tailscale

Commit Graph

Author	SHA1	Message	Date
David Anderson	1e031001db	derp: move write timeout to package constant. Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
David Anderson	dbfc916273	derp: add short queues between reader and writer, drop on overload. This avoids the server blocking on misbehaving or heavily contended clients. We attempt to drop from the head of the queue to keep overall queueing time lower. Also: - fixes server->client keepalives, which weren't happening. - removes read rate-limiter, deferring instead to kernel-level global limiter/fair queuer. Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
Brad Fitzpatrick	e085aec8ef	all: update to wireguard-go API changes Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
Brad Fitzpatrick	8de67844bd	cmd/tailscale: make failure message when tailscaled down less technical	5 years ago
Brad Fitzpatrick	5aafe0ee96	cmd/tailscale: don't crash on too many non-flag args	5 years ago
David Anderson	ea0836dce9	cmd/tailscaled: remove default user/group from systemd.	5 years ago
Brad Fitzpatrick	6c3820e8c4	cmd/tailscaled: rename relaynode reference in defaults file comment	5 years ago
Avery Pennarun	b4897e7de8	controlclient/netmap: write our own b.ConciseDiffFrom(a) function. This removes the need for go-cmp, which is extremely bloaty so we had to leave it out of iOS. As a result, we had also left it out of macOS, and so we didn't print netmap diffs at all on darwin-based platforms. Oops. As a bonus, the output format of the new function is way better. Minor oddity: because I used the dumbest possible diff algorithm, the sort order is a bit dumb. We print all "removed" lines and then print all "added" lines, rather than doing the usual diff-like thing of interspersing them. This probably doesn't matter (maybe it's an improvement).	5 years ago
Brad Fitzpatrick	b9c6d3ceb8	netcheck: work behind UDP-blocked networks again, add tests Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
David Crawshaw	5ad947c761	cmd/derper: set a write timeout Signed-off-by: David Crawshaw <crawshaw@tailscale.com>	5 years ago
Avery Pennarun	509247bf42	tailscale, tailscaled: update safesocket port number. This makes them able to connect to each other on Windows.	5 years ago
Brad Fitzpatrick	5c1e443d34	wgengine/monitor: don't call LinkChange when interfaces look unchanged Basically, don't trust the OS-level link monitor to only tell you interesting things. Sanity check it. Also, move the interfaces package into the net directory now that we have it.	5 years ago
Brad Fitzpatrick	39c0ae1dba	derp/derpmap: new DERP config package, merge netcheck into magicsock more Fixes #153 Updates #162 Updates #163 Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
Martin Baillie	8ae3ba0cf5	wgengine: define default tunname for each platform The device name "tailscale0" will be used for all platforms except for OpenBSD where "tun" is enforced by the kernel. `CreateTUN()` in `wireguard-go` will select the next available "tunX" device name on the OpenBSD system. Signed-off-by: Martin Baillie <martin@baillie.email>	5 years ago
Brad Fitzpatrick	8abdbbdd1f	cmd/derper: also link to /debug/varz	5 years ago
Brad Fitzpatrick	ff6b3c2c38	netcheck: include two more DERP nodes, show more in CLI report	5 years ago
David Anderson	f192c05413	metrics: add a LabelMap type for variables with 1 label dimension. This lets us publish sets of vars that are breakdowns along one dimension in a format that Prometheus and Grafana natively know how to do useful things with. Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
David Anderson	20da44eae3	cmd/mkpkg: support scripts for rpm as well.	5 years ago
Brad Fitzpatrick	e371520cc5	tsweb, derp: add expvar http.Handler for Prometheus's format And add some opinions. Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
David Anderson	21fc5ec371	cmd/mkpkg: support specifying that a package replaces another. Both RPM and Deb require us to specify both Replaces and Conflicts: Conflicts tells them that the packages cannot coexist on the system, Replaces tells them which one to keep.	5 years ago
Brad Fitzpatrick	dd68debd64	cmd/derper: set autocert Email Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
Brad Fitzpatrick	65e7c58aa4	cmd/tailscale, cmd/tailscaled, paths: add paths package for default paths Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
Brad Fitzpatrick	a399ef3dc7	cmd/derper: appease staticcheck	5 years ago
Brad Fitzpatrick	051b6ef141	cmd/derper: accept more LetsEncrypt hostnames without explicit config	5 years ago
Brad Fitzpatrick	bcf3719b9e	netcheck: add hairpinning detection Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
Brad Fitzpatrick	f3c0ea23d9	netcheck, stunner: reduce log spam Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
David Anderson	78654ee1bd	cmd/tailscale: switch to an ffcli based CLI. Two commands for now, `up` and `netcheck`. The commands and the flags they take will change a bunch in the future, but this is good enough to launch on parity with relaynode. Signed-Off-By: David Anderson <dave@natulte.net>	5 years ago
Brad Fitzpatrick	14559340ee	Start of netcheck package & including network state in Hostinfo. * adds new packet "netcheck" to do the checking of UDP, IPv6, and nearest DERP server, and the Report type for all that (and more in the future, probably pulling in danderson's natprobe) * new tailcfg.NetInfo type * cmd/tailscale netcheck subcommand (tentative name, likely to change/move) to print out the netcheck.Report. Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
Brad Fitzpatrick	00ad93ec25	cmd/derper: add a STUN server Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
Brad Fitzpatrick	d8de11a01b	control: make Hostinfo accessed by pointer Fix potential races in copying aliased slices by value. Also few little doc updates. Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
Brad Fitzpatrick	824f825552	tsweb, cmd/derper: move common web/debug stuff from derper to new tsweb Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
David Anderson	accf868130	cmd/mkpkg: add flags for debian scripts.	5 years ago
Brad Fitzpatrick	c763901b1a	cmd/derper: provide debug access over port 80 to trusted (tailscale) IPs Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
David Anderson	cc44e8a443	cmd/mkpkg: add small wrapper around nfpm to build deb/rpm packages. Signed-Off-By: David Anderson <dave@natulte.net>	5 years ago
Brad Fitzpatrick	2612e54ad1	derp, cmd/derper: add debug handlers, stats Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
Brad Fitzpatrick	433b917977	interfaces, cmd/tsshd: move interface lookup from tsshd to its own package For reuse by derper, etc. Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
Brad Fitzpatrick	37e115834e	cmd/derper: support logging to logtail Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
Brad Fitzpatrick	88f1cc0c98	derp, cmd/derper: add rate limiting support, add default 5Mbps limit Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
David Anderson	c47f907a27	ipn: use *Prefs rather than Prefs throughout. Prefs has become a heavy object with non-memcpy copy semantics. We should not pass such a thing by value. Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
David Anderson	0c55777fed	ipn: temporary support for loading legacy relaynode configs. Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
David Anderson	5868dd1a77	Lint: remove unused function. Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
Avery Pennarun	57bbafde84	cmd/relaynode: drop local --acl-file in favour of central packet filter. relaynode itself is not long for this world, deprecated in favour of tailscale/tailscaled. But now that the control server supports central distribution of packet filters, let's actually take advantage of it in a final, backward compatible release of relaynode.	5 years ago
David Anderson	15b4d26d92	logpolicy: automatically figure out paths and filenames. The autoselection should pick sensible paths for all of: - Windows (LocalAppData) - Mac (Library/Caches) - Unix user (XDG_CACHE_DIR) - Linux systemd service (CACHE_DIRECTORY) As a last resort, if cache dir lookup fails, plops sufficiently uniquely named files into the current working directory. Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
David Anderson	cf1e386cbd	ipn: move Options.ServerURL into Prefs. We can't rely on a frontend to provide a control server URL, so this naturally belongs in server-persisted state. Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
David Anderson	c4f6f622f0	tailscaled: remove comment from systemd unit. No need to ship TODOs to end user systems. Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
David Anderson	20e6fc1d78	tailscaled: fix systemd unit definition. Port number has to be by itself for substitution to work. Disabling the restart rate-limiting has to be in [Unit] not [Service]. Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
David Anderson	5d4b96b8f2	tailscaled: add a systemd unit. Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
David Anderson	85ac82c386	tailscaled: default to a sock in current dir, for development. Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
David Anderson	76819e7432	tailscaled: call the network interface tailscale0, not ts0. Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
David Anderson	4460bd638b	safesocket: simplify API. On unix, we want to provide a full path to the desired unix socket. On windows, currently we want to provide a TCP port, but someday we'll also provide a "path-ish" object for a named pipe. For now, simplify the API down to exactly a path and a TCP port. Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
Brad Fitzpatrick	b72e6446e2	cmd/derper: add a basic DERP server Mostly Crawshaw's earlier code, refactored a bit. Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
David Anderson	47da432991	ipn: handle advertised routes provided by frontend. Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
David Anderson	62fb652eef	cmd/tailscaled: run off internal state autonomously. With this change, tailscaled can be restarted and reconnect without interaction from `tailscale`, and `tailscale` is merely there to provide login assistance and adjust preferences. Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
Brad Fitzpatrick	79295b1138	wgengine: simplify, change some signatures * make RouterGen return an error, not take both tunname and tundev * also remove RouteGen taking a wireguard/device.Device; currently unused * remove derp parameter (it'll work differently) * unexport NewUserspaceRouter in per-OS impls, add documented wrapper Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
David Anderson	dec5d64593	ipn/ipnserver: remove Options.AllowQuit. It was previously used by the MacOS client, but it now does something different. ipnserver should never obey a client's request to exit. Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
David Anderson	4796f6fd67	cmd/tailscale: document pump(). Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
David Anderson	47820db381	cmd/tailscale{,d}: rename main file. Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
David Anderson	b0f5751a76	cmd/tailscale: remove statekey for now. Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
David Anderson	5bc632271b	Introduce a state store to LocalBackend. The store is passed-in by callers of NewLocalBackend and ipnserver.Run, but currently all callers are hardcoded to an in-memory store. The store is unused. Signed-Off-By: David Anderson <dave@natulte.net>	5 years ago
David Anderson	21280ca2d1	Make ipn.Options.Prefs a pointer. This is a prelude to making it truly optional, once state management has moved into the backend. For now though, it's still required. This change is just isolating the bubbling-up of the pointerification into other layers. Signed-Off-By: David Anderson <dave@natulte.net>	5 years ago
David Anderson	f6f154193f	Remove LoginFlags from Backend options. - It was only used in one currently-unused client. - It's an imperative command, not a configuration setting. - The LoginFlags stuff in controlclient feels like it needs a refactor anyway. I'll put this logic back once ipnd owns its state and Backend commands reflect that. Signed-Off-By: David Anderson <dave@natulte.net>	5 years ago
David Crawshaw	a631466587	cmd/tsshd: empty file for windows build Signed-off-by: David Crawshaw <david@zentus.com>	5 years ago
Brad Fitzpatrick	745c8c92b1	wgengine: fix windows build for winipcfg-go Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
David Anderson	67c1b2c6ef	cmd/tsshd: fix lint. Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
Martin Baillie	3d5ef74f26	tailscaled: add tunnel name and port flags OpenBSD tunnel names are prefixed with `tun`. Controlling the port allows for deterministic configuration of firewall rules (using `pf` in this case). Signed-off-by: Martin Baillie <martin@baillie.email>	5 years ago
Brad Fitzpatrick	13dc12814e	cmd/tsshd: fix log text	5 years ago
Brad Fitzpatrick	d404f1caed	cmd/tsshd: add basic SSH server	5 years ago
David Anderson	ea11d58e96	debian: fix changelog generation. It seems changelog generation got broken by moving the code between corp and OSS repos, because one of the commit SHAs doesn't have an associated tag. In the interest of fixing the build, and because we're not yet trying to upstream the debian package, I fixed this by allowing hash-based versions to show up in the changelog. This maybe wrong from a debian standards perspective, but for our current point in life it'll work until we learn to do it better. Signed-Off-By: David Anderson <dave@natulte.net>	5 years ago
David Anderson	14af0c4eb3	taillogin: check err in controlclient.New. Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
Brad Fitzpatrick	516a15ee58	cmd: add import comments See https://golang.org/cmd/go/#hdr-Import_path_checking	5 years ago
Earl Lee	a8d8b8719a	Move Linux client & common packages into a public repo.	5 years ago

... 29 30 31 32 33

1621 Commits (1d22265f6951581b491419f32683d1f3c8cb0393)