tailscale

Commit Graph

Author	SHA1	Message	Date
Brad Fitzpatrick	5381437664	logtail, net/portmapper, wgengine/magicsock: use fmt.Appendf Fixes #5206 Change-Id: I490bb92e774ce7c044040537e2cd864fcf1dbe5a Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	2 years ago
Mihai Parparita	4aa88bc2c0	cmd/tsconnect,util/precompress: move precompression to its own package We have very similar code in corp, moving it to util/precompress allows it to be reused. Updates #5133 Signed-off-by: Mihai Parparita <mihai@tailscale.com>	2 years ago
Mihai Parparita	dfcef3382e	cmd/tsconnect: add README with instructions Outlines basic development, build and serving workflows. Signed-off-by: Mihai Parparita <mihai@tailscale.com>	2 years ago
Brad Fitzpatrick	9e5954c598	control/controlclient: fix crash in tests elsewhere when GetNLPublicKey is nil `4001d0bf25` caused tests in another repo to fail with a crash, calling a nil func. This might not be the right fix, but fixes the build. Change-Id: I67263f883c298f307abdd22bc2a30b3393f062e6 Co-authored-by: Maisem Ali <maisem@tailscale.com> Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	2 years ago
Tom DNetto	8cfd775885	tka,types/key: implement direct node-key signatures Signed-off-by: Tom DNetto <tom@tailscale.com>	2 years ago
Tom DNetto	c13fab2a67	tka: add attack-scenario unit tests, defensive checks, resolve TODOs Signed-off-by: Tom DNetto <tom@tailscale.com>	2 years ago
Tom DNetto	4001d0bf25	assorted: plumb tka initialization & network-lock key into tailscaled - A network-lock key is generated if it doesn't already exist, and stored in the StateStore. The public component is communicated to control during registration. - If TKA state exists on the filesystem, a tailnet key authority is initialized (but nothing is done with it for now). Signed-off-by: Tom DNetto <tom@tailscale.com>	2 years ago
Tom DNetto	8d45d7e312	types/key: make NLPublic complement to NLPrivate Forgot that I would need that in control. Oops. Signed-off-by: Tom DNetto <tom@tailscale.com>	2 years ago
Maisem Ali	be5eadbecc	tsnet: log out ephemeral nodes on Close() Signed-off-by: Maisem Ali <maisem@tailscale.com>	2 years ago
Maisem Ali	95d43c54bf	cmd/{cloner,viewer}: add support for map values with pointers Signed-off-by: Maisem Ali <maisem@tailscale.com>	2 years ago
Maisem Ali	26f103473c	cmd/viewer: add support for map of structs without pointers This adds support for fields like `map[string]netaddr.IPPrefix`. Signed-off-by: Maisem Ali <maisem@tailscale.com>	2 years ago
Mihai Parparita	adc5ffea99	cmd/tsconnect: make PeerAPI work JS -> native nodes worked already, tested by exposing a fetch() method to JS (it's Promise-based to be consistent with the native fetch() API). Native nodes -> JS almost worked, we just needed to set the LocalBackend on the userspace netstack. Fixes #5130 Signed-off-by: Mihai Parparita <mihai@tailscale.com>	2 years ago
Brad Fitzpatrick	5f6abcfa6f	all: migrate code from netaddr.FromStdAddr to Go 1.18 With caveat https://github.com/golang/go/issues/53607#issuecomment-1203466984 that then requires a new wrapper. But a simpler one at least. Updates #5162 Change-Id: I0a5265065bfcd7f21e8dd65b2bd74cae90d76090 Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	2 years ago
Brad Fitzpatrick	7c7e23d87a	control/controlclient, tailcfg: add 6 more patchable Node fields [capver 36] Change-Id: Iae997a9a98a5dd841bc41fa91227d5a7dd476a25 Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	2 years ago
Mihai Parparita	52d769d35c	cmd/tsconnect: prefetch main.wasm when serving Avoids waterfalling of requests from the file (its load is triggered from JavaScript). Also has other cleanups to index.html, adding a <title> and moving the <script> to being loaded sooner (but still not delaying page rendering by using the defer attribute). Fixes #5141 Fixes #5135 Signed-off-by: Mihai Parparita <mihai@tailscale.com>	2 years ago
Mihai Parparita	f04bc31820	cmd/tsconnect: add -fast-compression option Changes Gzip and Brotli to optimize for speed instead of size. This signficantly speeds up Brotli, and is useful when iterating locally or running the build during a CI job (where we just care that it can successfully build). Signed-off-by: Mihai Parparita <mihai@tailscale.com>	2 years ago
Mihai Parparita	9a2171e4ea	cmd/tsconnect: make terminal resizable Makes the terminal container DOM node as large as the window (except for the header) via flexbox. The xterm.js terminal is then sized to fit via xterm-addon-fit. Once we have a computed rows/columns size, and we can tell the SSH session of the computed size. Required introducing an IPNSSHSession type to allow the JS to control the SSH session once opened. That alse allows us to programatically close it, which we do when the user closes the window with the session still active. I initially wanted to open the terminal in a new window instead (so that it could be resizable independently of the main window), but xterm.js does not appear to work well in that mode (possibly because it adds an IntersectionObserver to pause rendering when the window is not visible, and it ends up doing that when the parent window is hidden -- see xtermjs/xterm.js@87dca56dee) Fixes #5150 Signed-off-by: Mihai Parparita <mihai@tailscale.com>	2 years ago
Brad Fitzpatrick	8725b14056	all: migrate more code code to net/netip directly Instead of going through the tailscale.com/net/netaddr transitional wrappers. Updates #5162 Change-Id: I3dafd1c2effa1a6caa9b7151ecf6edd1a3fda3dd Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	2 years ago
Maisem Ali	eb32847d85	tailcfg: add CapabilityFileSharingTarget to identify FileTargets This adds the inverse to CapabilityFileSharingSend so that senders can identify who they can Taildrop to. Updates #2101 Signed-off-by: Maisem Ali <maisem@tailscale.com>	2 years ago
Mihai Parparita	9dfcdbf478	.github/workflows: put back CLI in cross-wasm GitHub action Since we're keeping the JS support in the CLI (see https://github.com/tailscale/tailscale/pull/5265#issuecomment-1203078243), make sure it keeps building. Signed-off-by: Mihai Parparita <mihai@tailscale.com>	2 years ago
Mihai Parparita	e846481731	cmd/tailscale/cli: use printf and outln consistently Fix some fmt.Println and fmt.Printf calls that crept in since `5df7ac70d6`. Signed-off-by: Mihai Parparita <mihai@tailscale.com>	2 years ago
Maisem Ali	02a765743e	ssh/tailssh: fix deadlock in expandDelegateURL Also rename it to expandDelegateURLLocked, previously it was trying to acquire the mutex while holding the mutex. Fixes #5235 Signed-off-by: Maisem Ali <maisem@tailscale.com>	2 years ago
Brad Fitzpatrick	e1309e1323	all: require Go 1.19 Updates #5210 Change-Id: I2e950b4776636b4ea89b6566b60e4a87596a3a43 Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	2 years ago
Brad Fitzpatrick	fb82299f5a	wgengine/magicsock: avoid RebindingUDPConn mutex in common read/write case Change-Id: I209fac567326f2e926bace2582dbc67a8bc94c78 Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	2 years ago
Brad Fitzpatrick	116f55ff66	all: gofmt for Go 1.19 Updates #5210 Change-Id: Ib02cd5e43d0a8db60c1f09755a8ac7b140b670be Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	2 years ago
Maisem Ali	a029989aff	types/dnstype: use viewer instead of cloner This was missed when I did the initial viewer work. Signed-off-by: Maisem Ali <maisem@tailscale.com>	2 years ago
Joe Tsai	57275a4912	tsweb: add HTTPError.Header (#5251 ) The Header field allows the server to specify specific headers to set. Example use case: server returns 429 with the "Retry-After" header set. Signed-off-by: Joe Tsai <joetsai@digital-static.net>	2 years ago
Joe Tsai	a794963e2f	tsweb: mark AccessLogRecord fields as omitempty (#5250 ) If the field is the zero value, then avoid serializing the field. This reduces verbosity in server logs. Signed-off-by: Joe Tsai <joetsai@digital-static.net>	2 years ago
Brad Fitzpatrick	5d0e3d379c	go.mod: bump gvisor For https://github.com/google/gvisor/pull/7850 to quiet macOS warnings. Updates #5240 Change-Id: Iaa7abab20485c8ff40e5c9b16013aef4fd297a64 Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	2 years ago
Joe Tsai	b905db7a56	cmd/derper: remove support for logtail logging (#5248 ) There aren't really any useful logs produced by derper. Signed-off-by: Joe Tsai <joetsai@digital-static.net>	2 years ago
Brad Fitzpatrick	357fd85ecf	go.toolchain.rev: bump tailscale.go1.19 commit for mutex slow path metrics: https://github.com/tailscale/go/pull/33 (a maybe temporary experiment) Change-Id: Idba1ef866e2e1764728bdd869c25becccc1051b0 Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	2 years ago
Mihai Parparita	c06758c83b	cmd/tsconnect: allow SSH username to be specified Redoes the UI to be a form, with a username field and a host drop-down. Fixes #5139 Signed-off-by: Mihai Parparita <mihai@tailscale.com>	2 years ago
Tom DNetto	47f91dd732	cmd/tailscale{,d}: update depaware Signed-off-by: Tom DNetto <tom@tailscale.com>	2 years ago
Tom DNetto	023d4e2216	tka,types/key: implement NLPrivate glue for tailnet key authority keys Signed-off-by: Tom DNetto <tom@tailscale.com>	2 years ago
Tom DNetto	7a74466998	shell.nix: update Go toolchain to 1.19 Signed-off-by: Tom DNetto <tom@tailscale.com>	2 years ago
Tom DNetto	44a9b0170b	tka: support processing non-primary forks, scenario-driven tests Signed-off-by: Tom DNetto <tom@tailscale.com>	2 years ago
Maisem Ali	8fd5d3eaf3	tstest: do not error if the there are fewer goroutines than at start This fixes test failures like: ``` resource.go:34: goroutine count: expected 3, got 2 ``` Signed-off-by: Maisem Ali <maisem@tailscale.com>	2 years ago
Tom DNetto	5e61d52f91	tka: implement API surface for generating updates Based on the builder pattern. Signed-off-by: Tom DNetto <tom@tailscale.com>	2 years ago
Brad Fitzpatrick	acc3b7f259	go.mod: bump inet.af/wf, tidy This removes inet.af/netaddr from go.{mod,sum}. Updates #5162 Change-Id: I7121e9fbb96d036cf188c51f0b53731570252d69 Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	2 years ago
Brad Fitzpatrick	f541e00db2	go.toolchain.rev: bump for VERSION file Updates #5210 Change-Id: Ib6db8b010a6a9369a3eda8a86a49e538e376aff6 Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	2 years ago
Brad Fitzpatrick	eae003e56f	ipn/ipnlocal: blend existing host SSH keys + newly-generated types as needed If the host only has RSA, use its RSA + generate ecdsa + ed25519, etc. Perhaps fixes https://twitter.com/colek42c/status/1550554439299244032 and something else that was reported. Change-Id: I88dc475c8e3d95b6f25288ff7664b8e72655fd16 Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	2 years ago
Brad Fitzpatrick	e5176f572e	go.toolchain.rev: switch to Go 1.19rc2+ Switch to Go 1.19rc2 in prep for the Go 1.19 GA release on Tuesday. (We won't be using any Go 1.19 features until then.) Updates #5210 Change-Id: I94fa0ae8f5645fb7579429668f3970c18d1796d8 Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	2 years ago
Brad Fitzpatrick	48e73e147a	logtail,logpolicy: tweak minor cosmetic things Just reading the code again in prep for some alloc reductions. Change-Id: I065226ea794b7ec7144c2b15942d35131c9313a8 Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	2 years ago
Mihai Parparita	ab60f28227	cmd/tsconnect: fix xterm CSS not being imported @import rules need to come first, they are (silently) ignored otherwise. Signed-off-by: Mihai Parparita <mihai@tailscale.com>	2 years ago
Mihai Parparita	7c3f480767	cmd/tsconnect: lint during build step Ensures that TypeScript checks pass before we deploy. Signed-off-by: Mihai Parparita <mihai@tailscale.com>	2 years ago
James Tucker	d5fb852718	build_dist.sh: add --box and --extra-small flag to produce smaller and boxed binaries - `--box` when ./cmd/tailscaled is built with this flag, it builds a "toybox" style binary that includes tailscale and tailscaled. - `--extra-small` strip the output binary and omit some dependencies (currently AWS integration). Signed-off-by: James Tucker <james@tailscale.com>	2 years ago
Mihai Parparita	a3d74c4548	cmd/tsconnect: add basic panic handling The go wasm process exiting is a sign of an unhandled panic. Also add a explicit recover() call in the notify callback, that's where most logic bugs are likely to happen (and they may not be fatal). Also fixes the one panic that was encountered (nill pointer dereference when generating the JS view of the netmap). Fixes #5132 Signed-off-by: Mihai Parparita <mihai@tailscale.com>	2 years ago
Aaron Klotz	4dbdb19c26	net/tshttpproxy: fix incorrect type in Windows implementation, switch to mkwinsyscall, fix memory leak The definition of winHTTPProxyInfo was using the wrong type (uint16 vs uint32) for its first field. I fixed that type. Furthermore, any UTF16 strings returned in that structure must be explicitly freed. I added code to do this. Finally, since this is the second time I've seen type safety errors in this code, I switched the native API calls over to use wrappers generated by mkwinsyscall. I know that would not have helped prevent the previous two problems, but every bit helps IMHO. Updates https://github.com/tailscale/tailscale/issues/4811 Signed-off-by: Aaron Klotz <aaron@tailscale.com>	2 years ago
Aaron Klotz	446d03e108	scripts: update check_license_headers.sh to skip zsyscall_windows.go Signed-off-by: Aaron Klotz <aaron@tailscale.com>	2 years ago
Brad Fitzpatrick	97b8c4fa1b	ipn/store/awsstore: add "ts_omit_aws" build tag to reduce binary size Drops tailscaled from 23M to 21M. Change-Id: I731c542d03113ac94abb695e3c8fcacbc5542712 Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	2 years ago

... 3 4 5 6 7 ...

4481 Commits (1ce0e558a792b792dd8cb24c2724eace759260c5) All Branches Search

4481 Commits (1ce0e558a792b792dd8cb24c2724eace759260c5)

All Branches