You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Jonathan Nobels e8d2f96449 ipn/ipnlocal, net/netns: add node cap to disable netns interface binding on netext Apple clients (#17691) ... updates tailscale/corp#31571 It appears that on the latest macOS, iOS and tVOS versions, the work that netns is doing to bind outgoing connections to the default interface (and all of the trimmings and workarounds in netmon et al that make that work) are not needed. The kernel is extension-aware and doing nothing, is the right thing. This is, however, not the case for tailscaled (which is not a special process). To allow us to test this assertion (and where it might break things), we add a new node cap that turns this behaviour off only for network-extension equipped clients, making it possible to turn this off tailnet-wide, without breaking any tailscaled macos nodes. Signed-off-by: Jonathan Nobels <jonathan@tailscale.com>		2 months ago
..
testdata	ipn/ipnlocal: fix the path for writing cert files (#7203)	3 years ago
breaktcp_darwin.go	cmd/tailscale: add debug commands to break connections	2 years ago
breaktcp_linux.go	cmd/tailscale: add debug commands to break connections	2 years ago
bus.go	ipn/local: add the suggested exit node to the ipn bus (#16748)	5 months ago
bus_test.go	ipn/ipnlocal: add IPN Bus NotifyRateLimit watch bit NotifyRateLimit	1 year ago
c2n.go	control/controlclient,health,ipn/ipnlocal,health: fix deadlock by deleting health reporting	3 months ago
c2n_pprof.go	ipn/ipnlocal, engine: avoid runtime/pprof with two usages of ts_omit_debug	3 months ago
c2n_test.go	tailcfg: kill off rest of HairPinning symbols	2 months ago
captiveportal.go	feature/featuretags: add build tag to remove captive portal detection	4 months ago
cert.go	feature, net/tshttpproxy: pull out support for using proxies as a feature	3 months ago
cert_disabled.go	feature/featuretags, all: add ts_omit_acme to disable TLS cert support	4 months ago
cert_test.go	ipn/ipnlocal, envknob: make it possible to configure the cert client to act in read-only mode (#15250)	10 months ago
dnsconfig_test.go	ipn,net,tsnet,wgengine: make an eventbus mandatory where it is used (#16594)	5 months ago
drive.go	feature/drive: start factoring out Taildrive, add ts_omit_drive build tag	4 months ago
drive_tomove.go	feature/drive: start factoring out Taildrive, add ts_omit_drive build tag	4 months ago
expiry.go	ipn/ipnlocal: use eventbus.SubscribeFunc in expiryManager	3 months ago
expiry_test.go	control/controlclient: introduce eventbus messages instead of callbacks (#16956)	4 months ago
extension_host.go	ipn/ipnlocal: make GetExt work earlier, before extension init	8 months ago
extension_host_test.go	health,ipn/ipnlocal: introduce eventbus in heath.Tracker (#17085)	4 months ago
hwattest.go	Revert "control/controlclient: back out HW key attestation (#17664)" (#17732)	2 months ago
local.go	ipn/ipnlocal, net/netns: add node cap to disable netns interface binding on netext Apple clients (#17691)	2 months ago
local_test.go	ipn/ipnlocal: move vipServiceHash etc to serve.go, out of local.go	2 months ago
loglines_test.go	health,ipn/ipnlocal: introduce eventbus in heath.Tracker (#17085)	4 months ago
netstack.go	ipn/ipnlocal: move last unconditional gvisor import, complete ts_omit_netstack support	4 months ago
network-lock.go	ipn/ipnlocal: skip TKA bootstrap request if Tailnet Lock is unavailable	3 months ago
network-lock_test.go	net/netmon: remove usage of direct callbacks from netmon (#17292)	3 months ago
node_backend.go	ipn/ipnlocal: introduce the concept of client-side-reachability (#17367)	3 months ago
node_backend_test.go	ipn/ipnlocal: introduce the concept of client-side-reachability (#17367)	3 months ago
peerapi.go	feature/featuretags: add features for c2n, peerapi, advertise/use routes/exit nodes	3 months ago
peerapi_drive.go	feature/drive: start factoring out Taildrive, add ts_omit_drive build tag	4 months ago
peerapi_macios_ext.go	net/netmon, add: add netmon.State type alias of interfaces.State	2 years ago
peerapi_test.go	ipn/ipnlocal: fix another racy test (#17472)	3 months ago
prefs_metrics.go	feature/featuretags: add features for c2n, peerapi, advertise/use routes/exit nodes	3 months ago
profiles.go	Revert "control/controlclient: back out HW key attestation (#17664)" (#17732)	2 months ago
profiles_notwindows.go	ipn/ipnlocal: refactor and cleanup profileManager	1 year ago
profiles_test.go	Revert "control/controlclient: back out HW key attestation (#17664)" (#17732)	2 months ago
profiles_windows.go	ipn/ipnlocal: refactor and cleanup profileManager	1 year ago
serve.go	ipn/ipnlocal: move vipServiceHash etc to serve.go, out of local.go	2 months ago
serve_disabled.go	all: add ts_omit_serve, start making tailscale serve/funnel be modular	4 months ago
serve_test.go	ipn: add support for HTTP Redirects (#17594)	2 months ago
ssh.go	ipn/ipnlocal: fix a case where ts_omit_ssh was still linking in x/crypto/ssh	4 months ago
ssh_stub.go	ipn/ipnlocal: fix a case where ts_omit_ssh was still linking in x/crypto/ssh	4 months ago
ssh_test.go	health,ipn/ipnlocal: introduce eventbus in heath.Tracker (#17085)	4 months ago
state_test.go	ipn/ipnlocal: fix state_test data race seen in CI	2 months ago
tailnetlock_disabled.go	all: add ts_omit_tailnetlock as a start of making it build-time modular	4 months ago
web_client.go	util/backoff: rename logtail/backoff package to util/backoff	3 months ago
web_client_stub.go	derp/derpserver: split off derp.Server out of derp into its own package	4 months ago