You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/ipn/ipnlocal
Andrew Lytvynov c9179bc261
various: disable stateful filtering by default (#12197)
After some analysis, stateful filtering is only necessary in tailnets
that use `autogroup:danger-all` in `src` in ACLs. And in those cases
users explicitly specify that hosts outside of the tailnet should be
able to reach their nodes. To fix local DNS breakage in containers, we
disable stateful filtering by default.

Updates #12108

Signed-off-by: Andrew Lytvynov <awly@tailscale.com>
2 weeks ago
..
testdata ipn/ipnlocal: fix the path for writing cert files (#7203) 1 year ago
breaktcp_darwin.go cmd/tailscale: add debug commands to break connections 10 months ago
breaktcp_linux.go cmd/tailscale: add debug commands to break connections 10 months ago
c2n.go ipn/ipnlocal,ssh/tailssh: reject c2n /update if SSH conns are active (#11820) 1 month ago
c2n_pprof.go ipn/ipnlocal: add c2n /debug/pprof/allocs endpoint 2 months ago
c2n_test.go util/cmpx: delete now that we're using Go 1.22 4 months ago
cert.go ipn/ipnlocal: remove ancient transition mechanism for https certs 3 months ago
cert_js.go ipn/ipnlocal: add c2n method to check on TLS cert fetch status 7 months ago
cert_test.go all: use Go 1.21 slices, maps instead of x/exp/{slices,maps} 10 months ago
dnsconfig_test.go util/cmpx: delete now that we're using Go 1.22 4 months ago
drive.go ipn/ipnlocal: reuse transport across Taildrive remotes 4 weeks ago
expiry.go ssh/tailssh: use control server time instead of local time 7 months ago
expiry_test.go types/netmap, all: make NetworkMap.SelfNode a tailcfg.NodeView 9 months ago
local.go various: disable stateful filtering by default (#12197) 2 weeks ago
local_test.go ipnlocal, magicsock: add more description to storing last suggested exit (#11998) 3 weeks ago
loglines_test.go ipn/ipnlocal, all: plumb health trackers in tests 3 weeks ago
network-lock.go ipn/{ipnlocal,localapi},wgengine{,/magicsock}: plumb health.Tracker 1 month ago
network-lock_test.go ipn/ipnlocal: plumb health.Tracker into profileManager constructor 4 weeks ago
peerapi.go net/{interfaces,netmon}, all: merge net/interfaces package into net/netmon 1 month ago
peerapi_h2c.go all: update copyright and license headers 1 year ago
peerapi_macios_ext.go net/netmon, add: add netmon.State type alias of interfaces.State 1 month ago
peerapi_test.go ipn/ipnlocal, all: plumb health trackers in tests 3 weeks ago
profiles.go various: disable stateful filtering by default (#12197) 2 weeks ago
profiles_notwindows.go ipn/ipnlocal: fix profile duplication 10 months ago
profiles_test.go various: disable stateful filtering by default (#12197) 2 weeks ago
profiles_windows.go ipn/ipnlocal: set default NoStatefulFiltering in ipn.NewPrefs (#12031) 4 weeks ago
serve.go all: use Go 1.22 range-over-int 2 months ago
serve_test.go ipn/ipnlocal, all: plumb health trackers in tests 3 weeks ago
ssh.go ipnlocal: log failure to get ssh host keys 4 months ago
ssh_stub.go ipnlocal: log failure to get ssh host keys 4 months ago
ssh_test.go ipn/ipnlocal: plumb health.Tracker into profileManager constructor 4 weeks ago
state_test.go control/controlclient: delete unused Client.Login Oauth2Token field 2 weeks ago
taildrop.go ipn/localapi: add support for multipart POST to file-put 2 months ago
web_client.go all: remove LenIter, use Go 1.22 range-over-int instead 3 months ago
web_client_stub.go ipn/ipnlocal: add mutex to webClient struct 7 months ago