You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/cmd/derper
Mihai Parparita 6842c3c194 net/interfaces: redo how we get the default interface on macOS and iOS
With #6566 we added an external mechanism for getting the default
interface, and used it on macOS and iOS (see tailscale/corp#8201).
The goal was to be able to get the default physical interface even when
using an exit node (in which case the routing table would say that the
Tailscale utun* interface is the default).

However, the external mechanism turns out to be unreliable in some
cases, e.g. when multiple cellular interfaces are present/toggled (I
have occasionally gotten my phone into a state where it reports the pdp_ip1
interface as the default, even though it can't actually route traffic).

It was observed that `ifconfig -v` on macOS reports an "effective interface"
for the Tailscale utn* interface, which seems promising. By examining
the ifconfig source code, it turns out that this is done via a
SIOCGIFDELEGATE ioctl syscall. Though this is a private API, it appears
to have been around for a long time (e.g. it's in the 10.13 xnu release
at https://opensource.apple.com/source/xnu/xnu-4570.41.2/bsd/net/if_types.h.auto.html)
and thus is unlikely to go away.

We can thus use this ioctl if the routing table says that a utun*
interface is the default, and go back to the simpler mechanism that
we had before #6566.

Updates #7184
Updates #7188

Signed-off-by: Mihai Parparita <mihai@tailscale.com>
(cherry picked from commit fa932fefe7)
3 years ago
..
bootstrap_dns.go cmd/derper: add support for unpublished bootstrap DNS entries (#5529) 3 years ago
bootstrap_dns_test.go cmd/derper: add support for unpublished bootstrap DNS entries (#5529) 3 years ago
cert.go cmd/derper: fix data race & server panic in manual cert mode 3 years ago
depaware.txt net/interfaces: redo how we get the default interface on macOS and iOS 3 years ago
derper.go cmd/derper, net/netcheck: add challenge/response to generate_204 endpoint 3 years ago
derper_test.go net/netcheck: don't use a space in the captive portal challenge 3 years ago
mesh.go all: use strs.CutPrefix and strs.CutSuffix more 3 years ago
websocket.go net/wsconn: add back custom wrapper for turning a websocket.Conn into a net.Conn 3 years ago