You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/net
Brad Fitzpatrick 88c2afd1e3 ipn/ipnlocal, net/dns*, util/cloudenv: specialize DNS config on Google Cloud
This does three things:

* If you're on GCP, it adds a *.internal DNS split route to the
  metadata server, so we never break GCP DNS names. This lets people
  have some Tailscale nodes on GCP and some not (e.g. laptops at home)
  without having to add a Tailnet-wide *.internal DNS route.
  If you already have such a route, though, it won't overwrite it.

* If the 100.100.100.100 DNS forwarder has nowhere to forward to,
  it forwards it to the GCP metadata IP, which forwards to 8.8.8.8.
  This means there are never errNoUpstreams ("upstream nameservers not set")
  errors on GCP due to e.g. mangled /etc/resolv.conf (GCP default VMs
  don't have systemd-resolved, so it's likely a DNS supremacy fight)

* makes the DNS fallback mechanism use the GCP metadata IP as a
  fallback before our hosted HTTP-based fallbacks

I created a default GCP VM from their web wizard. It has no
systemd-resolved.

I then made its /etc/resolv.conf be empty and deleted its GCP
hostnames in /etc/hosts.

I then logged in to a tailnet with no global DNS settings.

With this, tailscaled writes /etc/resolv.conf (direct mode, as no
systemd-resolved) and sets it to 100.100.100.100, which then has
regular DNS via the metadata IP and *.internal DNS via the metadata IP
as well. If the tailnet configures explicit DNS servers, those are used
instead, except for *.internal.

This also adds a new util/cloudenv package based on version/distro
where the cloud type is only detected once. We'll likely expand it in
the future for other clouds, doing variants of this change for other
popular cloud environments.

Fixes #4911

RELNOTES=Google Cloud DNS improvements

Change-Id: I19f3c2075983669b2b2c0f29a548da8de373c7cf
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2 years ago
..
dns ipn/ipnlocal, net/dns*, util/cloudenv: specialize DNS config on Google Cloud 2 years ago
dnscache ipn/ipnlocal, net/dns*, util/cloudenv: specialize DNS config on Google Cloud 2 years ago
dnsfallback net/dnsfallback: update from 'go generate' 2 years ago
flowtrack all: use any instead of interface{} 2 years ago
interfaces net/interfaces: add FreeBSD default route lookup (portmapping, etc) 2 years ago
netcheck all: gofmt all 2 years ago
neterror net/{neterror,dns/resolver}: move PacketWasTruncated to neterror from DNS code 3 years ago
netknob all: disable TCP keep-alives on iOS/Android 3 years ago
netns wasm: exclude code that's not used on iOS for Wasm too 2 years ago
netstat all: gofmt with Go 1.17 3 years ago
nettest net/nettest: deflake TestPipeTimeout 3 years ago
netutil net/netutil: add CheckIPForwardingLinux (#4301) 2 years ago
packet *: use WireGuard where logged, printed or named 2 years ago
portmapper net/portmapper: send discovery packet for IGD specifically. 2 years ago
proxymux net/proxymux: add a listener mux that can run SOCKS and HTTP on a single socket. 3 years ago
socks5 socks5: add a simple test 2 years ago
speedtest all: fix spelling mistakes 3 years ago
stun all: gofmt with Go 1.17 3 years ago
tlsdial envknob: add new package for all the strconv.ParseBool(os.Getenv(..)) 2 years ago
tsaddr net/dns/resolver, net/tsaddr: fix reverse lookups in 4to6 IP range 2 years ago
tsdial net/tsdial: add SystemDial as a wrapper on netns.Dial 2 years ago
tshttpproxy net/tshttpproxy: synology: pick proxy by scheme 2 years ago
tstun wgengine/netstack: make netstack MTU be 1280 also 2 years ago