You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Nick Khyl d837e0252f wf/firewall: allow link-local multicast for permitted local routes when the killswitch is on on Windows ... When an Exit Node is used, we create a WFP rule to block all inbound and outbound traffic, along with several rules to permit specific types of traffic. Notably, we allow all inbound and outbound traffic to and from LocalRoutes specified in wgengine/router.Config. The list of allowed routes always includes routes for internal interfaces, such as loopback and virtual Hyper-V/WSL2 interfaces, and may also include LAN routes if the "Allow local network access" option is enabled. However, these permitting rules do not allow link-local multicast on the corresponding interfaces. This results in broken mDNS/LLMNR, and potentially other similar issues, whenever an exit node is used. In this PR, we update (*wf.Firewall).UpdatePermittedRoutes() to create rules allowing outbound and inbound link-local multicast traffic to and from the permitted IP ranges, partially resolving the mDNS/LLMNR and *.local name resolution issue. Since Windows does not attempt to send mDNS/LLMNR queries if a catch-all NRPT rule is present, it is still necessary to disable the creation of that rule using the disable-local-dns-override-via-nrpt nodeAttr. Updates #13571 Signed-off-by: Nick Khyl <nickk@tailscale.com>		2 months ago
..
archtest	all: cleanup unused code, part 1 (#10661)	11 months ago
deptest	tstest/deptest: fix minor escaping error in regex	1 year ago
integration	control/control{client,http}: don't noise dial localhost:443 in http-only tests	2 months ago
iosdeps	all: do not depend on the testing package	6 months ago
jsdeps	all: use math/rand/v2 more	6 months ago
natlab	tstest/natlab: add dual stack with blackholed IPv4	3 months ago
nettest	cmd/derper,tstest/nettest: skip network-needing test in airplane mode	7 months ago
tailmac	tstest/natlab: add unix address to writer for dgram mode	3 months ago
tools	go.{mod,sum},tstest/tools,k8s-operator,cmd/k8s-operator: autogenerate CRD API docs (#12884)	4 months ago
allocs.go	all: update copyright and license headers	2 years ago
clock.go	tstime: add Since method (#8622)	1 year ago
clock_test.go	all: use Go 1.22 range-over-int	8 months ago
log.go	wgengine/magicsock: disable portmapper in tunchan-faked tests	7 months ago
log_test.go	all: update copyright and license headers	2 years ago
reflect.go	net/dns: fix IsZero and Equal methods on OSConfig	3 months ago
resource.go	all: use Go 1.22 range-over-int	8 months ago
test-wishlist.md	wf/firewall: allow link-local multicast for permitted local routes when the killswitch is on on Windows	2 months ago
tstest.go	ipn/{conffile,ipnlocal}: start booting tailscaled from a config file w/ auth key	1 year ago
tstest_test.go	tstest: add method to Replace values for tests	2 years ago