You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 
Go to file
Brad Fitzpatrick 64ac64fb66 net/tsaddr: use bart in NewContainsIPFunc, add tests, benchmarks
NewContainsIPFunc was previously documented as performing poorly if
there were many netip.Prefixes to search over. As such, we never it used it
in such cases.

This updates it to use bart at a certain threshold (over 6 prefixes,
currently), at which point the bart lookup overhead pays off.

This is currently kinda useless because we're not using it. But now we
can and get wins elsewhere. And we can remove the caveat in the docs.

    goos: darwin
    goarch: arm64
    pkg: tailscale.com/net/tsaddr
                                     │    before    │                after                 │
                                     │    sec/op    │    sec/op     vs base                │
    NewContainsIPFunc/empty-8          2.215n ± 11%   2.239n ±  1%   +1.08% (p=0.022 n=10)
    NewContainsIPFunc/cidr-list-1-8    17.44n ±  0%   17.59n ±  6%   +0.89% (p=0.000 n=10)
    NewContainsIPFunc/cidr-list-2-8    27.85n ±  0%   28.13n ±  1%   +1.01% (p=0.000 n=10)
    NewContainsIPFunc/cidr-list-3-8    36.05n ±  0%   36.56n ± 13%   +1.41% (p=0.000 n=10)
    NewContainsIPFunc/cidr-list-4-8    43.73n ±  0%   44.38n ±  1%   +1.50% (p=0.000 n=10)
    NewContainsIPFunc/cidr-list-5-8    51.61n ±  2%   51.75n ±  0%        ~ (p=0.101 n=10)
    NewContainsIPFunc/cidr-list-10-8   95.65n ±  0%   68.92n ±  0%  -27.94% (p=0.000 n=10)
    NewContainsIPFunc/one-ip-8         4.466n ±  0%   4.469n ±  1%        ~ (p=0.491 n=10)
    NewContainsIPFunc/two-ip-8         8.002n ±  1%   7.997n ±  4%        ~ (p=0.697 n=10)
    NewContainsIPFunc/three-ip-8       27.98n ±  1%   27.75n ±  0%   -0.82% (p=0.012 n=10)
    geomean                            19.60n         19.07n         -2.71%

Updates #12486

Change-Id: I2e2320cc4384f875f41721374da536bab995c1ce
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
5 months ago
.bencher bencher: add config to suppress failures on benchmark regressions. 3 years ago
.github derp/xdp,cmd/xdpderper: initial skeleton (#12390) 5 months ago
appc appc: log how many routes are being written 5 months ago
atomicfile various: add golangci-lint, fix issues (#7905) 2 years ago
chirp all: update copyright and license headers 2 years ago
client ipn/localapi,client/tailscale,cmd/derper: add WhoIs lookup by nodekey, use in derper 5 months ago
clientupdate ipn/ipnlocal,clientupdate: allow auto-updates in contaienrs (#12391) 5 months ago
cmd net/tsaddr: use bart in NewContainsIPFunc, add tests, benchmarks 5 months ago
control various: create a catch-all NRPT rule when "Override local DNS" is enabled on Windows 5 months ago
derp derp/xdp,cmd/xdpderper: initial skeleton (#12390) 5 months ago
disco disco: correct noun for nacl box type in disco docs 11 months ago
docs docs/k8s: fix subnet router manifests (#12305) 6 months ago
doctor net/{interfaces,netmon}, all: merge net/interfaces package into net/netmon 7 months ago
drive safesocket: add ConnectContext 5 months ago
envknob envknob: ensure f is not nil before using it 8 months ago
gokrazy gokrazy: update breakglass with now-upstreamed ec2 change 6 months ago
health health: fix data race in new warnable code 5 months ago
hostinfo hostinfo: use Distro field for distinguishing Windows Server builds 7 months ago
internal/tooldeps various: add golangci-lint, fix issues (#7905) 2 years ago
ipn cmd/viewer,type/views: add MapSlice for maps of slices 5 months ago
jsondb all: update copyright and license headers 2 years ago
k8s-operator cmd/k8s-operator,k8s-operator: allow proxies accept advertized routes. (#12388) 5 months ago
kube kube: fix typo (#12437) 5 months ago
licenses licenses: update license notices 6 months ago
log net/netns, net/dns/resolver, etc: make netmon required in most places 7 months ago
logpolicy safesocket: add ConnectContext 5 months ago
logtail all: use math/rand/v2 more 6 months ago
metrics all: use Go 1.22 range-over-int 7 months ago
net net/tsaddr: use bart in NewContainsIPFunc, add tests, benchmarks 5 months ago
omit cmd/tailscaled, ipn/conffile: support ec2 user-data config file 6 months ago
packages/deb go.mod: upgrade nfpm to v2 (#8786) 1 year ago
paths all: use Go 1.22 range-over-int 7 months ago
portlist all: use Go 1.22 range-over-int 7 months ago
posture xcode/iOS: support serial number collection via MDM on iOS (#11429) 5 months ago
prober cmd/derpprobe: support 'local' derpmap to get derp map via LocalAPI 5 months ago
proxymap wgengine, proxymap: split out port mapping from Engine to new type 1 year ago
publicapi api.md: direct TOC links to new publicapi docs location 6 months ago
release release/dist/qnap: omit .qpkg.codesigning files 7 months ago
safesocket safesocket: add ConnectContext 5 months ago
safeweb safeweb: handle mux pattern collisions more generally (#11801) 7 months ago
scripts derp/xdp,cmd/xdpderper: initial skeleton (#12390) 5 months ago
smallzstd all: use Go 1.22 range-over-int 7 months ago
ssh/tailssh ssh/tailssh: check IsSELinuxEnforcing in tailscaled process 5 months ago
syncs syncs: fix AtomicValue for interface kinds (#11943) 7 months ago
tailcfg cmd/viewer,type/views: add MapSlice for maps of slices 5 months ago
taildrop all: use new AppendEncode methods available in Go 1.22 (#11079) 9 months ago
tempfork cmd/tailscale: add shell tab-completion 7 months ago
tka ipn/ipnlocal: discard node keys that have been rotated out 6 months ago
tool tool/gocross: add debug data to CGO builds 6 months ago
tsconst all: update copyright and license headers 2 years ago
tsd health, all: remove health.Global, finish plumbing health.Tracker 7 months ago
tsnet tsnet: add a new error when HTTPS enabled but MagicDNC Disabled (#12364) 6 months ago
tstest safesocket: add ConnectContext 5 months ago
tstime all: use math/rand/v2 more 6 months ago
tsweb derp/xdp,cmd/xdpderper: initial skeleton (#12390) 5 months ago
types cmd/viewer,type/views: add MapSlice for maps of slices 5 months ago
util util/winutil: update UserProfile to ensure any environment variables in the roaming profile path are expanded 5 months ago
version version: add GitCommitTime to Meta 6 months ago
wf go.mod, all: move away from inet.af domain seized by Taliban 9 months ago
wgengine wgengine/filter: add more benchmarks, make names more explicit 5 months ago
words words: add some fruit with scales (#8460) 6 months ago
.gitattributes .: add .gitattributes entry to use Go hunk-header driver 3 years ago
.gitignore ssh/tailssh: add integration test 7 months ago
.golangci.yml ci: run 'go vet' in golangci-lint; fix errors in tests 12 months ago
ALPINE.txt ALPINE.txt,Dockerfile{.base},build_docker.sh: bump alpine (#10543) 11 months ago
AUTHORS Move Linux client & common packages into a public repo. 5 years ago
CODEOWNERS CODEOWNERS: add the start of an owners file 1 year ago
CODE_OF_CONDUCT.md Add a code of conduct. 5 years ago
Dockerfile Dockerfile: use Go 1.22 9 months ago
Dockerfile.base ALPINE.txt,Dockerfile{.base},build_docker.sh: bump alpine (#10543) 11 months ago
LICENSE all: update tools that manage copyright headers 2 years ago
Makefile ssh/tailssh: fall back to using su when no TTY available on Linux 6 months ago
PATENTS Move Linux client & common packages into a public repo. 5 years ago
README.md go.mod, README.md: use Go 1.22 9 months ago
SECURITY.md Add a SECURITY.md for vulnerability reports. 5 years ago
VERSION.txt VERSION.txt: this is v1.69.0 (#12441) 5 months ago
api.md api.md: direct TOC links to new publicapi docs location 6 months ago
build_dist.sh cmd/tailscale: add shell tab-completion 7 months ago
build_docker.sh cmd/{k8s-nameserver,k8s-operator},k8s-operator: add a kube nameserver, make operator deploy it (#11919) 7 months ago
flake.lock flake.nix: build tailscale with go 1.22 9 months ago
flake.nix go.mod.sri: update SRI hash for go.mod changes 7 months ago
go.mod derp/xdp,cmd/xdpderper: initial skeleton (#12390) 5 months ago
go.mod.sri go.mod.sri: update SRI hash for go.mod changes 7 months ago
go.sum derp/xdp,cmd/xdpderper: initial skeleton (#12390) 5 months ago
go.toolchain.branch go.toolchain.rev: bump to Go 1.22.0 (#11055) 9 months ago
go.toolchain.rev go.toolchain.rev: update to go 1.22.4 (#12365) 5 months ago
gomod_test.go go.mod: add test that replace directives aren't added in oss 1 year ago
header.txt cmd/k8s-operator: operator can create subnetrouter (#9505) 11 months ago
pull-toolchain.sh pull-toolchain.sh: don't run update-flake.sh 2 years ago
shell.nix go.mod.sri: update SRI hash for go.mod changes 7 months ago
staticcheck.conf all: cleanup unused code, part 2 (#10670) 11 months ago
update-flake.sh Code Improvements (#11311) 8 months ago
version-embed.go version: return correct Meta.MajorMinorPatch in non-dev builds 2 years ago
version_test.go go.mod,wgengine/netstack: bump gvisor 10 months ago

README.md

Tailscale

https://tailscale.com

Private WireGuard® networks made easy

Overview

This repository contains the majority of Tailscale's open source code. Notably, it includes the tailscaled daemon and the tailscale CLI tool. The tailscaled daemon runs on Linux, Windows, macOS, and to varying degrees on FreeBSD and OpenBSD. The Tailscale iOS and Android apps use this repo's code, but this repo doesn't contain the mobile GUI code.

Other Tailscale repos of note:

For background on which parts of Tailscale are open source and why, see https://tailscale.com/opensource/.

Using

We serve packages for a variety of distros and platforms at https://pkgs.tailscale.com.

Other clients

The macOS, iOS, and Windows clients use the code in this repository but additionally include small GUI wrappers. The GUI wrappers on non-open source platforms are themselves not open source.

Building

We always require the latest Go release, currently Go 1.22. (While we build releases with our Go fork, its use is not required.)

go install tailscale.com/cmd/tailscale{,d}

If you're packaging Tailscale for distribution, use build_dist.sh instead, to burn commit IDs and version info into the binaries:

./build_dist.sh tailscale.com/cmd/tailscale
./build_dist.sh tailscale.com/cmd/tailscaled

If your distro has conventions that preclude the use of build_dist.sh, please do the equivalent of what it does in your distro's way, so that bug reports contain useful version information.

Bugs

Please file any issues about this code or the hosted service on the issue tracker.

Contributing

PRs welcome! But please file bugs. Commit messages should reference bugs.

We require Developer Certificate of Origin Signed-off-by lines in commits.

See git log for our commit message style. It's basically the same as Go's style.

About Us

Tailscale is primarily developed by the people at https://github.com/orgs/tailscale/people. For other contributors, see:

WireGuard is a registered trademark of Jason A. Donenfeld.