You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/cmd
Maisem Ali 4669e7f7d5 cmd/containerboot: add iptables based MSS clamping for ingress/egress proxies
In typical k8s setups, the MTU configured on the eth0 interfaces is typically 1500 which
results in packets being dropped when they make it to proxy pods as the tailscale0 interface
has a 1280 MTU.

As the primary use of this functionality is TCP, add iptables based MSS clamping to allow
connectivity.

Updates #502

Signed-off-by: Maisem Ali <maisem@tailscale.com>
9 months ago
..
addlicense all: update tools that manage copyright headers 1 year ago
cloner cmd/cloner: do not allocate slices when the source is nil 9 months ago
containerboot cmd/containerboot: add iptables based MSS clamping for ingress/egress proxies 9 months ago
derper tailcfg: add NodeCapMap 9 months ago
derpprobe prober: migrate to Prometheus metric library 1 year ago
dist cmd/dist,release/dist: add distsign signing hooks (#9070) 10 months ago
get-authkey all: use cmpx.Or where it made sense 1 year ago
gitops-pusher .github,cmd/gitops-pusher: update to checkout@v4 9 months ago
hello all: update copyright and license headers 1 year ago
k8s-operator cmd/k8s-operator: fix egress service name (#9494) 9 months ago
mkmanifest cmd/mkmanifest, cmd/tailscale, cmd/tailscaled: remove Windows arm32 resources from OSS 1 year ago
mkpkg go.mod: upgrade nfpm to v2 (#8786) 10 months ago
mkversion version/mkversion: open-source version generation logic 1 year ago
nardump all: update copyright and license headers 1 year ago
netlogfmt all: use Go 1.21 slices, maps instead of x/exp/{slices,maps} 10 months ago
nginx-auth tailcfg,all: add and use Node.IsTagged() 1 year ago
pgproxy various: add golangci-lint, fix issues (#7905) 1 year ago
printdep cmd/printdep: print correct toolchain URL 1 year ago
proxy-to-grafana tailcfg,all: add and use Node.IsTagged() 1 year ago
sniproxy cmd/sniproxy: move default debug-port away from 8080. 9 months ago
speedtest all: update copyright and license headers 1 year ago
ssh-auth-none-demo all: replace deprecated ioutil references 10 months ago
stunc all: update copyright and license headers 1 year ago
sync-containers all: adjust some build tags for plan9 10 months ago
tailscale client/web: switch to using prebuilt web client assets 9 months ago
tailscaled wgengine, proxymap: split out port mapping from Engine to new type 9 months ago
testcontrol all: update copyright and license headers 1 year ago
testwrapper cmd/testwrapper: fix exit deflake (#9342) 9 months ago
tsconnect types/netmap: remove NetworkMap.{Addresses,MachineStatus} 9 months ago
tsshd all: update copyright and license headers 1 year ago
viewer tailcfg: add NodeCapMap 9 months ago