You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/net
Jordan Whited b32a01b2dc
disco,net/udprelay,wgengine/magicsock: support relay re-binding (#16388)
Relay handshakes may now occur multiple times over the lifetime of a
relay server endpoint. Handshake messages now include a handshake
generation, which is client specified, as a means to trigger safe
challenge reset server-side.

Relay servers continue to enforce challenge values as single use. They
will only send a given value once, in reply to the first arriving bind
message for a handshake generation.

VNI has been added to the handshake messages, and we expect the outer
Geneve header value to match the sealed value upon reception.

Remote peer disco pub key is now also included in handshake messages,
and it must match the receiver's expectation for the remote,
participating party.

Updates tailscale/corp#27502

Signed-off-by: Jordan Whited <jordan@tailscale.com>
5 months ago
..
art all: fix new lint warnings from bumping staticcheck 1 year ago
bakedroots tstest/tlstest: simplify, don't even bake in any keys 6 months ago
captivedetection tailcfg: add DERPRegion.NoMeasureNoHome, deprecate+document Avoid [cap 115] 9 months ago
connectproxy net/tlsdial: fix TLS cert validation of HTTPS proxies 6 months ago
connstats {net/connstats,wgengine/magicsock}: fix packet counting in connstats 1 year ago
dns net/*: remove Windows exceptions for when Resolver.PreferGo didn't work 6 months ago
dnscache net/tlsdial: fix TLS cert validation of HTTPS proxies 6 months ago
dnsfallback net/tlsdial: fix TLS cert validation of HTTPS proxies 6 months ago
flowtrack net/flowtrack: fix, test String method 1 year ago
ipset all: use iterators over slice views more 1 year ago
ktimeout various: disable MPTCP when setting TCP_USER_TIMEOUT sockopt (#15063) 10 months ago
memnet net/{netx,memnet},all: add netx.DialFunc, move memnet Network impl 8 months ago
netaddr all: update copyright and license headers 3 years ago
netcheck net/netcheck: preserve live home DERP through packet loss 6 months ago
neterror net/neterror, wgengine/magicsock: use UDP GSO and GRO on Linux (#7791) 3 years ago
netkernelconf all: remove non-applicable "linux" deps on Android 7 months ago
netknob all: update copyright and license headers 3 years ago
netmon net/netmon: add tests for the events over the eventbus (#16382) 5 months ago
netns all: remove non-applicable "linux" deps on Android 7 months ago
netstat all: add test for package comments, fix, add comments as needed 1 year ago
netutil net/netmon: publish events to event bus 8 months ago
netx net/{netx,memnet},all: add netx.DialFunc, move memnet Network impl 8 months ago
packet net/packet: cleanup IPv4 fragment guards 6 months ago
ping net/ping: fix ICMP echo code field to 0 2 years ago
portmapper util/eventbus: add test helpers to simplify testing events (#16294) 5 months ago
proxymux all: cleanup unused code, part 1 (#10661) 2 years ago
routetable net/routetable: don't try to fetch the route table on android 8 months ago
socks5 net/socks5: optimize UDP relay 1 year ago
sockstats net/sockstats: prevent crash in setNetMon (#13985) 1 year ago
speedtest all: update copyright and license headers 3 years ago
stun ci: enable checklocks workflow for specific packages 1 year ago
stunserver all: use Go 1.22 range-over-int 2 years ago
tcpinfo all: use Go 1.22 range-over-int 2 years ago
tlsdial net/tlsdial: fix TLS cert validation of HTTPS proxies 6 months ago
tsaddr net/tsaddr: include test input in test failure output 1 year ago
tsdial net/*: remove Windows exceptions for when Resolver.PreferGo didn't work 6 months ago
tshttpproxy net/tshttpproxy: fix WDAP/PAC proxy detection on Win10 1607 and earlier 6 months ago
tstun scripts/check_license_headers.sh: delete, rewrite as a Go test 6 months ago
udprelay disco,net/udprelay,wgengine/magicsock: support relay re-binding (#16388) 5 months ago
wsconn go.{mod,sum}: migrate from nhooyr.io/websocket to github.com/coder/websocket 1 year ago