You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/net
Anton Tolchanov 8cc5c51888 health: warn about reverse path filtering and exit nodes
When reverse path filtering is in strict mode on Linux, using an exit
node blocks all network connectivity. This change adds a warning about
this to `tailscale status` and the logs.

Example in `tailscale status`:

```
- not connected to home DERP region 22
- The following issues on your machine will likely make usage of exit nodes impossible: [interface "eth0" has strict reverse-path filtering enabled], please set rp_filter=2 instead of rp_filter=1; see https://github.com/tailscale/tailscale/issues/3310
```

Example in the logs:
```
2024/02/21 21:17:07 health("overall"): error: multiple errors:
	not in map poll
	The following issues on your machine will likely make usage of exit nodes impossible: [interface "eth0" has strict reverse-path filtering enabled], please set rp_filter=2 instead of rp_filter=1; see https://github.com/tailscale/tailscale/issues/3310
```

Updates #3310

Signed-off-by: Anton Tolchanov <anton@tailscale.com>
9 months ago
..
art
connstats
dns cmd/tailscaled, ipn/ipnlocal, wgengine: shutdown tailscaled if wgdevice is closed 9 months ago
dnscache util/cmpx: delete now that we're using Go 1.22 10 months ago
dnsfallback
flowtrack
interfaces net/interfaces: reduce & cleanup logs on iOS 9 months ago
ktimeout net/ktimeout: add a package to set TCP user timeout 9 months ago
memnet
netaddr
netcheck util/cmpx: delete now that we're using Go 1.22 10 months ago
neterror
netkernelconf
netknob
netmon
netns
netstat
netutil health: warn about reverse path filtering and exit nodes 9 months ago
packet
ping
portmapper
proxymux
routetable
socks5
sockstats
speedtest
stun
stunserver
tcpinfo
tlsdial
tsaddr all: remove LenIter, use Go 1.22 range-over-int instead 9 months ago
tsdial all: remove LenIter, use Go 1.22 range-over-int instead 9 months ago
tshttpproxy net/tshttpproxy: log when we're using a proxy 9 months ago
tstun
wsconn