You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/ipn
Maisem Ali e67069550b ipn/ipnlocal,net/tstun,wgengine: create and plumb jailed packet filter
This plumbs a packet filter for jailed nodes through to the
tstun.Wrapper; the filter for a jailed node is equivalent to a "shields
up" filter. Currently a no-op as there is no way for control to
tell the client whether a peer is jailed.

Updates tailscale/corp#19623

Co-authored-by: Andrew Dunham <andrew@du.nham.ca>
Signed-off-by: Maisem Ali <maisem@tailscale.com>
Change-Id: I5ccc5f00e197fde15dd567485b2a99d8254391ad
2 years ago
..
conffile ipn/{conffile,ipnlocal}: start booting tailscaled from a config file w/ auth key 2 years ago
ipnauth go.mod, all: move away from inet.af domain seized by Taliban 2 years ago
ipnlocal ipn/ipnlocal,net/tstun,wgengine: create and plumb jailed packet filter 2 years ago
ipnserver ipn/{ipnlocal,localapi},wgengine{,/magicsock}: plumb health.Tracker 2 years ago
ipnstate ipn/ipnlocal: populate peers' capabilities (#11365) 2 years ago
localapi appc: setting AdvertiseRoutes explicitly discards app connector routes 2 years ago
policy ipn,tailconfig: clean up unreleased and removed app connector service 2 years ago
store cmd/containerboot,kube,ipn/store/kubestore: allow interactive login on kube, check Secret create perms, allow empty state Secret (#11326) 2 years ago
backend.go ipn: remove unused Options.LegacyMigrationPrefs 2 years ago
conf.go cmd/k8s-operator,ipn/conf.go: fix --accept-routes for proxies (#11453) 2 years ago
doc.go all: update copyright and license headers 3 years ago
ipn_clone.go various: implement stateful firewalling on Linux (#12025) 2 years ago
ipn_test.go net/packet: split off checksum munging into different pkg 2 years ago
ipn_view.go various: implement stateful firewalling on Linux (#12025) 2 years ago
prefs.go various: implement stateful firewalling on Linux (#12025) 2 years ago
prefs_test.go various: implement stateful firewalling on Linux (#12025) 2 years ago
serve.go all: deprecate Node.Capabilities (more), remove PeerChange.Capabilities [capver 89] 2 years ago
serve_test.go {ipn/serve,cmd/tailscale/cli}: move some shared funcs to ipn 2 years ago
store.go ipn: add comment about thread-safety to StateStore 2 years ago
store_test.go ipn: avoid useless no-op WriteState calls 2 years ago