You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/wgengine
Andrea Gottardo e5f67f90a2
xcode: allow ICMP ping relay on macOS + iOS platforms (#12048)
Fixes tailscale/tailscale#10393
Fixes tailscale/corp#15412
Fixes tailscale/corp#19808

On Apple platforms, exit nodes and subnet routers have been unable to relay pings from Tailscale devices to non-Tailscale devices due to sandbox restrictions imposed on our network extensions by Apple. The sandbox prevented the code in netstack.go from spawning the `ping` process which we were using.

Replace that exec call with logic to send an ICMP echo request directly, which appears to work in userspace, and not trigger a sandbox violation in the syslog.

Signed-off-by: Andrea Gottardo <andrea@gottardo.me>
4 months ago
..
bench ipn/ipnlocal, all: plumb health trackers in tests 5 months ago
capture various: add golangci-lint, fix issues (#7905) 1 year ago
filter all: use Go 1.22 range-over-int 5 months ago
magicsock ipnlocal, magicsock: add more description to storing last suggested exit (#11998) 5 months ago
netlog wgengine: add exit destination logging enable for wgengine logger (#11952) 5 months ago
netstack xcode: allow ICMP ping relay on macOS + iOS platforms (#12048) 4 months ago
router wgengine/router: print Docker warning when stateful filtering is enabled 5 months ago
wgcfg tailcfg,all: add/plumb Node.IsJailed 5 months ago
wgint wgengine{,/wgint}: add wgint.Peer wrapper type, add to wgengine.Engine 7 months ago
wglog all: use Go 1.22 range-over-int 5 months ago
winnet all: update copyright and license headers 2 years ago
mem_ios.go all: update copyright and license headers 2 years ago
pendopen.go wgengine: make pendOpen time later, after dup check 7 months ago
userspace.go ipn/ipnlocal, all: plumb health trackers in tests 5 months ago
userspace_ext_test.go ipn/ipnlocal, all: plumb health trackers in tests 5 months ago
userspace_test.go ipn/ipnlocal, all: plumb health trackers in tests 5 months ago
watchdog.go ipn/ipnlocal,net/tstun,wgengine: create and plumb jailed packet filter 5 months ago
watchdog_js.go all: update copyright and license headers 2 years ago
watchdog_test.go ipn/ipnlocal, all: plumb health trackers in tests 5 months ago
wgengine.go ipn/ipnlocal,net/tstun,wgengine: create and plumb jailed packet filter 5 months ago