You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/ipn
Nick Khyl 272854df41 ipn/ipnlocal: unconfigure wgengine when switching profiles
LocalBackend transitions to ipn.NoState when switching to a different (or new) profile.
When this happens, we should unconfigure wgengine to clear routes, DNS configuration,
firewall rules that block all traffic except to the exit node, etc.

In this PR, we update (*LocalBackend).enterStateLockedOnEntry to do just that.

Fixes #15316
Updates tailscale/corp#23967

Signed-off-by: Nick Khyl <nickk@tailscale.com>
10 months ago
..
auditlog control/controlclient, ipn: add client audit logging (#14950) 11 months ago
conffile ipn/conffile: don't depend on hujson on iOS/Android 1 year ago
desktop various: keep tailscale connected when Always On mode is enabled on Windows 11 months ago
ipnauth control/controlclient, ipn: add client audit logging (#14950) 11 months ago
ipnlocal ipn/ipnlocal: unconfigure wgengine when switching profiles 10 months ago
ipnserver various: keep tailscale connected when Always On mode is enabled on Windows 11 months ago
ipnstate ipn: update AddPeer to include TaildropTarget (#15091) 11 months ago
localapi ipn/{ipnserver,localapi},tsnet: use ipnauth.Self as the actor in tsnet localapi handlers 12 months ago
policy ipn,tailconfig: clean up unreleased and removed app connector service 2 years ago
store ipn/store/kubestore: skip cache for the write replica in cert share mode (#15417) 10 months ago
backend.go ipn: declare NotifyWatchOpt consts without using iota 1 year ago
conf.go ipn: ensure that conffile is source of truth for advertised services. (#15361) 10 months ago
doc.go ipn: generate LoginProfileView and use it instead of *LoginProfile where appropriate 12 months ago
ipn_clone.go ipn: generate LoginProfileView and use it instead of *LoginProfile where appropriate 12 months ago
ipn_test.go all: do not depend on the testing package 2 years ago
ipn_view.go ipn: generate LoginProfileView and use it instead of *LoginProfile where appropriate 12 months ago
prefs.go cmd/tailscale: fix default for `tailscale set --accept-routes` 10 months ago
prefs_test.go types/persist: remove Persist.LegacyFrontendPrivateMachineKey 1 year ago
serve.go tailcfg: add ServiceName 1 year ago
serve_test.go ipn: [serve] warn that foreground funnel won't work if shields are up (#14685) 1 year ago
store.go ipn: add comment about thread-safety to StateStore 2 years ago
store_test.go ipn: avoid useless no-op WriteState calls 3 years ago