From 205f822372d203f32b3fb3c7562347770a927181 Mon Sep 17 00:00:00 2001
From: Simon Law <sfllaw@tailscale.com>
Date: Mon, 14 Jul 2025 19:01:02 -0700
Subject: [PATCH] ipn/ipnlocal: check if suggested exit node is online

@nickkyl added an peer.Online check to suggestExitNodeUsingDERP, so it
should also check when running suggestExitNodeUsingTrafficSteering.

Updates tailscale/corp#29966

Signed-off-by: Simon Law <sfllaw@tailscale.com>
---
 ipn/ipnlocal/local.go | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/ipn/ipnlocal/local.go b/ipn/ipnlocal/local.go
index cd1654eb1..9b9bd82b5 100644
--- a/ipn/ipnlocal/local.go
+++ b/ipn/ipnlocal/local.go
@@ -7907,6 +7907,9 @@ func suggestExitNodeUsingTrafficSteering(nb *nodeBackend, prev tailcfg.StableNod
 		if !p.Valid() {
 			return false
 		}
+		if !p.Online().Get() {
+			return false
+		}
 		if allowed != nil && !allowed.Contains(p.StableID()) {
 			return false
 		}