Jonas Schwartz 9d5ce0752f policy/v2: resolve via-route grants lazily ...

With a via grant in the policy, ViaRoutesForPeer still resolved every
grant's sources and destinations up front. Non-via grants are only read
once a via grant has matched the peer, which is rare (the peer must
advertise a covered route), and destinations only for grants whose
sources match the viewer. Resolve each grant on first use instead.

BenchmarkViaRoutesForPeer, mean per peer (Apple M3 Pro):

	policy     nodes  before    after
	via-mixed  100    9.5us     2.1us
	via-mixed  1000   69.0us    11.6us
	via        1000   8.1us     8.6us

2026-10-08 12:43:45 +02:00

..

api

state: keep node removal apart from policy refresh in DeleteNode

2026-09-30 19:03:13 +02:00

assets

assets: fix logo alignment and error icon centering

2026-04-13 17:23:47 +01:00

capver

mapper: send removed peers as their own delta

2026-09-30 19:03:13 +02:00

db

db: store all credentials in one SHA-256-hashed table

2026-09-26 00:33:12 +02:00

derp

derp/server: resolve the live DERP map in /bootstrap-dns

2026-10-07 11:10:38 +02:00

dns

dns: pick the extra_records_path format by file extension

2026-09-28 21:42:19 +02:00

mapper

hscontrol: fix formatting after combining SSH policy changes

2026-10-08 10:29:23 +02:00

policy

policy/v2: resolve via-route grants lazily

2026-10-08 12:43:45 +02:00

scope

db: reject unknown OAuth client scopes at creation (#3424)

2026-09-25 21:24:37 +02:00

servertest

mapper: send SSHPolicy only when it changes for the connection

2026-10-08 10:29:23 +02:00

state

policy/v2: match the login user in SSHCheckParams

2026-10-08 10:29:23 +02:00

templates

templates: apply the tvOS setup reorder to the served /apple page

2026-08-29 18:18:35 +02:00

testdata/apiv1_golden

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

types

types: drop unused Nodes.ContainsNodeKey

2026-10-07 22:55:03 +02:00

util

state: revalidate pre-auth key reuse when registration applies

2026-10-07 14:03:54 +02:00

apiv1_apikeys_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_auth_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_authmw_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_client_test.go

gen/client/v1: add the generated HTTP client

2026-06-19 15:21:00 +02:00

apiv1_harness_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_health_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_nodes_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_policy_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_preauthkeys_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_socket_test.go

gen/client/v1: add the generated HTTP client

2026-06-19 15:21:00 +02:00

apiv1_users_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv2_acl_test.go

hscontrol: add v2 API contract tests

2026-06-21 04:17:03 +02:00

apiv2_devices_test.go

hscontrol: add v2 API contract tests

2026-06-21 04:17:03 +02:00

apiv2_keys_test.go

api/v2: add OAuth client-credentials auth and scope enforcement

2026-06-26 09:18:06 +02:00

apiv2_oauth_matrix_test.go

hscontrol, integration: test OAuth scope enforcement and the oauth-clients CLI

2026-06-26 09:18:06 +02:00

apiv2_oauth_test.go

hscontrol, integration: test OAuth scope enforcement and the oauth-clients CLI

2026-06-26 09:18:06 +02:00

apiv2_settings_test.go

hscontrol: collapse key and settings asserts into cmp.Diff

2026-06-24 18:41:06 +02:00

apiv2_users_test.go

hscontrol: contract-test the v2 users endpoint

2026-06-24 18:41:06 +02:00

app_test.go

hscontrol: keep the ACME error body readable in acmeLogger

2026-09-15 14:37:20 +02:00

app.go

hscontrol: never garbage collect an ephemeral node with a live session

2026-10-08 12:14:58 +02:00

auth_tags_test.go

state: do not expire tagged nodes on logout

2026-07-28 11:55:17 +02:00

auth_test.go

db: store all credentials in one SHA-256-hashed table

2026-09-26 00:33:12 +02:00

auth.go

state: keep node removal apart from policy refresh in DeleteNode

2026-09-30 19:03:13 +02:00

debug.go

all: adopt slices helpers

2026-06-17 16:12:19 +02:00

handlers_test.go

hscontrol: admit DERP clients via NodeKey index

2026-10-07 22:55:03 +02:00

handlers.go

hscontrol: admit DERP clients via NodeKey index

2026-10-07 22:55:03 +02:00

metrics.go

metrics, policy/v2: drop unused scaffolding + nil-error returns

2026-05-19 09:55:22 +02:00

noise_test.go

hscontrol: fix formatting after combining SSH policy changes

2026-10-08 10:29:23 +02:00

noise.go

noise: drop unused ErrNoAuthSession

2026-10-08 10:29:23 +02:00

oidc_confirm_test.go

all: annotate gosec false positives with rationale

2026-05-19 09:55:22 +02:00

oidc_cookiename_test.go

oidc: avoid slice panic in getCookieName for short values

2026-06-08 10:04:49 +02:00

oidc_template_test.go

oidc: render HTML error pages for browser-facing failures

2026-04-13 17:23:47 +01:00

oidc_test.go

oidc: harden reloadable confirmation flow

2026-09-09 19:01:43 +02:00

oidc.go

state: refresh policy nodes inside the peer map build

2026-09-30 17:21:02 +02:00

platform_config_test.go

hscontrol: read Apple platform via chi.URLParam, not mux.Vars

2026-06-05 15:00:59 +02:00

platform_config.go

hscontrol: use the stdlib uuid package

2026-08-25 21:59:00 +02:00

poll_test.go

hscontrol: never garbage collect an ephemeral node with a live session

2026-10-08 12:14:58 +02:00

poll.go

state: refresh policy nodes inside the peer map build

2026-09-30 17:21:02 +02:00

realip_test.go

hscontrol: gate proxy header trust on trusted_proxies

2026-05-18 17:17:55 +02:00

realip.go

all: adopt slices helpers

2026-06-17 16:12:19 +02:00

tailsql.go

policy, mapper, capver, hscontrol: remove dead code

2026-06-17 16:12:19 +02:00

templates_consistency_test.go

Update links to Tailscale documentation

2026-04-18 09:33:41 +02:00