You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/cmd
Brad Fitzpatrick 58abae1f83 net/dns/{publicdns,resolver}: add NextDNS DoH support
NextDNS is unique in that users create accounts and then get
user-specific DNS IPs & DoH URLs.

For DoH, the customer ID is in the URL path.

For IPv6, the IP address includes the customer ID in the lower bits.

For IPv4, there's a fragile "IP linking" mechanism to associate your
public IPv4 with an assigned NextDNS IPv4 and that tuple maps to your
customer ID.

We don't use the IP linking mechanism.

Instead, NextDNS is DoH-only. Which means using NextDNS necessarily
shunts all DNS traffic through 100.100.100.100 (programming the OS to
use 100.100.100.100 as the global resolver) because operating systems
can't usually do DoH themselves.

Once it's in Tailscale's DoH client, we then connect out to the known
NextDNS IPv4/IPv6 anycast addresses.

If the control plane sends the client a NextDNS IPv6 address, we then
map it to the corresponding NextDNS DoH with the same client ID, and
we dial that DoH server using the combination of v4/v6 anycast IPs.

Updates #2452

Change-Id: I3439d798d21d5fc9df5a2701839910f5bef85463
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2 years ago
..
addlicense cmd/addlicense: add command to add licenseheaders to generated code 3 years ago
cloner cmd/{cloner,viewer}: add support for map values with pointers 2 years ago
derper cmd/derper: filter out useless HTTP error logs (#5563) 2 years ago
derpprobe net/stun: convert to use net/netip.AddrPort 2 years ago
gitops-pusher cmd/gitops-pusher: standardize hujson before posting to validate (#5525) 2 years ago
hello net/netaddr: start migrating to net/netip via new netaddr adapter package 2 years ago
mkpkg cmd/mkpkg: use package flag (#4373) 2 years ago
nginx-auth cmd/nginx-auth/nginx-auth: update auth to allow for new domains 2 years ago
printdep Docker: add ALPINE.txt to manage alpine versions 2 years ago
proxy-to-grafana all: gofmt for Go 1.19 2 years ago
speedtest cmd: upgrade to ffcli v3 3 years ago
tailscale cmd/tailscale/cli: add backwards compatibility 'up' processing for legacy client 2 years ago
tailscaled net/dns/{publicdns,resolver}: add NextDNS DoH support 2 years ago
testcontrol all: use any instead of interface{} 2 years ago
tsconnect cmd/tsconnect: temporarily switch to xterm.js fork that handles popup windows 2 years ago
tsshd cmd/tsshd: add a package line to appease gofmt 2 years ago
viewer cmd/viewer: add flag to support Clone generation without Views 2 years ago