wgengine/magicsock: don't peer relay if NodeAttrOnlyTCP443 is set (#16517)

Updates tailscale/corp#30138 Signed-off-by: Jordan Whited <jordan@tailscale.com>
5 months ago · 6a0fad1e10
parent ae8641735d
commit 6a0fad1e10
1 changed files with 1 additions and 0 deletions
--- a/wgengine/magicsock/magicsock.go
+++ b/wgengine/magicsock/magicsock.go
@ -2704,6 +2704,7 @@ func (c *Conn) onNodeViewsUpdate(update NodeViewsUpdate) {

 	relayClientEnabled := update.SelfNode.Valid() &&
 		!update.SelfNode.HasCap(tailcfg.NodeAttrDisableRelayClient) &&
+		!update.SelfNode.HasCap(tailcfg.NodeAttrOnlyTCP443) &&
 		envknob.UseWIPCode()

 	c.mu.Lock()