rrahl0 Richard Rahl 2025-06-26 17:44:30 +00:00
  • df641df7e5 Accepting request 1284535 from network:vpn Ana Guerrero 2025-06-11 14:24:01 +00:00
  • 28e3c407ee Accepting request 1284535 from network:vpn Ana Guerrero 2025-06-11 14:24:01 +00:00
  • 422d112069 - update to 1.84.2: * Re-enable setting —accept-dns by using TS_EXTRA_ARGS. This issue resulted from stricter CLI arguments parsing introduced in Tailscale v1.84.0 Richard Rahl 2025-06-10 15:45:21 +00:00
  • b1ac052129 Accepting request 1284534 from home:rrahl0 Richard Rahl 2025-06-10 15:45:21 +00:00
  • e8ca381df8 Accepting request 1281270 from network:vpn Dominique Leuenberger 2025-05-30 12:39:07 +00:00
  • 3bf0611ac6 Accepting request 1281270 from network:vpn Dominique Leuenberger 2025-05-30 12:39:07 +00:00
  • 93386dca72 - update to 1.84.1: * net/dns: cache dns.Config for reuse when compileConfig fails Richard Rahl 2025-05-30 06:50:23 +00:00
  • b9272c1a45 Accepting request 1281269 from home:rrahl0 Richard Rahl 2025-05-30 06:50:23 +00:00
  • 8fb2bf4c3f Accepting request 1279266 from network:vpn Ana Guerrero 2025-05-22 14:57:32 +00:00
  • 7ba467c68c Accepting request 1279266 from network:vpn Ana Guerrero 2025-05-22 14:57:32 +00:00
  • f05ff0fb44 - update to 1.84.0: * The --reason flag is added to the tailscale down command * ReconnectAfter policy setting, which configures the maximum period of time between a user disconnecting Tailscale and the client automatically reconnecting * Tailscale CLI commands throw an error if multiple of the same flag are detected * Network connectivity issues when creating a new profile or switching profiles while using an exit node * DNS-over-TCP fallback works correctly with upstream servers reachable only via the tailnet - remove fix-CVE-2025-22869.patch, as upstream updated their dependencies Richard Rahl 2025-05-22 12:04:31 +00:00
  • e6d7f1a8de Accepting request 1279265 from home:rrahl0 Richard Rahl 2025-05-22 12:04:31 +00:00
  • 6b4a306d68 Accepting request 1270797 from network:vpn Ana Guerrero 2025-04-18 14:22:03 +00:00
  • 5d8d4501d5 Accepting request 1270797 from network:vpn Ana Guerrero 2025-04-18 14:22:03 +00:00
  • 2d570b44dc - update to 1.82.5: * A panic issue related to CUBIC congestion control in userspace mode is resolved. Richard Rahl 2025-04-18 07:42:58 +00:00
  • 05bb77d1e5 Accepting request 1270796 from home:rrahl0 Richard Rahl 2025-04-18 07:42:58 +00:00
  • 0aeff92068 Accepting request 1264694 from network:vpn Ana Guerrero 2025-03-28 06:36:15 +00:00
  • 36d9785e96 Accepting request 1264694 from network:vpn Ana Guerrero 2025-03-28 06:36:15 +00:00
  • 93c5b928dc - update to 1.82.0: * DERP functionality within the client supports certificate pinning for self-signed IP address certificates for those unable to use Let's Encrypt or WebPKI certificates. * Go is updated to version 1.24.1 * NAT traversal code uses the DERP connection that a packet arrived on as an ultimate fallback route if no other information is available * Captive portal detection reliability is improved on some in-flight Wi-Fi networks * Port mapping success rate is improved * Helsinki is added as a DERP region. Richard Rahl 2025-03-27 19:53:04 +00:00
  • a2bdc682d8 Accepting request 1264693 from home:rrahl0 Richard Rahl 2025-03-27 19:53:04 +00:00
  • 4fc563b752 Accepting request 1252354 from network:vpn leap-16.1 Ana Guerrero 2025-03-12 19:13:52 +00:00
  • 23eb385762 Accepting request 1252354 from network:vpn Ana Guerrero 2025-03-12 19:13:52 +00:00
  • e301c435ed - add patch fix-CVE-2025-22869.patch, fixes bsc#1239353 Richard Rahl 2025-03-12 09:22:16 +00:00
  • 6a02a5b2ff Accepting request 1252353 from home:rrahl0 Richard Rahl 2025-03-12 09:22:16 +00:00