1494 Commits (959285e0c540d996135ed0db970fd88f0f983a30)

Author	SHA1	Message	Date
David Anderson	bfdc8175b1	wgengine/router: add a setting to disable SNAT for subnet routes. ... Part of #320. Signed-off-by: David Anderson <danderson@tailscale.com>	5 years ago
Brad Fitzpatrick	8a3e77fc43	ipn, wgengine/filter: remove exported type aliases	5 years ago
Brad Fitzpatrick	529e2cb31a	ipn: add AllowVersionSkew bool to Notify & Message ... For "tailscale status" on macOS (from separately downloaded cmd/tailscale binary against App Store IPNExtension). (This isn't all of it, but I've had this sitting around uncommitted.)	5 years ago
Sylvain Rabot	74d6ab995d	ipn/ipnstate: improve HTML output ... Signed-off-by: Sylvain Rabot <sylvain@abstraction.fr>	5 years ago
Wendi Yu	0c69b4e00d	Implement rate limiting on log messages (#356) ... Implement rate limiting on log messages Addresses issue #317, where logs can get spammed with the same message nonstop. Created a rate limiting closure on logging functions, which limits the number of messages being logged per second based on format string. To keep memory usage as constant as possible, the previous cache purging at periodic time intervals has been replaced by an LRU that discards the oldest string when the capacity of the cache is reached. Signed-off-by: Wendi Yu <wendi.yu@yahoo.ca>	5 years ago
David Anderson	89af51b84d	wgengine: plumb locally advertised subnet routes. ... With this change, advertising subnet routes configures the firewall correctly. Signed-off-by: David Anderson <danderson@tailscale.com>	5 years ago
Avery Pennarun	108237798d	controlclient and ipn tests: supply --advertise-tags and --advertise-routes. ... This helps validate the server's behaviour when these are present.	5 years ago
Brad Fitzpatrick	fefd7e10dc	types/structs: add structs.Incomparable annotation, use it where applicable ... Shotizam before and output queries: sqlite> select sum(size) from bin where func like 'type..%'; 129067 => 120216	5 years ago
Avery Pennarun	9d1f48032a	cmd/tailscale: add --advertise-tags option. ... These will be used for dynamically changing the identity of a node, so its ACL rights can be different from your own. Note: Not all implemented yet on the server side, but we need this so we can request the tagged rights in the first place. Signed-off-by: Avery Pennarun <apenwarr@tailscale.com>	5 years ago
David Crawshaw	5650f1ecf9	controlclient, ipn: adjust tests for tailscale.com keepalive change	5 years ago
David Crawshaw	c10f90357e	ipn/e2e_test: fix flaky logout state drain	5 years ago
David Anderson	1ac570def7	wgengine/router: split out from wgengine. ... The router implementations are logically separate, with their own API. Signed-off-by: David Anderson <danderson@tailscale.com>	5 years ago
Avery Pennarun	d6c34368e8	ipn/local: differentiate Shields Up from Uninitialized in logs. ... We were printing "Shields Up" when the netmap wasn't initialized yet, which while technically effectively true, turned out to be confusing when trying to debug things. Signed-off-by: Avery Pennarun <apenwarr@tailscale.com>	5 years ago
Avery Pennarun	ced9b4008a	ipn: clear the hostinfo.Services list when prefs.ShieldsUp==true. ... When shields are up, no services are available to connect to, so hide them all. This will also help them disappear from the UI menu on other nodes. Signed-off-by: Avery Pennarun <apenwarr@tailscale.com>	5 years ago
Avery Pennarun	d7429b9a8d	Add prefs.ShieldsUp and --shields-up option. ... This sets a default packet filter that blocks all incoming requests, giving end users more control over who can get into their machine, even if the admin hasn't set any central ACLs. Signed-off-by: Avery Pennarun <apenwarr@tailscale.com>	5 years ago
Avery Pennarun	dbc1f71e5d	ipn/message: fix some message encoding problems. ... - Reset() was not including a Version field, so was getting rejected; the Logout operation no longer happened when the client got disconnected. - Don't crash if we can't decode 0-byte messages, which I suspect might sometimes come through on EOF. Signed-off-by: Avery Pennarun <apenwarr@tailscale.com>	5 years ago
David Anderson	0038223632	tstest: rename from testy. ... Signed-off-by: David Anderson <danderson@tailscale.com>	5 years ago
Brad Fitzpatrick	e1526b796e	ipn: don't listen on the unspecified address in test ... To avoid the Mac firewall dialog of (test) death. See 4521a59f30 which I added to help debug this.	5 years ago
David Crawshaw	d2b7cb1e45	ipn, controlclient: add control.New parameter ... Signed-off-by: David Crawshaw <crawshaw@tailscale.com>	5 years ago
Brad Fitzpatrick	f4c7eb8c44	ipn: revert part of 18017f7630 ... In retrospect I don't trust it and I'm afraid might've caused some Mac flakiness. I'd like more tests here before I work on this. Updates #288	5 years ago
Brad Fitzpatrick	18017f7630	ipn, wgengine/magicsock: be more idle when in Stopped state with no peers ... (Previously as #288, but with some more.) Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
Brad Fitzpatrick	45f2b53aca	all: remove unnecessary trailing newlines in format patterns for consistency ... And document on logger.Logf that it's unnecessary.	5 years ago
Brad Fitzpatrick	3a3b64301e	wgengine: quiet some engine reconfig logging, make more consistent ... Updates #282 Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
Brad Fitzpatrick	b24029717b	ipn: outdent some code in if that's statically always true	5 years ago
David Crawshaw	1747d099e9	ipn: add auth key ... Signed-off-by: David Crawshaw <crawshaw@tailscale.com>	5 years ago
Brad Fitzpatrick	8ca796d144	ipn, ipn/policy: filter portlist to a short list of "interesting" ports ... Adds new package ipn/policy to be shared between node client & control server. Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
David Crawshaw	0590ad68be	controlclient, ipn: adjust tests for authURL semantic changes ... The tests cheat at filling out web forms by directly POSTing to the target. The target for authURLs has changed slightly, the base authURL now redirects the user to the login page. Additionally, the authURL cycle now checks the cookie is set correctly, so we add cookie jars where necessary to pass the cookie through.	5 years ago
Brad Fitzpatrick	a4ef345737	cmd/tailscale: add status subcommand ... Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
Brad Fitzpatrick	f51f18b42b	ipn: move FakeBackend to a test-only file	5 years ago
Brad Fitzpatrick	322499473e	cmd/tailscaled, wgengine, ipn: add /debug/ipn handler with world state ... Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
Avery Pennarun	f53e78e0d5	wgengine: don't lose filter state on filter reconfig. ... We were abandoning the UDP port LRU every time we got a new packet filter from tailcontrol, which caused return packets to suddenly stop arriving.	5 years ago
Avery Pennarun	4336de0d98	ipn/local: don't print packet filter every single time. ... It's extremely noisy right now for domains with complex ACLs.	5 years ago
Brad Fitzpatrick	7740cbd8d9	ipn: call SetNetInfoCallback later, in Start ... It was being called back into ultimately from magicsock before there was a control client. Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
Brad Fitzpatrick	51b669e4bd	ipn: skip tailscaled UDP ports in service list	5 years ago
David Crawshaw	addbdce296	wgengine, ipn: include number of active DERPs in status ... Use this when making the ipn state transition from Starting to Running. This way a network of quiet nodes with no active handshaking will still transition to Active. Signed-off-by: David Crawshaw <crawshaw@tailscale.com>	5 years ago
David Crawshaw	5a0822eefd	controlclient, ipn: fix tests for new control param	5 years ago
Brad Fitzpatrick	e085aec8ef	all: update to wireguard-go API changes ... Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
Brad Fitzpatrick	120273d7f6	portlist: document, clean up, fix an open fd spike, optimize a bit ... I noticed portlist when looking at some profiles and hadn't looked at the code much before. This is a first pass over it. It allocates a fair bit. More love remains, but this does a bit: name old time/op new time/op delta GetList-8 9.92ms ± 8% 9.64ms ±12% ~ (p=0.247 n=10+10) name old alloc/op new alloc/op delta GetList-8 931kB ± 0% 869kB ± 0% -6.70% (p=0.000 n=10+10) name old allocs/op new allocs/op delta GetList-8 4.59k ± 0% 3.69k ± 1% -19.71% (p=0.000 n=10+10) Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
Brad Fitzpatrick	42e98d4edc	Quiet two little log annoyances.	5 years ago
Avery Pennarun	b23cb11eaf	ipn: Prefs.String(): print the current derp setting.	5 years ago
David Anderson	aeb88864e0	ipn: don't clobber netinfo in Start().	5 years ago
Avery Pennarun	b4897e7de8	controlclient/netmap: write our own b.ConciseDiffFrom(a) function. ... This removes the need for go-cmp, which is extremely bloaty so we had to leave it out of iOS. As a result, we had also left it out of macOS, and so we didn't print netmap diffs at all on darwin-based platforms. Oops. As a bonus, the output format of the new function is way better. Minor oddity: because I used the dumbest possible diff algorithm, the sort order is a bit dumb. We print all "removed" lines and then print all "added" lines, rather than doing the usual diff-like thing of interspersing them. This probably doesn't matter (maybe it's an improvement).	5 years ago
David Crawshaw	57f220656c	ipn: search for ErrStateNotExist with errors.Is ... Signed-off-by: David Crawshaw <crawshaw@tailscale.com>	5 years ago
Brad Fitzpatrick	39c0ae1dba	derp/derpmap: new DERP config package, merge netcheck into magicsock more ... Fixes #153 Updates #162 Updates #163 Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
David Crawshaw	5f2a17482b	ipn: when enforcing defaults, set UsePacketFilter=true ... Signed-off-by: David Crawshaw <crawshaw@tailscale.com>	5 years ago
David Crawshaw	f5e0407e97	ipn: exercise logout in e2e test ... Signed-off-by: David Crawshaw <crawshaw@tailscale.com>	5 years ago
David Crawshaw	1dee36a984	ipn: put e2e login section in its own subtest ... Signed-off-by: David Crawshaw <crawshaw@tailscale.com>	5 years ago
David Crawshaw	66505358c0	ipn: move e2e test skipping into subtests ... Signed-off-by: David Crawshaw <crawshaw@tailscale.com>	5 years ago
David Crawshaw	5562fae9f0	ipn: use NewPrefs in e2e_test ... We weren't setting UsePacketFilter, so the synthetic ping packets used to establish a connection were never being sent. Signed-off-by: David Crawshaw <crawshaw@tailscale.com>	5 years ago
Brad Fitzpatrick	eac62ec5ff	ipn, wgengine/magicsock: add ipn.Prefs.DisableDERP bool ... Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
Brad Fitzpatrick	b27d4c017a	magicsock, wgengine, ipn, controlclient: plumb regular netchecks to map poll ... Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
Brad Fitzpatrick	4cf5ac3060	ipn/ipnserver: remove unnecessary closure parameter	5 years ago
Brad Fitzpatrick	68ff31a0ba	ipn: have NewFileStore try to create directories as needed	5 years ago
Brad Fitzpatrick	06092a3af3	ipn/ipnserver: document potential race, start on test for it	5 years ago
Brad Fitzpatrick	ef1f967ec0	ipn: remove an unnecessary named parameter in doc	5 years ago
Brad Fitzpatrick	657f9593ae	Reduce some logspam.	5 years ago
David Crawshaw	d133339216	ipn: always guard LocalBackend.prefs with mu ... Signed-off-by: David Crawshaw <crawshaw@tailscale.com>	5 years ago
Brad Fitzpatrick	bcf3719b9e	netcheck: add hairpinning detection ... Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
David Crawshaw	cdc10b74f1	ipn: always guard LocalBackend.endpoints with mu ... For #112 Signed-off-by: David Crawshaw <crawshaw@tailscale.com>	5 years ago
David Crawshaw	3425d8d84f	ipn: always guard LocalBackend.engineStatus with mu ... Signed-off-by: David Crawshaw <crawshaw@tailscale.com>	5 years ago
David Crawshaw	e7cdc11654	ipn: always guard LocalBackend.netMapCache with mu ... Signed-off-by: David Crawshaw <crawshaw@tailscale.com>	5 years ago
Brad Fitzpatrick	25797c8c2a	all: rename deep "Copy" methods to conventional Go name "Clone"	5 years ago
Brad Fitzpatrick	14559340ee	Start of netcheck package & including network state in Hostinfo. ... * adds new packet "netcheck" to do the checking of UDP, IPv6, and nearest DERP server, and the Report type for all that (and more in the future, probably pulling in danderson's natprobe) * new tailcfg.NetInfo type * cmd/tailscale netcheck subcommand (tentative name, likely to change/move) to print out the netcheck.Report. Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
Brad Fitzpatrick	eefafad9f8	ipn: fix some mutex/ownership issues ... Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
Brad Fitzpatrick	3988ddc85d	types/logger: add WithPrefix, use it in two places ... Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
Brad Fitzpatrick	758744a4e3	Fix some Hostinfo value usages from the previous commit.	5 years ago
Brad Fitzpatrick	d8de11a01b	control: make Hostinfo accessed by pointer ... Fix potential races in copying aliased slices by value. Also few little doc updates. Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
Brad Fitzpatrick	367ffde21a	ipn: misc cleanup ... Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
David Anderson	c47f907a27	ipn: use *Prefs rather than Prefs throughout. ... Prefs has become a heavy object with non-memcpy copy semantics. We should not pass such a thing by value. Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
David Anderson	0c55777fed	ipn: temporary support for loading legacy relaynode configs. ... Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
David Anderson	cf1e386cbd	ipn: move Options.ServerURL into Prefs. ... We can't rely on a frontend to provide a control server URL, so this naturally belongs in server-persisted state. Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
David Anderson	4460bd638b	safesocket: simplify API. ... On unix, we want to provide a full path to the desired unix socket. On windows, currently we want to provide a TCP port, but someday we'll also provide a "path-ish" object for a named pipe. For now, simplify the API down to exactly a path and a TCP port. Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
David Anderson	47da432991	ipn: handle advertised routes provided by frontend. ... Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
David Anderson	e0c35723a8	ipn: add documentation to the Prefs struct. ... Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
David Anderson	59ba2e6316	ipn: implement Prefs.Equals efficiently. ... Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
David Anderson	a5b84fa921	ipn: add AdvertiseRoutes to Prefs. ... This is a prelude to supporting relaynode's --routes in tailscaled. The daemon needs to remembers routes to advertise, and the CLI needs to be able to change the set of advertised routes. Prefs is the thing used for both of these. Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
David Anderson	a70a91521b	ipn: print the packet filter setting in prefs. ... Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
David Anderson	62fb652eef	cmd/tailscaled: run off internal state autonomously. ... With this change, tailscaled can be restarted and reconnect without interaction from `tailscale`, and `tailscale` is merely there to provide login assistance and adjust preferences. Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
Brad Fitzpatrick	80d5d4bdfe	ipn: fix test breakage from earlier 79295b1138 ... This test is skipped in tailscale/tailscale because it depends on parts that haven't been released yet and was thus overlooked in the git commit 79295b1138 cleanup. Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
Brad Fitzpatrick	2896be60db	Move "logger" package to under types, now that we have it. ... Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
David Anderson	dec5d64593	ipn/ipnserver: remove Options.AllowQuit. ... It was previously used by the MacOS client, but it now does something different. ipnserver should never obey a client's request to exit. Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
Brad Fitzpatrick	747c7d7ce2	types/empty: add Message, stop using mysterious *struct{} ... Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	5 years ago
David Anderson	5f45b7c765	ipn: make LocalBackend.loadStateWithLock easier to follow. ... Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
David Anderson	96fd8b4230	ipn: adjust backend docs a bit more. ... Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
David Anderson	73c0a2bee2	Improve documentation in backend.go. ... Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
David Anderson	f51293a2c7	Lint fixes. ... Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
David Anderson	5bc632271b	Introduce a state store to LocalBackend. ... The store is passed-in by callers of NewLocalBackend and ipnserver.Run, but currently all callers are hardcoded to an in-memory store. The store is unused. Signed-Off-By: David Anderson <dave@natulte.net>	5 years ago
David Anderson	21280ca2d1	Make ipn.Options.Prefs a pointer. ... This is a prelude to making it truly optional, once state management has moved into the backend. For now though, it's still required. This change is just isolating the bubbling-up of the pointerification into other layers. Signed-Off-By: David Anderson <dave@natulte.net>	5 years ago
David Anderson	f6f154193f	Remove LoginFlags from Backend options. ... - It was only used in one currently-unused client. - It's an imperative command, not a configuration setting. - The LoginFlags stuff in controlclient feels like it needs a refactor anyway. I'll put this logic back once ipnd owns its state and Backend commands reflect that. Signed-Off-By: David Anderson <dave@natulte.net>	5 years ago
David Anderson	81eedcd5be	ipnserver: ignore lint error for unused context. ... The linter is strictly correct, but the code is structured this way to avoid variable shadowing problems in the following for loop. The context doesn't leak. Staticcheck is correctly pointing out that this code is hard to follow. However, this chunk of code is in service of enforcing one frontend <> one backend, and we want to remove that limitation. So, we'll just ignore the lint warning until this entire piece of code goes away. Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
Shawn Smith	1ca83fd205	fix typos ... Signed-off-by: Shawn Smith <shawnpsmith@gmail.com>	5 years ago
David Crawshaw	33dfb8999e	controlclient, ipn: update tests for key pointer change ... Signed-off-by: David Crawshaw <crawshaw@tailscale.com>	5 years ago
David Anderson	c3f9f74247	ipn: fix lint complaints in tests. ... Signed-off-by: David Anderson <dave@natulte.net>	5 years ago
Earl Lee	a8d8b8719a	Move Linux client & common packages into a public repo.	5 years ago