You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/net
Aaron Klotz 4d5d669cd5 net/dns: unconditionally write NRPT rules to local settings
We were being too aggressive when deciding whether to write our NRPT rules
to the local registry key or the group policy registry key.

After once again reviewing the document which calls itself a spec
(see issue), it is clear that the presence of the DnsPolicyConfig subkey
is the important part, not the presence of values set in the DNSClient
subkey. Furthermore, a footnote indicates that the presence of
DnsPolicyConfig in the GPO key will always override its counterpart in
the local key. The implication of this is important: we may unconditionally
write our NRPT rules to the local key. We copy our rules to the policy
key only when it contains NRPT rules belonging to somebody other than us.

Fixes https://github.com/tailscale/corp/issues/19071

Signed-off-by: Aaron Klotz <aaron@tailscale.com>
2 months ago
..
art all: cleanup unused code, part 2 (#10670) 6 months ago
connstats net/connstats: exclude traffic with internal Tailscale service (#7904) 1 year ago
dns net/dns: unconditionally write NRPT rules to local settings 2 months ago
dnscache util/cmpx: delete now that we're using Go 1.22 4 months ago
dnsfallback net/dnsfallback: add singleflight to recursive resolver 7 months ago
flowtrack all: update copyright and license headers 1 year ago
interfaces net/interfaces: fix test hang on Darwin 3 months ago
ktimeout net/ktimeout: add a package to set TCP user timeout 4 months ago
memnet net/memnet: export the network name (#9111) 10 months ago
netaddr all: update copyright and license headers 1 year ago
netcheck net/netcheck,wgengine/magicsock: align DERP frame receive time heuristics 2 months ago
neterror net/neterror, wgengine/magicsock: use UDP GSO and GRO on Linux (#7791) 1 year ago
netkernelconf client/tailscale,ipn/{ipnlocal,localapi}: check UDP GRO config (#10071) 7 months ago
netknob all: update copyright and license headers 1 year ago
netmon net/netmon: when a new network is added, trigger netmon update (#10840) 5 months ago
netns net/{interfaces,netmon}: remove "interesting", EqualFiltered API 10 months ago
netstat net/{netns,netstat}: use new x/sys/cpu.IsBigEndian 1 year ago
netutil health: warn about reverse path filtering and exit nodes 3 months ago
packet net/packet: allow more ICMP errors 2 months ago
ping net/ping: fix ICMP echo code field to 0 9 months ago
portmapper tailcfg, ipn/ipnlocal, wgengine/magicsock: add only-tcp-443 node attr 3 months ago
proxymux all: cleanup unused code, part 1 (#10661) 6 months ago
routetable net/routetable: increase route limit used by the test 3 months ago
socks5 net/socks5: add password auth support 1 year ago
sockstats net/dns: retry forwarder requests over TCP 9 months ago
speedtest all: update copyright and license headers 1 year ago
stun wgengine/magicsock, types/nettype, etc: finish ReadFromUDPAddrPort netip migration 1 year ago
stunserver cmd/{derper,stund},net/stunserver: add standalone stun server 5 months ago
tcpinfo net/tcpinfo: add package to allow fetching TCP information 12 months ago
tlsdial cmd/tailscale/cli: make netcheck run even if machine lacks TLS certs 10 months ago
tsaddr all: remove LenIter, use Go 1.22 range-over-int instead 3 months ago
tsdial net/tsdial: partially fix "tailscale nc" (UserDial) on macOS 2 months ago
tshttpproxy net/tshttpproxy: log when we're using a proxy 4 months ago
tstun net/tstun: use gaissmai/bart instead of tempfork/device 3 months ago
wsconn net/wsconn: accept a remote addr string and plumb it through 9 months ago