7256 Commits (5018683d58acec6fe5166ae7d4decd9023fe75cb)

 

All Branches   

Search

Author	SHA1	Message	Date
David Crawshaw	a6ad3c46e2	magicsock: spray some normal packets after a handshake ... In particular, this is designed to catch the case where a HandshakeInitiation packet is sent out but the intermediate NATs have not been primed, so the packet passes over DERP. In that case, the HandshakeResponse also comes back over DERP, and the connection proceeds via DERP without ever trying to punch through the NAT. With this change, the HandshakeResponse (which was sprayed out and so primed one NAT) triggers an UpdateDst, which triggers the extra spray logic. (For this to work, there has to be an initial supply of packets to send on to a peer for the three seconds following a handshake. The source of these packets is left as a future exercise.) Signed-off-by: David Crawshaw <crawshaw@tailscale.com>	5 years ago
Brad Fitzpatrick	8696b17b5f	wgengine/magicsock: turn off DERP log spamminess by default ... Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
David Anderson	accf868130	cmd/mkpkg: add flags for debian scripts.	5 years ago
Brad Fitzpatrick	f473965ca1	go.sum: update ... Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
Brad Fitzpatrick	7a3b91390b	wgengine/magicsock: fix crash in Send when Endpoint isn't an AddrSet ... Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
David Crawshaw	868cfae84f	wgengine, magicsock: adjust for wireguard-go conn/device package split ... Signed-off-by: David Crawshaw <crawshaw@tailscale.com>	5 years ago
David Crawshaw	8994a59e20	go.mod: update wireguard-go version ... Signed-off-by: David Crawshaw <crawshaw@tailscale.com>	5 years ago
wardn	c51b8c206d	wgengine: resolv.conf spelling corrections ... Signed-off-by: wardn <wardn@users.noreply.github.com>	5 years ago
David Crawshaw	ebc70acac7	go.mod: update wireguard-go version	5 years ago
Brad Fitzpatrick	cc7b9b0dff	control/controlclient: fix priority of DERP server, add comment	5 years ago
Brad Fitzpatrick	3317531021	derp: fix JSON field typo, sort fields to make it easier to see inconsistencies	5 years ago
Brad Fitzpatrick	6cd81d5d1f	derp: add more derp stats for dropped and received packets ... Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
Brad Fitzpatrick	c02f4b5a1f	control/controlclient: add temporary mechanism to force derp on ... Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
Brad Fitzpatrick	525bf1f3d2	wgengine/magicsock: remember fixed port number preference ... So LinkChange events rebind to the same port when possible.	5 years ago
Brad Fitzpatrick	c763901b1a	cmd/derper: provide debug access over port 80 to trusted (tailscale) IPs ... Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
David Anderson	cc44e8a443	cmd/mkpkg: add small wrapper around nfpm to build deb/rpm packages. ... Signed-Off-By: David Anderson <dave@natulte.net>	5 years ago
Brad Fitzpatrick	2612e54ad1	derp, cmd/derper: add debug handlers, stats ... Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
Brad Fitzpatrick	433b917977	interfaces, cmd/tsshd: move interface lookup from tsshd to its own package ... For reuse by derper, etc. Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
Brad Fitzpatrick	37e115834e	cmd/derper: support logging to logtail ... Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
Brad Fitzpatrick	379a3125fd	derp, wgengine/magicsock: support more than just packets from Client.Recv ... Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
Brad Fitzpatrick	88f1cc0c98	derp, cmd/derper: add rate limiting support, add default 5Mbps limit ... Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
Brad Fitzpatrick	1166c34f6c	derp: fix staticcheck warning ... Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
Brad Fitzpatrick	322cb58b14	derp: deflake test I flaked up in earlier change ... I broke an invariant in 11048b8932 (it was even nicely documented then). Also clean up the test a bit from while I was debugging it. Fixes #84 Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
Brad Fitzpatrick	f029c4c82d	derp: change the protocol framing to always include a length ... Addresses one of crawshaw's TODOs. Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
David Anderson	c47f907a27	ipn: use *Prefs rather than Prefs throughout. ... Prefs has become a heavy object with non-memcpy copy semantics. We should not pass such a thing by value. Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
David Anderson	0c55777fed	ipn: temporary support for loading legacy relaynode configs. ... Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
David Crawshaw	4ebc0fa70f	wgengine: incremental update of peers on network map change ... This is the first, and easier, part of incremental wireguard-go reconfiguration. It means that a new node appearing on the network does not cause all existing nodes to re-handshake with the other nodes they are talking to. (This code has been running on hello.ipn.dev for a few weeks and peers have successfully reconnected to it through many network map updates.) Signed-off-by: David Crawshaw <crawshaw@tailscale.com>	5 years ago
Brad Fitzpatrick	11048b8932	derp: add docs on current protocol overview, break accept apart a bit ... Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
Brad Fitzpatrick	79af6054bf	derp: don't start sending keepalives to client until after serverInfo sent ... Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
Brad Fitzpatrick	1155716318	derp: rename some things in the client, add some docs ... Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
Brad Fitzpatrick	4b461c2e77	derp: rename some things in the server, add some docs	5 years ago
Brad Fitzpatrick	d298d5b1f8	wgengine/magicsock: support multiple derp servers, and not just for handshakes ... Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
Martin Baillie	a9bff99a9b	wgengine: add OpenBSD router DNS update handling ... Also removes validated TODO comments. Signed-off-by: Martin Baillie <martin@baillie.email>	5 years ago
David Anderson	5868dd1a77	Lint: remove unused function. ... Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
Avery Pennarun	57bbafde84	cmd/relaynode: drop local --acl-file in favour of central packet filter. ... relaynode itself is not long for this world, deprecated in favour of tailscale/tailscaled. But now that the control server supports central distribution of packet filters, let's actually take advantage of it in a final, backward compatible release of relaynode.	5 years ago
David Anderson	77907a76a3	version: tag redo-generated version as +build redo. ... staticcheck defaults to running with no tags set, which only works if redo hasn't run and generated ver.go. If it has, we end up with a redeclaration conflict. Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
David Anderson	15b4d26d92	logpolicy: automatically figure out paths and filenames. ... The autoselection should pick sensible paths for all of: - Windows (LocalAppData) - Mac (Library/Caches) - Unix user (XDG_CACHE_DIR) - Linux systemd service (CACHE_DIRECTORY) As a last resort, if cache dir lookup fails, plops sufficiently uniquely named files into the current working directory. Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
Avery Pennarun	bec17d05cb	.gitattributes: add a smudge filter for go.mod. ... This is used when we want to do development against a local wireguard-go repository checkout.	5 years ago
Brad Fitzpatrick	f266e2d1eb	version: add CmdName func for future use by logpolicy ... Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com> Change-Id: I02a7c907844f71242ef06ed097f2a92ece7ae091	5 years ago
David Anderson	cf1e386cbd	ipn: move Options.ServerURL into Prefs. ... We can't rely on a frontend to provide a control server URL, so this naturally belongs in server-persisted state. Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
David Crawshaw	45d687e213	wgengine: fix build on linux/freebsd/openbsd/windows ... Signed-off-by: David Crawshaw <crawshaw@tailscale.com>	5 years ago
David Crawshaw	431929c09a	go.mod: fix wireguard-go version	5 years ago
David Crawshaw	d0f697ee07	wgengine: update for wgcfg changes ... Signed-off-by: David Crawshaw <crawshaw@tailscale.com>	5 years ago
David Anderson	c4f6f622f0	tailscaled: remove comment from systemd unit. ... No need to ship TODOs to end user systems. Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
David Anderson	20e6fc1d78	tailscaled: fix systemd unit definition. ... Port number has to be by itself for substitution to work. Disabling the restart rate-limiting has to be in [Unit] not [Service]. Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
David Anderson	5d4b96b8f2	tailscaled: add a systemd unit. ... Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
David Anderson	85ac82c386	tailscaled: default to a sock in current dir, for development. ... Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
David Anderson	76819e7432	tailscaled: call the network interface tailscale0, not ts0. ... Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
David Anderson	4460bd638b	safesocket: simplify API. ... On unix, we want to provide a full path to the desired unix socket. On windows, currently we want to provide a TCP port, but someday we'll also provide a "path-ish" object for a named pipe. For now, simplify the API down to exactly a path and a TCP port. Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
Brad Fitzpatrick	b72e6446e2	cmd/derper: add a basic DERP server ... Mostly Crawshaw's earlier code, refactored a bit. Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago