You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Anton Tolchanov 8cc5c51888 health: warn about reverse path filtering and exit nodes ... When reverse path filtering is in strict mode on Linux, using an exit node blocks all network connectivity. This change adds a warning about this to `tailscale status` and the logs. Example in `tailscale status`: ``` - not connected to home DERP region 22 - The following issues on your machine will likely make usage of exit nodes impossible: [interface "eth0" has strict reverse-path filtering enabled], please set rp_filter=2 instead of rp_filter=1; see https://github.com/tailscale/tailscale/issues/3310 ``` Example in the logs: ``` 2024/02/21 21:17:07 health("overall"): error: multiple errors: not in map poll The following issues on your machine will likely make usage of exit nodes impossible: [interface "eth0" has strict reverse-path filtering enabled], please set rp_filter=2 instead of rp_filter=1; see https://github.com/tailscale/tailscale/issues/3310 ``` Updates #3310 Signed-off-by: Anton Tolchanov <anton@tailscale.com>		9 months ago
..
conffile	ipn/{conffile,ipnlocal}: start booting tailscaled from a config file w/ auth key	1 year ago
ipnauth	go.mod, all: move away from inet.af domain seized by Taliban	9 months ago
ipnlocal	health: warn about reverse path filtering and exit nodes	9 months ago
ipnserver	ipn/ipnserver: always allow Windows SYSTEM user to connect	11 months ago
ipnstate	ipn/ipnstate: add AllowedIPs to PeerStatus	1 year ago
localapi	tailfs: clean up naming and package structure	10 months ago
policy	ipn,tailconfig: clean up unreleased and removed app connector service	1 year ago
store	cmd/k8s-operator,ipn/store/kubestore: patch secrets instead of updating	1 year ago
backend.go	tailfs: clean up naming and package structure	10 months ago
conf.go	ipn,cmd/tailscale/cli: support hierarchical MaskedPrefs (#10507)	12 months ago
doc.go	all: update copyright and license headers	2 years ago
fake_test.go	all: update copyright and license headers	2 years ago
ipn_clone.go	linuxfw,wgengine/route,ipn: add c2n and nodeattrs to control linux netfilter	12 months ago
ipn_test.go	net/packet: split off checksum munging into different pkg	1 year ago
ipn_view.go	linuxfw,wgengine/route,ipn: add c2n and nodeattrs to control linux netfilter	12 months ago
prefs.go	ipn: apply ControlURL policy before login	11 months ago
prefs_test.go	all: use reflect.TypeFor now available in Go 1.22 (#11078)	10 months ago
serve.go	ipn/localapi: require local Windows admin to set serve path (#9969)	1 year ago
serve_test.go	ipn/localapi: require local Windows admin to set serve path (#9969)	1 year ago
store.go	taildrop: lazily perform full deletion scan after first taildrop use (#10137)	1 year ago
store_test.go	ipn: avoid useless no-op WriteState calls	1 year ago