You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/wgengine
Charlotte Brandhorst-Satzkorn 449f46c207
wgengine/magicsock: rebind/restun if a syscall.EPERM error is returned (#11711)
We have seen in macOS client logs that the "operation not permitted", a
syscall.EPERM error, is being returned when traffic is attempted to be
sent. This may be caused by security software on the client.

This change will perform a rebind and restun if we receive a
syscall.EPERM error on clients running darwin. Rebinds will only be
called if we haven't performed one specifically for an EPERM error in
the past 5 seconds.

Updates #11710

Signed-off-by: Charlotte Brandhorst-Satzkorn <charlotte@tailscale.com>
2 months ago
..
bench tailcfg, all: use []netip.AddrPort instead of []string for Endpoints 8 months ago
capture various: add golangci-lint, fix issues (#7905) 1 year ago
filter wgengine/filter: add protocol-agnostic packet checker (#10446) 6 months ago
magicsock wgengine/magicsock: rebind/restun if a syscall.EPERM error is returned (#11711) 2 months ago
netlog all: use zstdframe where sensible (#11491) 2 months ago
netstack wgengine/netstack: remove SubnetRouterWrapper 2 months ago
router wgengine/router: don't attempt route cleanup on Synology 2 months ago
wgcfg all: remove LenIter, use Go 1.22 range-over-int instead 3 months ago
wgint wgengine{,/wgint}: add wgint.Peer wrapper type, add to wgengine.Engine 3 months ago
wglog wgengine/wglog: add TS_DEBUG_RAW_WGLOG envknob for raw wg logs 3 months ago
winnet all: update copyright and license headers 1 year ago
mem_ios.go all: update copyright and license headers 1 year ago
pendopen.go wgengine: make pendOpen time later, after dup check 3 months ago
userspace.go wgengine/router: provide explicit hook to signal Android when VPN needs to be reconfigured 2 months ago
userspace_ext_test.go wgengine/netstack: remove SubnetRouterWrapper 2 months ago
userspace_test.go control,tailcfg,wgengine/magicsock: add nodeAttr to enable/disable peer MTU 8 months ago
watchdog.go wgengine{,/wgint}: add wgint.Peer wrapper type, add to wgengine.Engine 3 months ago
watchdog_js.go all: update copyright and license headers 1 year ago
watchdog_test.go all: update copyright and license headers 1 year ago
wgengine.go wgengine{,/wgint}: add wgint.Peer wrapper type, add to wgengine.Engine 3 months ago