You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Andrea Gottardo 6de6ab015f net/dns: tweak DoH timeout, limit MaxConnsPerHost, require TLS 1.3 (#13564) ... Updates tailscale/tailscale#6148 This is the result of some observations we made today with @raggi. The DNS over HTTPS client currently doesn't cap the number of connections it uses, either in-use or idle. A burst of DNS queries will open multiple connections. Idle connections remain open for 30 seconds (this interval is defined in the dohTransportTimeout constant). For DoH providers like NextDNS which send keep-alives, this means the cellular modem will remain up more than expected to send ACKs if any keep-alives are received while a connection remains idle during those 30 seconds. We can set the IdleConnTimeout to 10 seconds to ensure an idle connection is terminated if no other DNS queries come in after 10 seconds. Additionally, we can cap the number of connections to 1. This ensures that at all times there is only one open DoH connection, either active or idle. If idle, it will be terminated within 10 seconds from the last query. We also observed all the DoH providers we support are capable of TLS 1.3. We can force this TLS version to reduce the number of packets sent/received each time a TLS connection is established. Signed-off-by: Andrea Gottardo <andrea@gottardo.me>		4 weeks ago
..
publicdns	net/dns/publicdns: remove additional information in DOH URL passed to IPv6 address generation for controlD.	4 months ago
recursive	…
resolvconffile	…
resolver	net/dns: tweak DoH timeout, limit MaxConnsPerHost, require TLS 1.3 (#13564)	4 weeks ago
config.go	all: add test for package comments, fix, add comments as needed	4 months ago
debian_resolvconf.go	…
direct.go	net/dns: ensure /etc/resolv.conf is world-readable even with a umask	4 months ago
direct_linux.go	net/dns: updated gonotify dependency to v2 that supports closable context	2 months ago
direct_notlinux.go	…
direct_test.go	…
direct_unix_test.go	net/dns: ensure /etc/resolv.conf is world-readable even with a umask	4 months ago
flush_default.go	…
flush_windows.go	…
ini.go	…
ini_test.go	…
manager.go	cli: implement `tailscale dns status` (#13353)	2 months ago
manager_darwin.go	net/dns: support GetBaseConfig on Darwin OSS tailscaled (#13351)	2 months ago
manager_default.go	various: create a catch-all NRPT rule when "Override local DNS" is enabled on Windows	5 months ago
manager_freebsd.go	various: create a catch-all NRPT rule when "Override local DNS" is enabled on Windows	5 months ago
manager_linux.go	various: create a catch-all NRPT rule when "Override local DNS" is enabled on Windows	5 months ago
manager_linux_test.go	net/dns: ensure /etc/resolv.conf is world-readable even with a umask	4 months ago
manager_openbsd.go	various: create a catch-all NRPT rule when "Override local DNS" is enabled on Windows	5 months ago
manager_tcp_test.go	net/dns, health: raise health warning for failing forwarded DNS queries (#12888)	3 months ago
manager_test.go	net/dns: ensure multiple hosts with the same IP address are combined into a single HostEntry	4 months ago
manager_windows.go	net/dns: disable DNS registration for Tailscale interface on Windows	2 months ago
manager_windows_test.go	util/winutil/gp, net/dns: add package for Group Policy API	4 months ago
nm.go	…
noop.go	…
nrpt_windows.go	util/winutil/gp, net/dns: add package for Group Policy API	4 months ago
openresolv.go	…
osconfig.go	net/dns: fix IsZero and Equal methods on OSConfig	2 months ago
osconfig_test.go	net/dns: fix IsZero and Equal methods on OSConfig	2 months ago
resolvconf-workaround.sh	…
resolvconf.go	…
resolvconfpath_default.go	…
resolvconfpath_gokrazy.go	…
resolvd.go	…
resolved.go	…
utf.go	…
utf_test.go	…
wsl_windows.go	net/dns: ensure /etc/resolv.conf is world-readable even with a umask	4 months ago