You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/util
Irbe Krumina 3af0f526b8
cmd{containerboot,k8s-operator},util/linuxfw: support ExternalName Services (#11802)
* cmd/containerboot,util/linuxfw: support proxy backends specified by DNS name

Adds support for optionally configuring containerboot to proxy
traffic to backends configured by passing TS_EXPERIMENTAL_DEST_DNS_NAME env var
to containerboot.
Containerboot will periodically (every 10 minutes) attempt to resolve
the DNS name and ensure that all traffic sent to the node's
tailnet IP gets forwarded to the resolved backend IP addresses.

Currently:
- if the firewall mode is iptables, traffic will be load balanced
accross the backend IP addresses using round robin. There are
no health checks for whether the IPs are reachable.
- if the firewall mode is nftables traffic will only be forwarded
to the first IP address in the list. This is to be improved.

* cmd/k8s-operator: support ExternalName Services

 Adds support for exposing endpoints, accessible from within
a cluster to the tailnet via DNS names using ExternalName Services.
This can be done by annotating the ExternalName Service with
tailscale.com/expose: "true" annotation.
The operator will deploy a proxy configured to route tailnet
traffic to the backend IPs that service.spec.externalName
resolves to. The backend IPs must be reachable from the operator's
namespace.

Updates tailscale/tailscale#10606

Signed-off-by: Irbe Krumina <irbe@tailscale.com>
1 month ago
..
cache util/cache: fix missing interface methods (#11275) 3 months ago
cibuild all: update copyright and license headers 1 year ago
clientmetric util/clientmetric: allow client metric values to be provided by a function 1 year ago
cloudenv util/cloudenv: add support for DigitalOcean 4 months ago
cmpver util/cmpver: add Less/LessEq helper funcs 3 months ago
codegen all: use Go 1.22 range-over-int 2 months ago
cstruct all: use Go 1.22 range-over-int 2 months ago
ctxkey all: use reflect.TypeFor now available in Go 1.22 (#11078) 4 months ago
deephash all: use Go 1.22 range-over-int 2 months ago
dirwalk all: use tstest.Replace more 1 year ago
dnsname all: use Go 1.22 range-over-int 2 months ago
execqueue control/controlclient,util/execqueue: extract execqueue into a package 5 months ago
expvarx all: use Go 1.22 range-over-int 2 months ago
fastuuid all: use Go 1.22 range-over-int 2 months ago
goroutines util/goroutines: let ScrubbedGoroutineDump get only current stack 11 months ago
groupmember util/groupmember: fail earlier if group doesn't exist, use slices.Contains 7 months ago
hashx all: use Go 1.22 range-over-int 2 months ago
httphdr util/httphdr: add new package for parsing HTTP headers (#9797) 8 months ago
httpm util/httpm: don't run test if .git doesn't exist 6 months ago
jsonutil all: use Go 1.22 range-over-int 2 months ago
limiter all: use Go 1.22 range-over-int 2 months ago
lineread all: update copyright and license headers 1 year ago
linuxfw cmd{containerboot,k8s-operator},util/linuxfw: support ExternalName Services (#11802) 1 month ago
lru all: use Go 1.22 range-over-int 2 months ago
mak various: add golangci-lint, fix issues (#7905) 1 year ago
multierr all: use Go 1.22 range-over-int 2 months ago
must all: update copyright and license headers 1 year ago
nocasemaps all: use Go 1.22 range-over-int 2 months ago
osdiag ipn/local: log OS-specific diagnostic information as JSON (#11700) 1 month ago
osshare all: update copyright and license headers 1 year ago
osuser util/osuser: add unit test for parseGroupIds 1 month ago
pidowner all: use Go 1.22 range-over-int 2 months ago
precompress all: update copyright and license headers 1 year ago
progresstracking ipn/localapi: add support for multipart POST to file-put 2 months ago
quarantine all: update copyright and license headers 1 year ago
race all: use Go 1.22 range-over-int 2 months ago
racebuild all: update copyright and license headers 1 year ago
rands util/rands: add Shuffle and Perm functions with on-stack RNG state 4 months ago
reload util/reload: add new package to handle periodic value loading 2 months ago
ringbuffer all: use Go 1.22 range-over-int 2 months ago
set all: use Go 1.22 range-over-int 2 months ago
singleflight all: use Go 1.22 range-over-int 2 months ago
slicesx all: use Go 1.22 range-over-int 2 months ago
syspolicy util/syspolicy: clean up doc grammar and consistency 2 months ago
sysresources util/sysresources, magicsock: scale DERP buffer based on system memory 1 year ago
systemd all: update copyright and license headers 1 year ago
testenv util/testenv: add new package to hold InTest 10 months ago
topk all: use Go 1.22 range-over-int 2 months ago
truncate util/truncate: support []byte as well (#11614) 2 months ago
uniq all: use Go 1.22 range-over-int 2 months ago
vizerror util/vizerror: add As function to get wrapped Error 1 year ago
winutil all: use Go 1.22 range-over-int 2 months ago
zstdframe all: use Go 1.22 range-over-int 2 months ago