You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/net
Aaron Klotz 4d5d669cd5 net/dns: unconditionally write NRPT rules to local settings
We were being too aggressive when deciding whether to write our NRPT rules
to the local registry key or the group policy registry key.

After once again reviewing the document which calls itself a spec
(see issue), it is clear that the presence of the DnsPolicyConfig subkey
is the important part, not the presence of values set in the DNSClient
subkey. Furthermore, a footnote indicates that the presence of
DnsPolicyConfig in the GPO key will always override its counterpart in
the local key. The implication of this is important: we may unconditionally
write our NRPT rules to the local key. We copy our rules to the policy
key only when it contains NRPT rules belonging to somebody other than us.

Fixes https://github.com/tailscale/corp/issues/19071

Signed-off-by: Aaron Klotz <aaron@tailscale.com>
2 years ago
..
art all: cleanup unused code, part 2 (#10670) 2 years ago
connstats net/connstats: exclude traffic with internal Tailscale service (#7904) 3 years ago
dns net/dns: unconditionally write NRPT rules to local settings 2 years ago
dnscache util/cmpx: delete now that we're using Go 1.22 2 years ago
dnsfallback net/dnsfallback: add singleflight to recursive resolver 2 years ago
flowtrack all: update copyright and license headers 3 years ago
interfaces net/interfaces: fix test hang on Darwin 2 years ago
ktimeout net/ktimeout: add a package to set TCP user timeout 2 years ago
memnet net/memnet: export the network name (#9111) 2 years ago
netaddr all: update copyright and license headers 3 years ago
netcheck net/netcheck,wgengine/magicsock: align DERP frame receive time heuristics 2 years ago
neterror net/neterror, wgengine/magicsock: use UDP GSO and GRO on Linux (#7791) 3 years ago
netkernelconf client/tailscale,ipn/{ipnlocal,localapi}: check UDP GRO config (#10071) 2 years ago
netknob all: update copyright and license headers 3 years ago
netmon net/netmon: when a new network is added, trigger netmon update (#10840) 2 years ago
netns net/{interfaces,netmon}: remove "interesting", EqualFiltered API 2 years ago
netstat net/{netns,netstat}: use new x/sys/cpu.IsBigEndian 3 years ago
netutil health: warn about reverse path filtering and exit nodes 2 years ago
packet net/packet: allow more ICMP errors 2 years ago
ping net/ping: fix ICMP echo code field to 0 2 years ago
portmapper tailcfg, ipn/ipnlocal, wgengine/magicsock: add only-tcp-443 node attr 2 years ago
proxymux all: cleanup unused code, part 1 (#10661) 2 years ago
routetable net/routetable: increase route limit used by the test 2 years ago
socks5 net/socks5: add password auth support 3 years ago
sockstats net/dns: retry forwarder requests over TCP 2 years ago
speedtest all: update copyright and license headers 3 years ago
stun wgengine/magicsock, types/nettype, etc: finish ReadFromUDPAddrPort netip migration 3 years ago
stunserver cmd/{derper,stund},net/stunserver: add standalone stun server 2 years ago
tcpinfo net/tcpinfo: add package to allow fetching TCP information 2 years ago
tlsdial cmd/tailscale/cli: make netcheck run even if machine lacks TLS certs 2 years ago
tsaddr all: remove LenIter, use Go 1.22 range-over-int instead 2 years ago
tsdial net/tsdial: partially fix "tailscale nc" (UserDial) on macOS 2 years ago
tshttpproxy net/tshttpproxy: log when we're using a proxy 2 years ago
tstun net/tstun: use gaissmai/bart instead of tempfork/device 2 years ago
wsconn net/wsconn: accept a remote addr string and plumb it through 2 years ago