3824 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Kristoffer Dalby	684239e015	cmd/mapresponses: add mini tool to inspect mapresp state from integration ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-09-09 09:40:00 +02:00
Kristoffer Dalby	81b3e8f743	util: harden parsing of traceroute ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-09-09 09:40:00 +02:00
Kristoffer Dalby	50ed24847b	debug: add json and improve ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-09-09 09:40:00 +02:00
Kristoffer Dalby	9b962956b5	integration: Eventually, debug output, lint and format ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-09-09 09:40:00 +02:00
Kristoffer Dalby	3b16b75fe6	integration: rework retry for waiting for node sync ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-09-09 09:40:00 +02:00
Kristoffer Dalby	9d236571f4	state/nodestore: in memory representation of nodes ... Initial work on a nodestore which stores all of the nodes and their relations in memory with relationship for peers precalculated. It is a copy-on-write structure, replacing the "snapshot" when a change to the structure occurs. It is optimised for reads, and while batches are not fast, they are grouped together to do less of the expensive peer calculation if there are many changes rapidly. Writes will block until commited, while reads are never blocked. Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-09-09 09:40:00 +02:00
Kristoffer Dalby	38be30b6d4	derp: allow override to ip for debug ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-09-09 09:40:00 +02:00
Kristoffer Dalby	7f8b14f6f3	.github/workflows: remove integration retry ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-09-09 09:40:00 +02:00
Kristoffer Dalby	3326c5b7ec	cmd/hi: lint and format ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-09-09 09:40:00 +02:00
Kristoffer Dalby	b6d5788231	mapper: produce map before poll ... Before this patch, we would send a message to each "node stream" that there is an update that needs to be turned into a mapresponse and sent to a node. Producing the mapresponse is a "costly" afair which means that while a node was producing one, it might start blocking and creating full queues from the poller and all the way up to where updates where sent. This could cause updates to time out and being dropped as a bad node going away or spending too time processing would cause all the other nodes to not get any updates. In addition, it contributed to "uncontrolled parallel processing" by potentially doing too many expensive operations at the same time: Each node stream is essentially a channel, meaning that if you have 30 nodes, we will try to process 30 map requests at the same time. If you have 8 cpu cores, that will saturate all the cores immediately and cause a lot of wasted switching between the processing. Now, all the maps are processed by workers in the mapper, and the number of workers are controlable. These would now be recommended to be a bit less than number of CPU cores, allowing us to process them as fast as we can, and then send them to the poll. When the poll recieved the map, it is only responsible for taking it and sending it to the node. This might not directly improve the performance of Headscale, but it will likely make the performance a lot more consistent. And I would argue the design is a lot easier to reason about. Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-09-09 09:40:00 +02:00
Kristoffer Dalby	33e9e7a71f	CLAUDE: split into agents ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-09-09 09:40:00 +02:00
Kristoffer Dalby	ccd79ed8d4	mcp: add some standard mcp server ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-09-09 09:40:00 +02:00
Kristoffer Dalby	f6c4b338fd	.github/workflows: add generate check ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-09-09 09:40:00 +02:00
Kristoffer Dalby	306d8e1bd4	integration: validate expected online status in ping ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-09-09 09:40:00 +02:00
Kristoffer Dalby	4927e9d590	fix: improve mapresponses and profiles extraction in hi tool ... - Fix directory hierarchy flattening by using full paths instead of filepath.Base() - Remove redundant container hostname prefixes from directory names - Strip top-level directory from tar extraction to avoid nested structure - Ensure parent directories exist before creating files - Results in clean structure: control_logs/mapresponses/1-ts-client/file.json	2025-09-09 09:40:00 +02:00
Kristoffer Dalby	8e25f7f9dd	bunch of qol (#2748)	2025-08-27 17:09:13 +02:00
github-actions[bot]	1a7a2f4196	flake.lock: Update (#2699)	2025-08-24 12:07:32 +00:00
Dylan Blanqué	860a8a597f	Update tools.md ... Share/Contribute Headscale Zabbix Monitoring scripts and templates. Thank you for the awesome application to everyone involved in Headscale's development!	2025-08-24 06:05:21 +02:00
cuiweixie	a2a6d20218	Refactor to use reflect.TypeFor	2025-08-23 20:43:49 +02:00
Andrey Bobelev	d29feaef79	chore(derp): allow nil regions in DERPMaps ... Previously, nil regions were not properly handled. This change allows users to disable regions in DERPMaps. Particularly useful to disable some official regions.	2025-08-23 06:54:14 +02:00
Andrey Bobelev	630bfd265a	chore(derp): prioritize loading DERP maps from URLs ... This allows users to override default entries provided via URL	2025-08-23 06:54:14 +02:00
Florian Preinstorfer	e949859d33	Add DERP docs	2025-08-22 12:09:31 +02:00
Florian Preinstorfer	4d61da30d0	Use an IPv4 address range suitable for documentation	2025-08-22 12:09:31 +02:00
Kristoffer Dalby	b87567628a	derp: increase update frequency and harden on failures (#2741)	2025-08-22 10:40:38 +02:00
dotlambda	51c6367bb1	Correctly document the default for dns.override_local_dns	2025-08-19 15:02:49 +02:00
Florian Preinstorfer	be337c6a33	Enable derp.server.verify_clients by default ... This setting is already enabled in example-config.yaml but would default to false if no key is set.	2025-08-19 11:30:44 +02:00
Shourya Gautam	086fcad7d9	Fix Internal server error on /verify (#2735) ... * converted the returned error to an httpError	2025-08-18 14:39:42 +00:00
afranco	3e3c72ea6f	docs(acls): Add example for allow/deny all acl policy	2025-08-18 16:13:14 +02:00
afranco	43f90d205e	fix: allow all traffic if acls field is omited from the policy	2025-08-18 16:13:14 +02:00
Florian Preinstorfer	7b8b796a71	docs: connect Android using a preauthkey ... Fixes: #2616	2025-08-18 16:06:17 +02:00
nblock	fa619ea9f3	Fix CHANGELOG for autogroup:member and autogroup:tagged (#2733)	2025-08-18 08:59:03 +02:00
Florian Preinstorfer	30a1f7e68e	Log registrationID to simplify interactive node registration ... Some clients such as Android make it hard to transfer the registrationID to the server, its easier to get it from the server logs.	2025-08-15 17:11:38 +02:00
Florian Preinstorfer	30cec3aa2b	Document ports in use ... Ref: #1767	2025-08-14 09:24:09 +02:00
Fredrik Ekre	5d8a2c25ea	OIDC: Query userinfo endpoint before verifying user ... This patch includes some changes to the OIDC integration in particular: - Make sure that userinfo claims are queried *before* comparing the user with the configured allowed groups, email and email domain. - Update user with group claim from the userinfo endpoint which is required for allowed groups to work correctly. This is essentially a continuation of #2545. - Let userinfo claims take precedence over id token claims. With these changes I have verified that Headscale works as expected together with Authelia without the documented escape hatch [0], i.e. everything works even if the id token only contain the iss and sub claims. [0]: https://www.authelia.com/integration/openid-connect/headscale/#configuration-escape-hatch	2025-08-11 17:51:16 +02:00
Jeff Emershaw	b4f7782fd8	support force flag for nodes backfillips	2025-08-10 13:31:24 +02:00
eyjhb	d77874373d	feat: add robots.txt	2025-08-10 10:57:45 +02:00
Kristoffer Dalby	a058bf3cd3	mapper: produce map before poll (#2628)	2025-07-28 11:15:53 +02:00
Luke Watts	b2a18830ed	docs: fix typos	2025-07-28 10:28:49 +02:00
Kristoffer Dalby	9779adc0b7	integration: run headscale with delve and debug symbols (#2689)	2025-07-24 17:44:09 +02:00
nblock	e7fe645be5	Fix invocation of golangci-lint (#2703)	2025-07-24 08:41:20 +02:00
Florian Preinstorfer	bcd80ee773	Add debugging and troubleshooting guide	2025-07-22 14:56:45 +02:00
Florian Preinstorfer	c04e17d82e	Document valid log levels ... Also change the order as the level seems more important than the format.	2025-07-22 14:56:45 +02:00
Florian Preinstorfer	98fc0563ac	Bump version in docs	2025-07-22 14:56:45 +02:00
Kian-Meng Ang	3123d5286b	Fix typos ... Found via `codespell -L shs,hastable,userr`	2025-07-21 12:06:07 +02:00
Kristoffer Dalby	7fce5065c4	all: remove 32 bit support (#2692)	2025-07-16 13:32:59 +02:00
Florian Preinstorfer	a98d9bd05f	The preauthkeys commands expect a user id instead of a username	2025-07-16 09:53:05 +02:00
Florian Preinstorfer	46c59a3fff	Fix command in bug report template	2025-07-15 21:12:32 +02:00
Kristoffer Dalby	044193bf34	integration: Use Eventually around external calls (#2685)	2025-07-13 17:37:11 +02:00
Mohammad Javad Naderi	a8f2eebf66	Fix config param name in TLS doc	2025-07-13 12:56:25 +02:00
github-actions[bot]	6220e64978	flake.lock: Update (#2669)	2025-07-13 06:36:04 +00:00