tailscale

Commit Graph

Author	SHA1	Message	Date
David Anderson	83b6b06cc4	cmd/tailscale: fix broken build, result of borked stash pop.	4 years ago
David Anderson	3c7791f6bf	cmd/tailscale: remove double negation arguments. --no-snat becomes --snat-subnet-routes --no-single-routes becomes --host-routes Signed-off-by: David Anderson <danderson@tailscale.com>	4 years ago
Brad Fitzpatrick	984a699219	cmd/tailscale: warn to stderr that netcheck -format=json isn't stable	4 years ago
Brad Fitzpatrick	0245bbe97b	Make netcheck handle v6-only interfaces better, faster. Also: * add -verbose flag to cmd/tailscale netcheck * remove some API from the interfaces package * convert some of the interfaces package to netaddr.IP * don't even send IPv4 probes on machines with no IPv4 (or only v4 loopback) * and once three regions have replied, stop waiting for other probes at 2x the slowest duration. Updates #376	4 years ago
Brad Fitzpatrick	a96165679c	cmd/tailscale: add netcheck flags for incremental reports, JSON output	4 years ago
Avery Pennarun	9ff51909a3	router_linux: fix behaviour when switching --netfilter-mode. On startup, and when switching into =off and =nodivert, we were deleting netfilter rules even if we weren't the ones that added them. In order to avoid interfering with rules added by the sysadmin, we have to be sure to delete rules only in the case that we added them in the first place. Signed-off-by: Avery Pennarun <apenwarr@tailscale.com>	4 years ago
Avery Pennarun	85d93fc4e3	cmd/tailscale: make ip_forward warnings more actionable. Let's actually list the file we checked (/proc/sys/net/ipv4/ip_forward). That gives the admin something specific to look for when they get this message. Signed-off-by: Avery Pennarun <apenwarr@tailscale.com>	4 years ago
Avery Pennarun	99aa33469e	cmd/tailscale: be quiet when no interaction or errors are needed. We would print a message about "nothing more to do", which some people thought was an error or warning. Let's only print a message after authenticating if we previously asked for interaction, and let's shorten that message to just "Success," which is what it means. Signed-off-by: Avery Pennarun <apenwarr@tailscale.com>	4 years ago
Dmytro Shynkevych	7508b67c54	cmd/tailscale: expose --enable-derp Signed-off-by: Dmytro Shynkevych <dm.shynk@gmail.com>	4 years ago
Brad Fitzpatrick	b0c10fa610	stun, netcheck: move under net	4 years ago
Brad Fitzpatrick	e6b84f2159	all: make client use server-provided DERP map, add DERP region support Instead of hard-coding the DERP map (except for cmd/tailscale netcheck for now), get it from the control server at runtime. And make the DERP map support multiple nodes per region with clients picking the first one that's available. (The server will balance the order presented to clients for load balancing) This deletes the stunner package, merging it into the netcheck package instead, to minimize all the config hooks that would've been required. Also fix some test flakes & races. Fixes #387 (Don't hard-code the DERP map) Updates #388 (Add DERP region support) Fixes #399 (wgengine: flaky tests) Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	4 years ago
David Anderson	0fe262f093	ipn: plumb NetfilterMode all the way out to the CLI. Signed-off-by: David Anderson <danderson@tailscale.com>	4 years ago
David Anderson	292606a975	wgengine/router: support multiple levels of netfilter involvement. Signed-off-by: David Anderson <danderson@tailscale.com>	4 years ago
David Anderson	bfdc8175b1	wgengine/router: add a setting to disable SNAT for subnet routes. Part of #320. Signed-off-by: David Anderson <danderson@tailscale.com>	4 years ago
David Anderson	8b0be7475b	cmd/tailscale: warn subnet route users if IP forwarding is off. #320 Signed-off-by: David Anderson <danderson@tailscale.com>	4 years ago
David Anderson	ad1cfe8bbe	cmd/tailscale: support IPs or CIDRs in -advertise-routes. Fixes #370. Signed-off-by: David Anderson <danderson@tailscale.com>	4 years ago
Brad Fitzpatrick	529e2cb31a	ipn: add AllowVersionSkew bool to Notify & Message For "tailscale status" on macOS (from separately downloaded cmd/tailscale binary against App Store IPNExtension). (This isn't all of it, but I've had this sitting around uncommitted.)	4 years ago
Zijie Lu	e3559d1c45	cmd/netcheck: better DERP latency checking output Fixes #206 Signed-off-by: Zijie Lu <zijie@tailscale.com>	4 years ago
Avery Pennarun	9d1f48032a	cmd/tailscale: add --advertise-tags option. These will be used for dynamically changing the identity of a node, so its ACL rights can be different from your own. Note: Not all implemented yet on the server side, but we need this so we can request the tagged rights in the first place. Signed-off-by: Avery Pennarun <apenwarr@tailscale.com>	4 years ago
Avery Pennarun	d7429b9a8d	Add prefs.ShieldsUp and --shields-up option. This sets a default packet filter that blocks all incoming requests, giving end users more control over who can get into their machine, even if the admin hasn't set any central ACLs. Signed-off-by: Avery Pennarun <apenwarr@tailscale.com>	4 years ago
Brad Fitzpatrick	73249f8032	netcheck: aggregate spammy logging onto one concise line	4 years ago
David Crawshaw	f8b72d2b5b	cmd/tailscale: add up --authkey flag Signed-off-by: David Crawshaw <crawshaw@tailscale.com>	4 years ago
Brad Fitzpatrick	a4ef345737	cmd/tailscale: add status subcommand Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	4 years ago
Brad Fitzpatrick	8ebee05fbd	cmd/tailscale: remove unnecessary logpolicy/logtail logging	4 years ago
Brad Fitzpatrick	e085aec8ef	all: update to wireguard-go API changes Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	4 years ago
Brad Fitzpatrick	8de67844bd	cmd/tailscale: make failure message when tailscaled down less technical	4 years ago
Brad Fitzpatrick	5aafe0ee96	cmd/tailscale: don't crash on too many non-flag args	4 years ago
Brad Fitzpatrick	b9c6d3ceb8	netcheck: work behind UDP-blocked networks again, add tests Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	4 years ago
Avery Pennarun	509247bf42	tailscale, tailscaled: update safesocket port number. This makes them able to connect to each other on Windows.	4 years ago
Brad Fitzpatrick	39c0ae1dba	derp/derpmap: new DERP config package, merge netcheck into magicsock more Fixes #153 Updates #162 Updates #163 Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	4 years ago
Brad Fitzpatrick	ff6b3c2c38	netcheck: include two more DERP nodes, show more in CLI report	4 years ago
Brad Fitzpatrick	65e7c58aa4	cmd/tailscale, cmd/tailscaled, paths: add paths package for default paths Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	4 years ago
Brad Fitzpatrick	bcf3719b9e	netcheck: add hairpinning detection Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	4 years ago
Brad Fitzpatrick	f3c0ea23d9	netcheck, stunner: reduce log spam Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	4 years ago
David Anderson	78654ee1bd	cmd/tailscale: switch to an ffcli based CLI. Two commands for now, `up` and `netcheck`. The commands and the flags they take will change a bunch in the future, but this is good enough to launch on parity with relaynode. Signed-Off-By: David Anderson <dave@natulte.net>	4 years ago
Brad Fitzpatrick	14559340ee	Start of netcheck package & including network state in Hostinfo. * adds new packet "netcheck" to do the checking of UDP, IPv6, and nearest DERP server, and the Report type for all that (and more in the future, probably pulling in danderson's natprobe) * new tailcfg.NetInfo type * cmd/tailscale netcheck subcommand (tentative name, likely to change/move) to print out the netcheck.Report. Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	4 years ago
David Anderson	c47f907a27	ipn: use *Prefs rather than Prefs throughout. Prefs has become a heavy object with non-memcpy copy semantics. We should not pass such a thing by value. Signed-off-by: David Anderson <dave@natulte.net>	4 years ago
David Anderson	15b4d26d92	logpolicy: automatically figure out paths and filenames. The autoselection should pick sensible paths for all of: - Windows (LocalAppData) - Mac (Library/Caches) - Unix user (XDG_CACHE_DIR) - Linux systemd service (CACHE_DIRECTORY) As a last resort, if cache dir lookup fails, plops sufficiently uniquely named files into the current working directory. Signed-off-by: David Anderson <dave@natulte.net>	4 years ago
David Anderson	cf1e386cbd	ipn: move Options.ServerURL into Prefs. We can't rely on a frontend to provide a control server URL, so this naturally belongs in server-persisted state. Signed-off-by: David Anderson <dave@natulte.net>	4 years ago
David Anderson	4460bd638b	safesocket: simplify API. On unix, we want to provide a full path to the desired unix socket. On windows, currently we want to provide a TCP port, but someday we'll also provide a "path-ish" object for a named pipe. For now, simplify the API down to exactly a path and a TCP port. Signed-off-by: David Anderson <dave@natulte.net>	4 years ago
David Anderson	47da432991	ipn: handle advertised routes provided by frontend. Signed-off-by: David Anderson <dave@natulte.net>	4 years ago
David Anderson	62fb652eef	cmd/tailscaled: run off internal state autonomously. With this change, tailscaled can be restarted and reconnect without interaction from `tailscale`, and `tailscale` is merely there to provide login assistance and adjust preferences. Signed-off-by: David Anderson <dave@natulte.net>	4 years ago
David Anderson	4796f6fd67	cmd/tailscale: document pump(). Signed-off-by: David Anderson <dave@natulte.net>	4 years ago
David Anderson	47820db381	cmd/tailscale{,d}: rename main file. Signed-off-by: David Anderson <dave@natulte.net>	4 years ago
David Anderson	b0f5751a76	cmd/tailscale: remove statekey for now. Signed-off-by: David Anderson <dave@natulte.net>	4 years ago
David Anderson	5bc632271b	Introduce a state store to LocalBackend. The store is passed-in by callers of NewLocalBackend and ipnserver.Run, but currently all callers are hardcoded to an in-memory store. The store is unused. Signed-Off-By: David Anderson <dave@natulte.net>	4 years ago
David Anderson	21280ca2d1	Make ipn.Options.Prefs a pointer. This is a prelude to making it truly optional, once state management has moved into the backend. For now though, it's still required. This change is just isolating the bubbling-up of the pointerification into other layers. Signed-Off-By: David Anderson <dave@natulte.net>	4 years ago
David Anderson	f6f154193f	Remove LoginFlags from Backend options. - It was only used in one currently-unused client. - It's an imperative command, not a configuration setting. - The LoginFlags stuff in controlclient feels like it needs a refactor anyway. I'll put this logic back once ipnd owns its state and Backend commands reflect that. Signed-Off-By: David Anderson <dave@natulte.net>	4 years ago
Brad Fitzpatrick	516a15ee58	cmd: add import comments See https://golang.org/cmd/go/#hdr-Import_path_checking	4 years ago
Earl Lee	a8d8b8719a	Move Linux client & common packages into a public repo.	4 years ago

... 6 7 8 9 10

500 Commits (22238d897b7bb757577d9a7e48431cce7e0ac510)