James Tucker 2249be1ac8 derp/derpserver, cmd/derper: add optional TCP_SAVE_SYN MSS metrics ...

Add --tcp-save-syn on Linux to record client MSS in a Prometheus histogram. Count retrieval outcomes separately and limit saved-SYN error logs to one per ten minutes across clients. IPv6 extension headers are unsupported.

Estimate the network-namespace SYN rate from kernel counters once per second. Disable TCP_SAVE_SYN on listeners above 100,000/s or if rate measurement fails, leaving it off until restart.

Updates tailscale/corp#49139

Signed-off-by: James Tucker <james@tailscale.com>

2026-10-07 09:37:39 -07:00

..

addlicense

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

build-webclient

tsweb/compserve, client/web: add zstd, remove brotli for precompressed assets

2026-09-17 15:23:49 -07:00

checkmetrics

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

cigocacher

go.mod,cmd/cigocacher: migrate to depending on tb (#21627)

2026-10-02 10:59:48 +01:00

cloner

cmd: apply go fix

2026-07-10 14:26:11 -07:00

connector-gen

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

containerboot

cmd/containerboot: recover from IPN watch closure (#21374)

2026-09-23 10:36:01 +01:00

derper

derp/derpserver, cmd/derper: add optional TCP_SAVE_SYN MSS metrics

2026-10-07 09:37:39 -07:00

derpprobe

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

dist

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

distsign

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

fbstatus

cmd/tailscale: add 'configure pve-appliance' to make Proxmox VM of appliance

2026-07-07 13:12:13 -07:00

featuretags

tstest/natlab/vmtest, gokrazy, cmd/tailscale/cli: add minimal-build vmtests

2026-09-30 15:53:47 -07:00

get-authkey

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

gitops-pusher

go.mod: bump staticcheck in prep for Go 1.27, address fallout

2026-07-31 08:00:40 -07:00

hello

tailcfg,tailcfg/{nodecap,selfcap}: split capability constants to their own packages (#20639)

2026-08-07 16:30:35 -07:00

jsonimports

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

k8s-nameserver

all: don't repeat the the word "the" unnecessarily

2026-06-18 16:32:08 +01:00

k8s-operator

feature/exitnodehealth: warn when selected exit nodes are unavailable (#21017)

2026-10-01 08:57:20 -04:00

k8s-proxy

go.mod: bump all direct deps to latest

2026-09-16 16:01:50 -07:00

mkmanifest

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

mkpkg

go.mod: bump all direct deps to latest

2026-09-16 16:01:50 -07:00

mkversion

version/mkversion: allow supplying the complete version via env vars

2026-09-29 15:42:05 -07:00

nardump

tool/updateflakes, cmd/nardump: replace update-flake.sh with Go tool

2026-04-28 10:18:32 -07:00

natc

staticcheck.conf: enable ST1000 to check package docs (#20787)

2026-08-08 13:02:06 -07:00

netlogfmt

cmd/tailscale/cli: fix time in tailscale routecheck (#19956)

2026-06-01 16:12:08 -07:00

nginx-auth

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

omitsize

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

pgproxy

cmd/pgproxy: fix client TLS handshake timeout

2026-05-11 11:12:11 -07:00

printdep

cmd/printdep: add --next flag to use rc Go build hash instead

2026-01-27 14:49:56 -08:00

proxy-test-server

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

proxy-to-grafana

tailcfg,tailcfg/{nodecap,selfcap}: split capability constants to their own packages (#20639)

2026-08-07 16:30:35 -07:00

sniproxy

ipn, ipn/ipnlocal: remove Notify.NetMap, size initial status to subscription

2026-09-14 09:37:30 -07:00

speedtest

all: use Go 1.26 things, run most gofix modernizers

2026-03-06 13:32:03 -08:00

ssh-auth-none-demo

cmd/ssh-auth-none-demo: update SSH demo a bit

2026-06-03 19:36:19 -07:00

stunc

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

stund

net/dns,util/coalescedop: serialize and coalesce DNS flush calls on Windows

2026-09-30 10:44:22 -07:00

stunstamp

tailcfg: replace int with DERPRegionID for additional type safety (#20646)

2026-08-19 16:25:50 -07:00

sync-containers

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

systray

client/systray: support several different color themes

2026-04-27 18:54:14 -07:00

tailscale

types/key: rename NLPublic/Private to TLPublic/Private

2026-10-02 16:03:51 +01:00

tailscaled

ipn/ipnlocal: drop the appc import from ts_omit_appconnectors builds

2026-10-06 13:12:00 -07:00

testcontrol

cmd/testcontrol: add --addr and --ssh-policy flags

2026-09-15 20:03:21 -07:00

testwrapper

cmd/testwrapper: run all package patterns in one go test invocation

2026-09-18 02:56:29 -07:00

tl-longchain

types/key: rename NLPublic/Private to TLPublic/Private

2026-10-02 16:03:51 +01:00

tsconnect

feature/featuretags: add MinTags, use it in three places

2026-09-30 07:42:13 -07:00

tsidp

feature/exitnodehealth: warn when selected exit nodes are unavailable (#21017)

2026-10-01 08:57:20 -04:00

tsnet-proxy

cmd/tsnet-proxy: add tsnet-based port proxy tool (#19468)

2026-04-22 13:34:18 -04:00

tsp

cmd: apply go fix

2026-07-10 14:26:11 -07:00

tsshd

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

tta

tstest, cmd/tta: add Tailscale SSH end-to-end VM test

2026-07-13 15:04:51 -07:00

vet

types/key: rename NLPublic/Private to TLPublic/Private

2026-10-02 16:03:51 +01:00

viewer

cmd: apply go fix

2026-07-10 14:26:11 -07:00

vnet

gokrazy, tstest, cmd/vnet: switch amd64 kernel to gokrazy/kernel.amd64

2026-07-15 11:45:02 -04:00

xdpderper

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00