You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/cmd
Irbe Krumina 6b97e615d6
cmd/containerboot,kube/ingressservices: proxy VIPService TCP/UDP traffic to cluster Services (#15897)
cmd/containerboot,kube/ingressservices: proxy VIPService TCP/UDP traffic to cluster Services

This PR is part of the work to implement HA for Kubernetes Operator's
network layer proxy.
Adds logic to containerboot to monitor mounted ingress firewall configuration rules
and update iptables/nftables rules as the config changes.
Also adds new shared types for the ingress configuration.
The implementation is intentionally similar to that for HA for egress proxy.

Updates tailscale/tailscale#15895

Signed-off-by: chaosinthecrd <tom@tmlabs.co.uk>
Signed-off-by: Irbe Krumina <irbe@tailscale.com>
7 months ago
..
addlicense all: fix golangci-lint errors 12 months ago
build-webclient client/web: precompress assets 2 years ago
checkmetrics cmd/checkmetrics: add command for checking metrics against kb 1 year ago
cloner cmd/cloner, cmd/viewer, util/codegen: add support for aliases of cloneable types 1 year ago
connector-gen cmd/connector-gen: add helper tool for wide app connector configurations 2 years ago
containerboot cmd/containerboot,kube/ingressservices: proxy VIPService TCP/UDP traffic to cluster Services (#15897) 7 months ago
derper tsweb/varz: export GC CPU fraction gauge 8 months ago
derpprobe cmd/derpprobe: exit with non-zero status if --once fails (#15926) 8 months ago
dist cmd/dist,release/dist: sign QNAP builds with a Google Cloud hosted key 8 months ago
get-authkey cmd,tsnet,internal/client: create internal shim to deprecated control plane API 10 months ago
gitops-pusher cmd/gitops-pusher: log error details when unable to fetch ACL ETag 10 months ago
hello cmd/hello: display native ipv4 (#15191) 10 months ago
k8s-nameserver cmd/k8s-nameserver: fix AAAA record query response (#12412) 2 years ago
k8s-operator cmd/k8s-operator: warn if Tailscale Services use attempted for tailnet without the feature enabled (#15931) 8 months ago
mkmanifest cmd/mkmanifest, cmd/tailscale, cmd/tailscaled: remove Windows arm32 resources from OSS 3 years ago
mkpkg go.mod: upgrade nfpm to v2 (#8786) 2 years ago
mkversion version/mkversion: open-source version generation logic 3 years ago
nardump cmd/nardump: support symlinks, add basic test 9 months ago
natc cmd/natc: cleanup unused state 9 months ago
netlogfmt all: use Go 1.22 range-over-int 2 years ago
nginx-auth tailcfg,all: add and use Node.IsTagged() 3 years ago
pgproxy all: use new LocalAPI client package location 11 months ago
printdep cmd/printdep: print correct toolchain URL 3 years ago
proxy-to-grafana cmd/proxy-to-grafana: strip X-Webauth* headers from all requests (#15985) 7 months ago
sniproxy net/{netx,memnet},all: add netx.DialFunc, move memnet Network impl 9 months ago
speedtest all: update copyright and license headers 3 years ago
ssh-auth-none-demo ssh,tempfork/gliderlabs/ssh: replace github.com/tailscale/golang-x-crypto/ssh with golang.org/x/crypto/ssh 11 months ago
stunc cmd/stunc: enforce read timeout deadline (#14309) 1 year ago
stund tsweb/varz: export GC CPU fraction gauge 8 months ago
stunstamp cmd/stunstamp: add protocol context to timeout logs (#13422) 1 year ago
sync-containers all: adjust some build tags for plan9 2 years ago
systray cmd/systray: add cmd/systray back as a small client/systray wrapper 12 months ago
tailscale cmd/tailscale/cli: omit "file" subcommand if taildrop is omitted from build 8 months ago
tailscaled ipn/ipnlocal,net/dns/resolver: use the user dialer and routes for DNS forwarding by default, except on iOS and Android 8 months ago
testcontrol all: use Go 1.22 range-over-int 2 years ago
testwrapper cmd/testwrapper: print failed tests preventing retry (#15270) 10 months ago
tl-longchain all: use new LocalAPI client package location 11 months ago
tsconnect all: update the tsd.System constructor name (#15372) 8 months ago
tsidp cmd/tsidp: remove backticks in README in shell example 8 months ago
tsshd all: update copyright and license headers 3 years ago
tta all: use new LocalAPI client package location 11 months ago
viewer cmd/viewer,all: consistently use "read-only" instead of "readonly" 12 months ago
vnet cmd/vnet: add wsproxy mode 9 months ago
xdpderper tsweb: split promvarz into an optional dependency 9 months ago