You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/net
Aaron Klotz 4d5d669cd5 net/dns: unconditionally write NRPT rules to local settings
We were being too aggressive when deciding whether to write our NRPT rules
to the local registry key or the group policy registry key.

After once again reviewing the document which calls itself a spec
(see issue), it is clear that the presence of the DnsPolicyConfig subkey
is the important part, not the presence of values set in the DNSClient
subkey. Furthermore, a footnote indicates that the presence of
DnsPolicyConfig in the GPO key will always override its counterpart in
the local key. The implication of this is important: we may unconditionally
write our NRPT rules to the local key. We copy our rules to the policy
key only when it contains NRPT rules belonging to somebody other than us.

Fixes https://github.com/tailscale/corp/issues/19071

Signed-off-by: Aaron Klotz <aaron@tailscale.com>
7 months ago
..
art all: cleanup unused code, part 2 (#10670) 11 months ago
connstats net/connstats: exclude traffic with internal Tailscale service (#7904) 2 years ago
dns net/dns: unconditionally write NRPT rules to local settings 7 months ago
dnscache util/cmpx: delete now that we're using Go 1.22 10 months ago
dnsfallback net/dnsfallback: add singleflight to recursive resolver 1 year ago
flowtrack all: update copyright and license headers 2 years ago
interfaces net/interfaces: fix test hang on Darwin 9 months ago
ktimeout net/ktimeout: add a package to set TCP user timeout 9 months ago
memnet net/memnet: export the network name (#9111) 1 year ago
netaddr all: update copyright and license headers 2 years ago
netcheck net/netcheck,wgengine/magicsock: align DERP frame receive time heuristics 8 months ago
neterror net/neterror, wgengine/magicsock: use UDP GSO and GRO on Linux (#7791) 2 years ago
netkernelconf client/tailscale,ipn/{ipnlocal,localapi}: check UDP GRO config (#10071) 1 year ago
netknob all: update copyright and license headers 2 years ago
netmon net/netmon: when a new network is added, trigger netmon update (#10840) 10 months ago
netns net/{interfaces,netmon}: remove "interesting", EqualFiltered API 1 year ago
netstat net/{netns,netstat}: use new x/sys/cpu.IsBigEndian 2 years ago
netutil health: warn about reverse path filtering and exit nodes 9 months ago
packet net/packet: allow more ICMP errors 8 months ago
ping net/ping: fix ICMP echo code field to 0 1 year ago
portmapper tailcfg, ipn/ipnlocal, wgengine/magicsock: add only-tcp-443 node attr 8 months ago
proxymux all: cleanup unused code, part 1 (#10661) 11 months ago
routetable net/routetable: increase route limit used by the test 8 months ago
socks5 net/socks5: add password auth support 2 years ago
sockstats net/dns: retry forwarder requests over TCP 1 year ago
speedtest all: update copyright and license headers 2 years ago
stun wgengine/magicsock, types/nettype, etc: finish ReadFromUDPAddrPort netip migration 2 years ago
stunserver cmd/{derper,stund},net/stunserver: add standalone stun server 11 months ago
tcpinfo net/tcpinfo: add package to allow fetching TCP information 1 year ago
tlsdial cmd/tailscale/cli: make netcheck run even if machine lacks TLS certs 1 year ago
tsaddr all: remove LenIter, use Go 1.22 range-over-int instead 9 months ago
tsdial net/tsdial: partially fix "tailscale nc" (UserDial) on macOS 8 months ago
tshttpproxy net/tshttpproxy: log when we're using a proxy 9 months ago
tstun net/tstun: use gaissmai/bart instead of tempfork/device 8 months ago
wsconn net/wsconn: accept a remote addr string and plumb it through 1 year ago