You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Anton Tolchanov 8cc5c51888 health: warn about reverse path filtering and exit nodes ... When reverse path filtering is in strict mode on Linux, using an exit node blocks all network connectivity. This change adds a warning about this to `tailscale status` and the logs. Example in `tailscale status`: ``` - not connected to home DERP region 22 - The following issues on your machine will likely make usage of exit nodes impossible: [interface "eth0" has strict reverse-path filtering enabled], please set rp_filter=2 instead of rp_filter=1; see https://github.com/tailscale/tailscale/issues/3310 ``` Example in the logs: ``` 2024/02/21 21:17:07 health("overall"): error: multiple errors: not in map poll The following issues on your machine will likely make usage of exit nodes impossible: [interface "eth0" has strict reverse-path filtering enabled], please set rp_filter=2 instead of rp_filter=1; see https://github.com/tailscale/tailscale/issues/3310 ``` Updates #3310 Signed-off-by: Anton Tolchanov <anton@tailscale.com>		3 months ago
..
conffile	ipn/{conffile,ipnlocal}: start booting tailscaled from a config file w/ auth key	8 months ago
ipnauth	go.mod, all: move away from inet.af domain seized by Taliban	4 months ago
ipnlocal	health: warn about reverse path filtering and exit nodes	3 months ago
ipnserver	ipn/ipnserver: always allow Windows SYSTEM user to connect	5 months ago
ipnstate	ipn/ipnstate: add AllowedIPs to PeerStatus	6 months ago
localapi	tailfs: clean up naming and package structure	4 months ago
policy	ipn,tailconfig: clean up unreleased and removed app connector service	7 months ago
store	cmd/k8s-operator,ipn/store/kubestore: patch secrets instead of updating	10 months ago
backend.go	tailfs: clean up naming and package structure	4 months ago
conf.go	ipn,cmd/tailscale/cli: support hierarchical MaskedPrefs (#10507)	6 months ago
doc.go	all: update copyright and license headers	1 year ago
fake_test.go	all: update copyright and license headers	1 year ago
ipn_clone.go	linuxfw,wgengine/route,ipn: add c2n and nodeattrs to control linux netfilter	6 months ago
ipn_test.go	net/packet: split off checksum munging into different pkg	8 months ago
ipn_view.go	linuxfw,wgengine/route,ipn: add c2n and nodeattrs to control linux netfilter	6 months ago
prefs.go	ipn: apply ControlURL policy before login	5 months ago
prefs_test.go	all: use reflect.TypeFor now available in Go 1.22 (#11078)	4 months ago
serve.go	ipn/localapi: require local Windows admin to set serve path (#9969)	8 months ago
serve_test.go	ipn/localapi: require local Windows admin to set serve path (#9969)	8 months ago
store.go	taildrop: lazily perform full deletion scan after first taildrop use (#10137)	7 months ago
store_test.go	ipn: avoid useless no-op WriteState calls	10 months ago