You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/wgengine
Andrew Lytvynov 1d76a3ec38
various: disable stateful filtering by default (#12197)
After some analysis, stateful filtering is only necessary in tailnets
that use `autogroup:danger-all` in `src` in ACLs. And in those cases
users explicitly specify that hosts outside of the tailnet should be
able to reach their nodes. To fix local DNS breakage in containers, we
disable stateful filtering by default.

Updates #12108

Signed-off-by: Andrew Lytvynov <awly@tailscale.com>
(cherry picked from commit c9179bc261)
2 years ago
..
bench ipn/ipnlocal, all: plumb health trackers in tests 2 years ago
capture various: add golangci-lint, fix issues (#7905) 3 years ago
filter all: use Go 1.22 range-over-int 2 years ago
magicsock ipnlocal, magicsock: store last suggested exit node id in local backend (#11959) 2 years ago
netlog wgengine: add exit destination logging enable for wgengine logger (#11952) 2 years ago
netstack ipn/ipnlocal, all: plumb health trackers in tests 2 years ago
router various: disable stateful filtering by default (#12197) 2 years ago
wgcfg tailcfg,all: add/plumb Node.IsJailed 2 years ago
wgint wgengine{,/wgint}: add wgint.Peer wrapper type, add to wgengine.Engine 2 years ago
wglog all: use Go 1.22 range-over-int 2 years ago
winnet all: update copyright and license headers 3 years ago
mem_ios.go all: update copyright and license headers 3 years ago
pendopen.go wgengine: make pendOpen time later, after dup check 2 years ago
userspace.go ipn/ipnlocal, all: plumb health trackers in tests 2 years ago
userspace_ext_test.go ipn/ipnlocal, all: plumb health trackers in tests 2 years ago
userspace_test.go ipn/ipnlocal, all: plumb health trackers in tests 2 years ago
watchdog.go ipn/ipnlocal,net/tstun,wgengine: create and plumb jailed packet filter 2 years ago
watchdog_js.go all: update copyright and license headers 3 years ago
watchdog_test.go ipn/ipnlocal, all: plumb health trackers in tests 2 years ago
wgengine.go ipn/ipnlocal,net/tstun,wgengine: create and plumb jailed packet filter 2 years ago