You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/ipn
Maisem Ali e67069550b ipn/ipnlocal,net/tstun,wgengine: create and plumb jailed packet filter
This plumbs a packet filter for jailed nodes through to the
tstun.Wrapper; the filter for a jailed node is equivalent to a "shields
up" filter. Currently a no-op as there is no way for control to
tell the client whether a peer is jailed.

Updates tailscale/corp#19623

Co-authored-by: Andrew Dunham <andrew@du.nham.ca>
Signed-off-by: Maisem Ali <maisem@tailscale.com>
Change-Id: I5ccc5f00e197fde15dd567485b2a99d8254391ad
7 months ago
..
conffile ipn/{conffile,ipnlocal}: start booting tailscaled from a config file w/ auth key 1 year ago
ipnauth go.mod, all: move away from inet.af domain seized by Taliban 9 months ago
ipnlocal ipn/ipnlocal,net/tstun,wgengine: create and plumb jailed packet filter 7 months ago
ipnserver ipn/{ipnlocal,localapi},wgengine{,/magicsock}: plumb health.Tracker 7 months ago
ipnstate ipn/ipnlocal: populate peers' capabilities (#11365) 8 months ago
localapi appc: setting AdvertiseRoutes explicitly discards app connector routes 7 months ago
policy ipn,tailconfig: clean up unreleased and removed app connector service 1 year ago
store cmd/containerboot,kube,ipn/store/kubestore: allow interactive login on kube, check Secret create perms, allow empty state Secret (#11326) 7 months ago
backend.go ipn: remove unused Options.LegacyMigrationPrefs 7 months ago
conf.go cmd/k8s-operator,ipn/conf.go: fix --accept-routes for proxies (#11453) 8 months ago
doc.go all: update copyright and license headers 2 years ago
ipn_clone.go various: implement stateful firewalling on Linux (#12025) 7 months ago
ipn_test.go net/packet: split off checksum munging into different pkg 1 year ago
ipn_view.go various: implement stateful firewalling on Linux (#12025) 7 months ago
prefs.go various: implement stateful firewalling on Linux (#12025) 7 months ago
prefs_test.go various: implement stateful firewalling on Linux (#12025) 7 months ago
serve.go all: deprecate Node.Capabilities (more), remove PeerChange.Capabilities [capver 89] 8 months ago
serve_test.go {ipn/serve,cmd/tailscale/cli}: move some shared funcs to ipn 9 months ago
store.go ipn: add comment about thread-safety to StateStore 9 months ago
store_test.go ipn: avoid useless no-op WriteState calls 1 year ago