Kristoffer Dalby c1ecc562d2 state: preserve previous primary when all HA advertisers unhealthy ...

electPrimaryRoutes' all-unhealthy fallback used to pick
candidates[0] (lowest NodeID) regardless of who was prev primary.
Under cable-pull semantics IsOnline lags reality (long-poll TCP
half-open), so both routers stay in candidates and both go
Unhealthy via the prober — the fallback then churned primary to
a node that was itself unreachable.

Prefer prev when still in candidates; fall through to
candidates[0] only when prev is gone. Anti-blackhole property is
preserved (peers still see *some* primary), but no flap to a
known-bad node.

Update the property test's reference model to mirror the new
algorithm and split the unit test into existence
(KeepsAPrimary) and identity (PreservesPrevious) cases — the
old "lowest-ID wins" assertion encoded the bug.

Fixes #3203

2026-04-29 13:34:51 +00:00

..

assets

assets: fix logo alignment and error icon centering

2026-04-13 17:23:47 +01:00

capver

capver: regenerate for tailscale v1.96

2026-04-08 13:00:22 +01:00

db

hscontrol: route hostname handling through dnsname and NodeStore

2026-04-18 15:12:21 +01:00

derp

all: fix golangci-lint issues (#3064)

2026-02-06 21:45:32 +01:00

dns

Fix typo in comment about fsnotify behavior

2026-02-27 15:23:06 +01:00

mapper

state: fold primary route election into NodeStore snapshot

2026-04-29 08:02:45 +00:00

policy

policy/v2: fix empty grants/acls returning FilterAllowAll

2026-04-29 08:55:07 +01:00

servertest

state: clear Unhealthy when node leaves HA candidate set

2026-04-29 08:02:45 +00:00

state

state: preserve previous primary when all HA advertisers unhealthy

2026-04-29 13:34:51 +00:00

templates

Update links to Tailscale documentation

2026-04-18 09:33:41 +02:00

types

types: move DebugRoutes from routes to types

2026-04-29 08:02:45 +00:00

util

hscontrol: route hostname handling through dnsname and NodeStore

2026-04-18 15:12:21 +01:00

app_test.go

app: add security headers middleware

2026-04-17 16:31:49 +01:00

app.go

app: add security headers middleware

2026-04-17 16:31:49 +01:00

auth_tags_test.go

state: replace zcache with bounded LRU for auth cache

2026-04-10 14:09:57 +01:00

auth_test.go

hscontrol: route hostname handling through dnsname and NodeStore

2026-04-18 15:12:21 +01:00

auth.go

hscontrol: route hostname handling through dnsname and NodeStore

2026-04-18 15:12:21 +01:00

debug.go

debug: explain URLIsNoise choice in ping callback

2026-04-17 16:31:49 +01:00

grpcv1_test.go

hscontrol: add tests for SetTags user_id database persistence

2026-04-08 14:32:08 +01:00

grpcv1.go

state: replace zcache with bounded LRU for auth cache

2026-04-10 14:09:57 +01:00

handlers_test.go

oidc: render HTML error pages for browser-facing failures

2026-04-13 17:23:47 +01:00

handlers.go

oidc: render HTML error pages for browser-facing failures

2026-04-13 17:23:47 +01:00

metrics.go

all: fix golangci-lint issues (#3064)

2026-02-06 21:45:32 +01:00

noise_test.go

policy/v2: align SSH check action with SaaS wire format

2026-04-17 16:31:49 +01:00

noise.go

noise: reject non-HEAD on PingResponseHandler

2026-04-17 16:31:49 +01:00

oidc_confirm_test.go

oidc: add confirmation page for node registration

2026-04-10 14:09:57 +01:00

oidc_template_test.go

oidc: render HTML error pages for browser-facing failures

2026-04-13 17:23:47 +01:00

oidc_test.go

oidc: make email verification configurable

2025-12-18 11:42:32 +00:00

oidc.go

oidc: render HTML error pages for browser-facing failures

2026-04-13 17:23:47 +01:00

platform_config.go

all: fix golangci-lint issues (#3064)

2026-02-06 21:45:32 +01:00

poll_test.go

poll: fix poll test linter violations

2026-03-12 01:27:34 -07:00

poll.go

types: add node.expiry config, deprecate oidc.expiry

2026-04-08 13:00:22 +01:00

tailsql.go

all: fix golangci-lint issues (#3064)

2026-02-06 21:45:32 +01:00

templates_consistency_test.go

Update links to Tailscale documentation

2026-04-18 09:33:41 +02:00