You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/net/netns
Jonathan Nobels e8d2f96449
ipn/ipnlocal, net/netns: add node cap to disable netns interface binding on netext Apple clients (#17691)
updates tailscale/corp#31571

It appears that on the latest macOS, iOS and tVOS versions, the work
that netns is doing to bind outgoing connections to the default interface (and all
of the trimmings and workarounds in netmon et al that make that work) are
not needed. The kernel is extension-aware and doing nothing, is the right
thing.  This is, however, not the case for tailscaled (which is not a
special process).

To allow us to test this assertion (and where it might break things), we add a
new node cap that turns this behaviour off only for network-extension equipped clients,
making it possible to turn this off tailnet-wide, without breaking any tailscaled
macos nodes.

Signed-off-by: Jonathan Nobels <jonathan@tailscale.com>
3 weeks ago
..
mksyscall.go net/netns: add Windows support for bind-to-interface-by-route 1 year ago
netns.go ipn/ipnlocal, net/netns: add node cap to disable netns interface binding on netext Apple clients (#17691) 3 weeks ago
netns_android.go all: avoid repeated default interface lookups 3 years ago
netns_darwin.go ipn/ipnlocal, net/netns: add node cap to disable netns interface binding on netext Apple clients (#17691) 3 weeks ago
netns_darwin_test.go net/{interfaces,netmon}, all: merge net/interfaces package into net/netmon 2 years ago
netns_default.go all: avoid repeated default interface lookups 3 years ago
netns_dw.go net/netns: remove some logspam by avoiding logging parse errors due to unspecified addresses 1 year ago
netns_linux.go tsconst, util/linuxfw, wgengine/router: move Linux fw consts to tsconst 2 months ago
netns_linux_test.go util/linuxfw: decoupling IPTables logic from linux router 2 years ago
netns_test.go all: avoid repeated default interface lookups 3 years ago
netns_windows.go net/netns: remove some logspam by avoiding logging parse errors due to unspecified addresses 1 year ago
netns_windows_test.go net/netns: add Windows support for bind-to-interface-by-route 1 year ago
socks.go feature/featuretags, all: add build features, use existing ones in more places 2 months ago
zsyscall_windows.go net/netns: add Windows support for bind-to-interface-by-route 1 year ago