You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Irbe Krumina 3af0f526b8 cmd{containerboot,k8s-operator},util/linuxfw: support ExternalName Services (#11802) ... * cmd/containerboot,util/linuxfw: support proxy backends specified by DNS name Adds support for optionally configuring containerboot to proxy traffic to backends configured by passing TS_EXPERIMENTAL_DEST_DNS_NAME env var to containerboot. Containerboot will periodically (every 10 minutes) attempt to resolve the DNS name and ensure that all traffic sent to the node's tailnet IP gets forwarded to the resolved backend IP addresses. Currently: - if the firewall mode is iptables, traffic will be load balanced accross the backend IP addresses using round robin. There are no health checks for whether the IPs are reachable. - if the firewall mode is nftables traffic will only be forwarded to the first IP address in the list. This is to be improved. * cmd/k8s-operator: support ExternalName Services Adds support for exposing endpoints, accessible from within a cluster to the tailnet via DNS names using ExternalName Services. This can be done by annotating the ExternalName Service with tailscale.com/expose: "true" annotation. The operator will deploy a proxy configured to route tailnet traffic to the backend IPs that service.spec.externalName resolves to. The backend IPs must be reachable from the operator's namespace. Updates tailscale/tailscale#10606 Signed-off-by: Irbe Krumina <irbe@tailscale.com>		2 months ago
..
bench	tailcfg, all: use []netip.AddrPort instead of []string for Endpoints	8 months ago
capture	various: add golangci-lint, fix issues (#7905)	1 year ago
filter	all: use Go 1.22 range-over-int	2 months ago
magicsock	wgengine/magicsock: disable portmapper in tunchan-faked tests	2 months ago
netlog	all: use zstdframe where sensible (#11491)	3 months ago
netstack	all: use Go 1.22 range-over-int	2 months ago
router	cmd{containerboot,k8s-operator},util/linuxfw: support ExternalName Services (#11802)	2 months ago
wgcfg	all: use Go 1.22 range-over-int	2 months ago
wgint	wgengine{,/wgint}: add wgint.Peer wrapper type, add to wgengine.Engine	3 months ago
wglog	all: use Go 1.22 range-over-int	2 months ago
winnet	all: update copyright and license headers	1 year ago
mem_ios.go	all: update copyright and license headers	1 year ago
pendopen.go	wgengine: make pendOpen time later, after dup check	3 months ago
userspace.go	wgengine/router: provide explicit hook to signal Android when VPN needs to be reconfigured	2 months ago
userspace_ext_test.go	wgengine/netstack: remove SubnetRouterWrapper	2 months ago
userspace_test.go	all: use Go 1.22 range-over-int	2 months ago
watchdog.go	wgengine{,/wgint}: add wgint.Peer wrapper type, add to wgengine.Engine	3 months ago
watchdog_js.go	all: update copyright and license headers	1 year ago
watchdog_test.go	all: update copyright and license headers	1 year ago
wgengine.go	wgengine{,/wgint}: add wgint.Peer wrapper type, add to wgengine.Engine	3 months ago