You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/cmd
Andrea Gottardo e5f67f90a2
xcode: allow ICMP ping relay on macOS + iOS platforms (#12048)
Fixes tailscale/tailscale#10393
Fixes tailscale/corp#15412
Fixes tailscale/corp#19808

On Apple platforms, exit nodes and subnet routers have been unable to relay pings from Tailscale devices to non-Tailscale devices due to sandbox restrictions imposed on our network extensions by Apple. The sandbox prevented the code in netstack.go from spawning the `ping` process which we were using.

Replace that exec call with logic to send an ICMP echo request directly, which appears to work in userspace, and not trigger a sandbox violation in the syslog.

Signed-off-by: Andrea Gottardo <andrea@gottardo.me>
1 month ago
..
addlicense all: update tools that manage copyright headers 1 year ago
build-webclient client/web: precompress assets 7 months ago
cloner all: use Go 1.22 range-over-int 2 months ago
connector-gen cmd/connector-gen: add helper tool for wide app connector configurations 6 months ago
containerboot cmd/containerboot: warn when an ingress proxy with an IPv4 tailnet address is being created for an IPv6 backend(s) (#12159) 1 month ago
derper derp/derphttp: fix netcheck HTTPS probes 2 months ago
derpprobe cmd/{derper,derpprobe}: add --version flag 3 months ago
dist release/dist/qnap: add qnap target builder 2 months ago
get-authkey util/cmpx: delete now that we're using Go 1.22 5 months ago
gitops-pusher cmd/gitops-pusher: only use OAuth creds if non-empty string 4 months ago
hello cmd/hello: link to the Hello KB article (#11022) 5 months ago
k8s-nameserver cmd/{k8s-operator,k8s-nameserver},k8s-operator: update nameserver config with records for ingress/egress proxies (#11019) 2 months ago
k8s-operator cmd/k8s-operator,cmd/containerboot,ipn,k8s-operator: turn off stateful filter for egress proxies. (#12075) 1 month ago
mkmanifest cmd/mkmanifest, cmd/tailscale, cmd/tailscaled: remove Windows arm32 resources from OSS 1 year ago
mkpkg go.mod: upgrade nfpm to v2 (#8786) 11 months ago
mkversion version/mkversion: open-source version generation logic 1 year ago
nardump all: update copyright and license headers 1 year ago
netlogfmt all: use Go 1.22 range-over-int 2 months ago
nginx-auth tailcfg,all: add and use Node.IsTagged() 1 year ago
pgproxy tsnet: split user facing and backend logging 1 month ago
printdep cmd/printdep: print correct toolchain URL 1 year ago
proxy-to-grafana all: use Go 1.22 range-over-int 2 months ago
sniproxy tsnet: split user facing and backend logging 1 month ago
speedtest all: update copyright and license headers 1 year ago
ssh-auth-none-demo all: replace deprecated ioutil references 10 months ago
stunc all: update copyright and license headers 1 year ago
stund build(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0 (#11410) 2 months ago
sync-containers all: adjust some build tags for plan9 10 months ago
tailscale cmd/tailscale: add missing set flags for linux 1 month ago
tailscaled xcode: allow ICMP ping relay on macOS + iOS platforms (#12048) 1 month ago
testcontrol all: use Go 1.22 range-over-int 2 months ago
testwrapper cmd/testwrapper: apply results of all unit tests to coverage for all packages 4 months ago
tsconnect health, all: remove health.Global, finish plumbing health.Tracker 2 months ago
tsidp tsnet: split user facing and backend logging 1 month ago
tsshd all: update copyright and license headers 1 year ago
viewer all: use Go 1.22 range-over-int 2 months ago