You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/wgengine
Andrea Gottardo e5f67f90a2
xcode: allow ICMP ping relay on macOS + iOS platforms (#12048)
Fixes tailscale/tailscale#10393
Fixes tailscale/corp#15412
Fixes tailscale/corp#19808

On Apple platforms, exit nodes and subnet routers have been unable to relay pings from Tailscale devices to non-Tailscale devices due to sandbox restrictions imposed on our network extensions by Apple. The sandbox prevented the code in netstack.go from spawning the `ping` process which we were using.

Replace that exec call with logic to send an ICMP echo request directly, which appears to work in userspace, and not trigger a sandbox violation in the syslog.

Signed-off-by: Andrea Gottardo <andrea@gottardo.me>
5 days ago
..
bench ipn/ipnlocal, all: plumb health trackers in tests 2 weeks ago
capture various: add golangci-lint, fix issues (#7905) 1 year ago
filter all: use Go 1.22 range-over-int 1 month ago
magicsock ipnlocal, magicsock: add more description to storing last suggested exit (#11998) 2 weeks ago
netlog wgengine: add exit destination logging enable for wgengine logger (#11952) 3 weeks ago
netstack xcode: allow ICMP ping relay on macOS + iOS platforms (#12048) 5 days ago
router wgengine/router: print Docker warning when stateful filtering is enabled 2 weeks ago
wgcfg tailcfg,all: add/plumb Node.IsJailed 2 weeks ago
wgint wgengine{,/wgint}: add wgint.Peer wrapper type, add to wgengine.Engine 3 months ago
wglog all: use Go 1.22 range-over-int 1 month ago
winnet all: update copyright and license headers 1 year ago
mem_ios.go all: update copyright and license headers 1 year ago
pendopen.go wgengine: make pendOpen time later, after dup check 3 months ago
userspace.go ipn/ipnlocal, all: plumb health trackers in tests 2 weeks ago
userspace_ext_test.go ipn/ipnlocal, all: plumb health trackers in tests 2 weeks ago
userspace_test.go ipn/ipnlocal, all: plumb health trackers in tests 2 weeks ago
watchdog.go ipn/ipnlocal,net/tstun,wgengine: create and plumb jailed packet filter 2 weeks ago
watchdog_js.go all: update copyright and license headers 1 year ago
watchdog_test.go ipn/ipnlocal, all: plumb health trackers in tests 2 weeks ago
wgengine.go ipn/ipnlocal,net/tstun,wgengine: create and plumb jailed packet filter 2 weeks ago