tailscale/go.mod

module tailscale.com

go 1.16

require (
	github.com/alexbrainman/sspi v0.0.0-20180613141037-e580b900e9f5
	github.com/anmitsu/go-shlex v0.0.0-20161002113705-648efa622239 // indirect
	github.com/coreos/go-iptables v0.4.5
	github.com/flynn/go-shlex v0.0.0-20150515145356-3f9db97f8568 // indirect
	github.com/github/certstore v0.1.0
	github.com/gliderlabs/ssh v0.2.2
	github.com/go-multierror/multierror v1.0.2
	github.com/go-ole/go-ole v1.2.4
	github.com/godbus/dbus/v5 v5.0.3
	github.com/google/go-cmp v0.5.4
	github.com/goreleaser/nfpm v1.1.10
	github.com/jsimonetti/rtnetlink v0.0.0-20210212075122-66c871082f2b
	github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51
	github.com/klauspost/compress v1.10.10
	github.com/kr/pty v1.1.8
	github.com/mdlayher/netlink v1.3.2
	github.com/mdlayher/sdnotify v0.0.0-20200625151349-e4a4f32afc4a
	github.com/miekg/dns v1.1.30
	github.com/pborman/getopt v0.0.0-20190409184431-ee0cd42419d3
	github.com/peterbourgon/ff/v2 v2.0.0
	github.com/pkg/errors v0.9.1 // indirect
	github.com/stretchr/testify v1.4.0
	github.com/tailscale/depaware v0.0.0-20201214215404-77d1e9757027
	github.com/tailscale/wireguard-go v0.0.0-20210429195722-6cd106ab1339
	github.com/tcnksm/go-httpstat v0.2.0
	github.com/toqueteos/webbrowser v1.2.0
	go4.org/mem v0.0.0-20201119185036-c04c5a6ff174
	golang.org/x/crypto v0.0.0-20210317152858-513c2a44f670
	golang.org/x/net v0.0.0-20210226172049-e18ecbb05110
	golang.org/x/sync v0.0.0-20210220032951-036812b2e83c
	golang.org/x/sys v0.0.0-20210403161142-5e06dd20ab57
	golang.org/x/term v0.0.0-20210317153231-de623e64d2a6
	golang.org/x/time v0.0.0-20210220033141-f8bda1e9f3ba
	golang.org/x/tools v0.0.0-20201211185031-d93e913c1a58
	golang.zx2c4.com/wireguard/windows v0.1.2-0.20201113162609-9b85be97fdf8
	gopkg.in/yaml.v2 v2.2.8 // indirect
	honnef.co/go/tools v0.1.0
	inet.af/netaddr v0.0.0-20210222205655-a1ec2b7b8c44
	inet.af/netstack v0.0.0-20210317161235-a1bf4e56ef22
	inet.af/peercred v0.0.0-20210302202138-56e694897155
	rsc.io/goversion v1.2.0
)

replace github.com/github/certstore => github.com/cyolosecurity/certstore v0.0.0-20200922073901-ece7f1d353c2
Move Linux client & common packages into a public repo. 5 years ago			`module tailscale.com`

Switch to Go 1.16. Fixes #1370 Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com> 4 years ago			`go 1.16`
Move Linux client & common packages into a public repo. 5 years ago
			`require (`
net/tshttpproxy: add start of Kerberos Negotiate auth to proxies on Windows For now only used by a new cmd/tailscale debug --get-url subcommand. Not yet wired up to the places making HTTP requests. Updates tailscale/corp#583 4 years ago			`github.com/alexbrainman/sspi v0.0.0-20180613141037-e580b900e9f5`
cmd/tsshd: add basic SSH server 5 years ago			`github.com/anmitsu/go-shlex v0.0.0-20161002113705-648efa622239 // indirect`
wgengine: don't create duplicate iptables rules on Linux, clean up Fixes #131 Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com> 5 years ago			`github.com/coreos/go-iptables v0.4.5`
cmd/tsshd: add basic SSH server 5 years ago			`github.com/flynn/go-shlex v0.0.0-20150515145356-3f9db97f8568 // indirect`
control/controlclient: sign RegisterRequest (#1549) control/controlclient: sign RegisterRequest Some customers wish to verify eligibility for devices to join their tailnets using machine identity certificates. TLS client certs could potentially fulfill this role but the initial customer for this feature has technical requirements that prevent their use. Instead, the certificate is loaded from the Windows local machine certificate store and uses its RSA public key to sign the RegisterRequest message. There is room to improve the flexibility of this feature in future and it is currently only tested on Windows (although Darwin theoretically works too), but this offers a reasonable starting place for now. Updates tailscale/coral#6 Signed-off-by: Adrian Dewhurst <adrian@tailscale.com> 4 years ago			`github.com/github/certstore v0.1.0`
cmd/tsshd: add basic SSH server 5 years ago			`github.com/gliderlabs/ssh v0.2.2`
wgengine/router: restore /etc/resolv.conf after tailscale down is called This change is to restore /etc/resolv.conf after tailscale down is called. This is done by setting the dns.Manager before errors occur. Error collection is also added. Fixes #723 4 years ago			`github.com/go-multierror/multierror v1.0.2`
Move Linux client & common packages into a public repo. 5 years ago			`github.com/go-ole/go-ole v1.2.4`
wgengine/router: dns: unify on *BSD, multimode on Linux, Magic DNS (#536) Signed-off-by: Dmytro Shynkevych <dmytro@tailscale.com> 4 years ago			`github.com/godbus/dbus/v5 v5.0.3`
go.mod: bump github.com/mdlayher/netlink to v1.2.0 Signed-off-by: Matt Layher <mdlayher@gmail.com> 4 years ago			`github.com/google/go-cmp v0.5.4`
cmd/mkpkg: add small wrapper around nfpm to build deb/rpm packages. Signed-Off-By: David Anderson <dave@natulte.net> 5 years ago			`github.com/goreleaser/nfpm v1.1.10`
go.mod: bump github.com/mdlayher/netlink, github.com/jsimonetti/rtnetlink Signed-off-by: Matt Layher <mdlayher@gmail.com> 4 years ago			`github.com/jsimonetti/rtnetlink v0.0.0-20210212075122-66c871082f2b`
go.mod: update wireguard-go. Signed-off-by: David Anderson <danderson@tailscale.com> 4 years ago			`github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51`
smallzstd: new package that constructs zstd small encoders/decoders. It's just a config wrapper that passes "use less memory at the expense of compression" parameters by default, so that we don't accidentally construct resource-hungry (de)compressors. Also includes a benchmark that measures the memory cost of the small variants vs. the stock variants. The savings are significant on both compressors (~8x less memory) and decompressors (~1.4x less, not including the savings from the significantly smaller window on the compression side - with those savings included it's more like ~140x smaller). BenchmarkSmallEncoder-8 56174 19354 ns/op 31 B/op 0 allocs/op BenchmarkSmallEncoderWithBuild-8 2900 382940 ns/op 1746547 B/op 36 allocs/op BenchmarkStockEncoder-8 48921 25761 ns/op 286 B/op 0 allocs/op BenchmarkStockEncoderWithBuild-8 426 2630241 ns/op 13843842 B/op 124 allocs/op BenchmarkSmallDecoder-8 123814 9344 ns/op 0 B/op 0 allocs/op BenchmarkSmallDecoderWithBuild-8 41547 27455 ns/op 27694 B/op 31 allocs/op BenchmarkStockDecoder-8 129832 9417 ns/op 1 B/op 0 allocs/op BenchmarkStockDecoderWithBuild-8 25561 51751 ns/op 39607 B/op 92 allocs/op Signed-off-by: David Anderson <danderson@tailscale.com> 4 years ago			`github.com/klauspost/compress v1.10.10`
go.mod: bump github.com/kr/pty to build on openbsd/arm64 $ GOOS=openbsd GOARCH=arm64 go install tailscale.com/cmd/...@latest pkg/mod/github.com/kr/pty@v1.1.4-0.20190131011033-7dc38fb350b1/pty_openbsd.go:24:10: undefined: ptmget pkg/mod/github.com/kr/pty@v1.1.4-0.20190131011033-7dc38fb350b1/pty_openbsd.go:25:34: undefined: ioctl_PTMGET "go mod tidy" did some unrelated work in go.sum, maybe because it was not run with Go 1.16 before. Signed-off-by: Filippo Valsorda <hi@filippo.io> 4 years ago			`github.com/kr/pty v1.1.8`
go.mod: bump github.com/mdlayher/netlink, github.com/jsimonetti/rtnetlink Signed-off-by: Matt Layher <mdlayher@gmail.com> 4 years ago			`github.com/mdlayher/netlink v1.3.2`
ipn/ipnserver: enable systemd-notify support Addresses #964 Still to be done: - Figure out the correct logging lines in util/systemd - Figure out if we need to slip the systemd.Status function anywhere else - Log util/systemd errors? (most of the errors are of the "you cannot do anything about this, but it might be a bad idea to crash the program if it errors" kind) Assistance in getting this over the finish line would help a lot. Signed-off-by: Christine Dodrill <me@christine.website> util/systemd: rename the nonlinux file to appease the magic Signed-off-by: Christine Dodrill <me@christine.website> util/systemd: fix package name Signed-off-by: Christine Dodrill <me@christine.website> util/systemd: fix review feedback from @mdlayher Signed-off-by: Christine Dodrill <me@christine.website> cmd/tailscale{,d}: update depaware manifests Signed-off-by: Christine Dodrill <me@christine.website> util/systemd: use sync.Once instead of func init Signed-off-by: Christine Dodrill <me@christine.website> control/controlclient: minor review feedback fixes Signed-off-by: Christine Dodrill <me@christine.website> {control,ipn,systemd}: fix review feedback Signed-off-by: Christine Dodrill <me@christine.website> review feedback fixes Signed-off-by: Christine Dodrill <me@christine.website> ipn: fix sprintf call Signed-off-by: Christine Dodrill <me@christine.website> ipn: make staticcheck less sad Signed-off-by: Christine Dodrill <me@christine.website> ipn: print IP address in connected status Signed-off-by: Christine Dodrill <me@christine.website> ipn: review feedback Signed-off-by: Christine Dodrill <me@christine.website> final fixups Signed-off-by: Christine Dodrill <me@christine.website> 4 years ago			`github.com/mdlayher/sdnotify v0.0.0-20200625151349-e4a4f32afc4a`
wgengine/tsdns: local DNS server for testing Signed-off-by: Dmytro Shynkevych <dmytro@tailscale.com> 4 years ago			`github.com/miekg/dns v1.1.30`
Move Linux client & common packages into a public repo. 5 years ago			`github.com/pborman/getopt v0.0.0-20190409184431-ee0cd42419d3`
cmd/tailscale: switch to an ffcli based CLI. Two commands for now, `up` and `netcheck`. The commands and the flags they take will change a bunch in the future, but this is good enough to launch on parity with relaynode. Signed-Off-By: David Anderson <dave@natulte.net> 5 years ago			`github.com/peterbourgon/ff/v2 v2.0.0`
wgengine/netstack: use inet.af/netstack, remove 64-bit only limitation This reverts the revert commit 84aba349d9a8d4e43585856c8155385f2569d35a. And changes us to use inet.af/netstack. Updates #1518 Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com> 4 years ago			`github.com/pkg/errors v0.9.1 // indirect`
ipn: mock controlclient.Client; big ipn.Backend state machine test. A very long unit test that verifies the way the controlclient and ipn.Backend interact. This is a giant sequential test of the state machine. The test passes, but only because it's asserting all the wrong behaviour. I marked all the behaviour I think is wrong with BUG comments, and several additional test opportunities with TODO. Note: the new test supercedes TestStartsInNeedsLoginState, which was checking for incorrect behaviour (although the new test still checks for the same incorrect behaviour) and assumed .Start() would converge before returning, which it happens to do, but only for this very specific case, for the current implementation. You're supposed to wait for the notifications. Updates: tailscale/corp#1660 Signed-off-by: Avery Pennarun <apenwarr@tailscale.com> 4 years ago			`github.com/stretchr/testify v1.4.0`
go.mod: upgrade depaware version Signed-off-by: Josh Bleecher Snyder <josh@tailscale.com> 4 years ago			`github.com/tailscale/depaware v0.0.0-20201214215404-77d1e9757027`
go.mod: update wireguard-go. Signed-off-by: David Anderson <danderson@tailscale.com> 4 years ago			`github.com/tailscale/wireguard-go v0.0.0-20210429195722-6cd106ab1339`
netcheck: DERP latency over HTTPS when UDP is blocked * netcheck: DERP letency over HTTPS when UDP failed Updates #207 Signed-off-by: Zijie Lu <zijie@tailscale.com> * netcheck: async DERP latency check over HTTPS Updates #207 Signed-off-by: Zijie Lu <zijie@tailscale.com> * netcheck: DERP latency check over HTTPS: fix concurrent map Updates #207 Signed-off-by: Zijie Lu <zijie@tailscale.com> * netcheck: DERP latency check over HTTPS: some improvements Updates #207 Signed-off-by: Zijie Lu <zijie@tailscale.com> * netcheck: DERP latency check over HTTPS: use timeout context Updates #207 Signed-off-by: Zijie Lu <zijie@tailscale.com> * netcheck: DERP latency check over HTTPS: use report mutex Updates #207 Signed-off-by: Zijie Lu <zijie@tailscale.com> * netcheck: DERP latency check over HTTPS if UDP is BLOCKED Updates #207 Signed-off-by: Zijie Lu <zijie@tailscale.com> * netcheck: DERP latency check over HTTPS: new function measureHTTPSLatency Updates #207 Signed-off-by: Zijie Lu <zijie@tailscale.com> 5 years ago			`github.com/tcnksm/go-httpstat v0.2.0`
cmd/tailscale: add status subcommand Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com> 5 years ago			`github.com/toqueteos/webbrowser v1.2.0`
tstime: add Parse3339B, for byte slices Use go4.org/mem for memory safety. A slight performance hit, but a huge performance win for clients who start with a []byte. The perf hit is due largely to the MapHash call, which adds ~25ns. That is necessary to keep the fast path allocation-free. name old time/op new time/op delta GoParse3339/Z-8 281ns ± 1% 283ns ± 2% ~ (p=0.366 n=9+9) GoParse3339/TZ-8 509ns ± 0% 510ns ± 1% ~ (p=0.059 n=9+9) GoParse3339InLocation-8 330ns ± 1% 330ns ± 0% ~ (p=0.802 n=10+6) Parse3339/Z-8 69.3ns ± 1% 74.4ns ± 1% +7.45% (p=0.000 n=9+10) Parse3339/TZ-8 110ns ± 1% 140ns ± 3% +27.42% (p=0.000 n=9+10) ParseInt-8 8.20ns ± 1% 8.17ns ± 1% ~ (p=0.452 n=9+9) name old alloc/op new alloc/op delta GoParse3339/Z-8 0.00B 0.00B ~ (all equal) GoParse3339/TZ-8 160B ± 0% 160B ± 0% ~ (all equal) GoParse3339InLocation-8 0.00B 0.00B ~ (all equal) Parse3339/Z-8 0.00B 0.00B ~ (all equal) Parse3339/TZ-8 0.00B 0.00B ~ (all equal) name old allocs/op new allocs/op delta GoParse3339/Z-8 0.00 0.00 ~ (all equal) GoParse3339/TZ-8 3.00 ± 0% 3.00 ± 0% ~ (all equal) GoParse3339InLocation-8 0.00 0.00 ~ (all equal) Parse3339/Z-8 0.00 0.00 ~ (all equal) Parse3339/TZ-8 0.00 0.00 ~ (all equal) Signed-off-by: Josh Bleecher Snyder <josh@tailscale.com> 4 years ago			`go4.org/mem v0.0.0-20201119185036-c04c5a6ff174`
go.mod: update golang.org/x/{crypto,sync,sys,term,time} These ones don't have large dependency trees. Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com> 4 years ago			`golang.org/x/crypto v0.0.0-20210317152858-513c2a44f670`
			`golang.org/x/net v0.0.0-20210226172049-e18ecbb05110`
			`golang.org/x/sync v0.0.0-20210220032951-036812b2e83c`
go.mod: update wireguard-go again To pick up https://go-review.googlesource.com/c/sys/+/307129. Signed-off-by: Josh Bleecher Snyder <josh@tailscale.com> 4 years ago			`golang.org/x/sys v0.0.0-20210403161142-5e06dd20ab57`
go.mod: update golang.org/x/{crypto,sync,sys,term,time} These ones don't have large dependency trees. Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com> 4 years ago			`golang.org/x/term v0.0.0-20210317153231-de623e64d2a6`
			`golang.org/x/time v0.0.0-20210220033141-f8bda1e9f3ba`
Revert "wgengine/netstack: update gvisor to remove 64-bit only limitation" Breaks our corp repo due to gRPC dependency hell. This reverts commit d42f8b7f9a29a288058a03ebdf740e11b843bf26. 4 years ago			`golang.org/x/tools v0.0.0-20201211185031-d93e913c1a58`
go.mod: update some deps to get past a wireguard-windows checkptr fix 4 years ago			`golang.zx2c4.com/wireguard/windows v0.1.2-0.20201113162609-9b85be97fdf8`
wgengine/netstack: use inet.af/netstack, remove 64-bit only limitation This reverts the revert commit 84aba349d9a8d4e43585856c8155385f2569d35a. And changes us to use inet.af/netstack. Updates #1518 Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com> 4 years ago			`gopkg.in/yaml.v2 v2.2.8 // indirect`
Revert "wgengine/netstack: update gvisor to remove 64-bit only limitation" Breaks our corp repo due to gRPC dependency hell. This reverts commit d42f8b7f9a29a288058a03ebdf740e11b843bf26. 4 years ago			`honnef.co/go/tools v0.1.0`
wgengine/filter: use IPSet for localNets instead of prefixes. Part of #1177, preparing for doing fancier set operations on the allowed local nets. Signed-off-by: David Anderson <danderson@tailscale.com> 4 years ago			`inet.af/netaddr v0.0.0-20210222205655-a1ec2b7b8c44`
wgengine/netstack: use inet.af/netstack, remove 64-bit only limitation This reverts the revert commit 84aba349d9a8d4e43585856c8155385f2569d35a. And changes us to use inet.af/netstack. Updates #1518 Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com> 4 years ago			`inet.af/netstack v0.0.0-20210317161235-a1bf4e56ef22`
go.mod: update peercred Adds FreeBSD support. Signed-off-by: Denton Gentry <dgentry@tailscale.com> 4 years ago			`inet.af/peercred v0.0.0-20210302202138-56e694897155`
version: add CmdName func for future use by logpolicy Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com> Change-Id: I02a7c907844f71242ef06ed097f2a92ece7ae091 5 years ago			`rsc.io/goversion v1.2.0`
Move Linux client & common packages into a public repo. 5 years ago			`)`
control/controlclient: sign RegisterRequest (#1549) control/controlclient: sign RegisterRequest Some customers wish to verify eligibility for devices to join their tailnets using machine identity certificates. TLS client certs could potentially fulfill this role but the initial customer for this feature has technical requirements that prevent their use. Instead, the certificate is loaded from the Windows local machine certificate store and uses its RSA public key to sign the RegisterRequest message. There is room to improve the flexibility of this feature in future and it is currently only tested on Windows (although Darwin theoretically works too), but this offers a reasonable starting place for now. Updates tailscale/coral#6 Signed-off-by: Adrian Dewhurst <adrian@tailscale.com> 4 years ago
			`replace github.com/github/certstore => github.com/cyolosecurity/certstore v0.0.0-20200922073901-ece7f1d353c2`