You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/ipn
Anton Tolchanov 8cc5c51888 health: warn about reverse path filtering and exit nodes
When reverse path filtering is in strict mode on Linux, using an exit
node blocks all network connectivity. This change adds a warning about
this to `tailscale status` and the logs.

Example in `tailscale status`:

```
- not connected to home DERP region 22
- The following issues on your machine will likely make usage of exit nodes impossible: [interface "eth0" has strict reverse-path filtering enabled], please set rp_filter=2 instead of rp_filter=1; see https://github.com/tailscale/tailscale/issues/3310
```

Example in the logs:
```
2024/02/21 21:17:07 health("overall"): error: multiple errors:
	not in map poll
	The following issues on your machine will likely make usage of exit nodes impossible: [interface "eth0" has strict reverse-path filtering enabled], please set rp_filter=2 instead of rp_filter=1; see https://github.com/tailscale/tailscale/issues/3310
```

Updates #3310

Signed-off-by: Anton Tolchanov <anton@tailscale.com>
9 months ago
..
conffile
ipnauth go.mod, all: move away from inet.af domain seized by Taliban 9 months ago
ipnlocal health: warn about reverse path filtering and exit nodes 9 months ago
ipnserver ipn/ipnserver: always allow Windows SYSTEM user to connect 10 months ago
ipnstate ipn/ipnstate: add AllowedIPs to PeerStatus 12 months ago
localapi tailfs: clean up naming and package structure 10 months ago
policy ipn,tailconfig: clean up unreleased and removed app connector service 1 year ago
store
backend.go tailfs: clean up naming and package structure 10 months ago
conf.go ipn,cmd/tailscale/cli: support hierarchical MaskedPrefs (#10507) 12 months ago
doc.go
fake_test.go
ipn_clone.go linuxfw,wgengine/route,ipn: add c2n and nodeattrs to control linux netfilter 12 months ago
ipn_test.go
ipn_view.go linuxfw,wgengine/route,ipn: add c2n and nodeattrs to control linux netfilter 12 months ago
prefs.go ipn: apply ControlURL policy before login 11 months ago
prefs_test.go all: use reflect.TypeFor now available in Go 1.22 (#11078) 10 months ago
serve.go
serve_test.go
store.go taildrop: lazily perform full deletion scan after first taildrop use (#10137) 1 year ago
store_test.go