You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/ipn
Tom DNetto 3496d62ed3 ipn/ipnlocal: add empty address to the app-connector localNets set
App connectors handle DNS requests for app domains over PeerAPI,
but a safety check verifies the requesting peer has at least permission
to send traffic to 0.0.0.0:53 (or 2000:: for IPv6) before handling the DNS
request. The correct filter rules are synthesized by the coordination server
and sent down, but the address needs to be part of the 'local net' for the
filter package to even bother checking the filter rules, so we set them here.
See: https://github.com/tailscale/corp/issues/11961 for more information.

Signed-off-by: Tom DNetto <tom@tailscale.com>
Updates: ENG-2405
2 years ago
..
conffile ipn/{conffile,ipnlocal}: start booting tailscaled from a config file w/ auth key 2 years ago
ipnauth ipn/ipnauth: improve the Windows token administrator check 2 years ago
ipnlocal ipn/ipnlocal: add empty address to the app-connector localNets set 2 years ago
ipnserver ipn/localapi: require root or sudo+operator access for SetServeConfig (#10142) 2 years ago
ipnstate client/web: restrict full management client behind browser sessions 2 years ago
localapi ipn/localapi: require root or sudo+operator access for SetServeConfig (#10142) 2 years ago
policy ipn: prefer allow/denylist terminology 3 years ago
store cmd/k8s-operator,ipn/store/kubestore: patch secrets instead of updating 2 years ago
backend.go cmd/tailscale,ipn/ipnlocal: print debug component names 2 years ago
conf.go ipn: add user pref for running web client 2 years ago
doc.go all: update copyright and license headers 3 years ago
fake_test.go all: update copyright and license headers 3 years ago
ipn_clone.go ipn: introduce app connector advertisement preference and flags 2 years ago
ipn_test.go net/packet: split off checksum munging into different pkg 2 years ago
ipn_view.go ipn: introduce app connector advertisement preference and flags 2 years ago
prefs.go ipn: introduce app connector advertisement preference and flags 2 years ago
prefs_test.go ipn: introduce app connector advertisement preference and flags 2 years ago
serve.go ipn/localapi: require local Windows admin to set serve path (#9969) 2 years ago
serve_test.go ipn/localapi: require local Windows admin to set serve path (#9969) 2 years ago
store.go ipn: avoid useless no-op WriteState calls 2 years ago
store_test.go ipn: avoid useless no-op WriteState calls 2 years ago