You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/tailcfg
Jonathan Nobels e8d2f96449
ipn/ipnlocal, net/netns: add node cap to disable netns interface binding on netext Apple clients (#17691)
updates tailscale/corp#31571

It appears that on the latest macOS, iOS and tVOS versions, the work
that netns is doing to bind outgoing connections to the default interface (and all
of the trimmings and workarounds in netmon et al that make that work) are
not needed. The kernel is extension-aware and doing nothing, is the right
thing.  This is, however, not the case for tailscaled (which is not a
special process).

To allow us to test this assertion (and where it might break things), we add a
new node cap that turns this behaviour off only for network-extension equipped clients,
making it possible to turn this off tailnet-wide, without breaking any tailscaled
macos nodes.

Signed-off-by: Jonathan Nobels <jonathan@tailscale.com>
3 weeks ago
..
c2ntypes.go ipn/ipnlocal: add a C2N endpoint for fetching a netmap 3 months ago
derpmap.go tailcfg: add DERPRegion.NoMeasureNoHome, deprecate+document Avoid [cap 115] 9 months ago
proto_port_range.go cmd/tailscale/cli,ipn/conffile: add declarative config mode for Services (#17435) 2 months ago
proto_port_range_test.go tailcfg: implement text encoding for ProtoPortRange 2 years ago
tailcfg.go ipn/ipnlocal, net/netns: add node cap to disable netns interface binding on netext Apple clients (#17691) 3 weeks ago
tailcfg_clone.go tailcfg: kill off rest of HairPinning symbols 3 weeks ago
tailcfg_test.go tailcfg: kill off rest of HairPinning symbols 3 weeks ago
tailcfg_view.go tailcfg: kill off rest of HairPinning symbols 3 weeks ago
tka.go tailcfg: add RPC structs for /tka/affected-sigs 3 years ago