You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/ipn
Andrew Lytvynov b743b85dad
ipn/ipnlocal,ssh/tailssh: reject c2n /update if SSH conns are active (#11820)
Since we already track active SSH connections, it's not hard to
proactively reject updates until those finish. We attempt to do the same
on the control side, but the detection latency for new connections is in
the minutes, which is not fast enough for common short sessions.

Handle a `force=true` query parameter to override this behavior, so that
control can still trigger an update on a server where some long-running
abandoned SSH session is open.

Updates https://github.com/tailscale/corp/issues/18556

Signed-off-by: Andrew Lytvynov <awly@tailscale.com>
7 months ago
..
conffile ipn/{conffile,ipnlocal}: start booting tailscaled from a config file w/ auth key 1 year ago
ipnauth go.mod, all: move away from inet.af domain seized by Taliban 9 months ago
ipnlocal ipn/ipnlocal,ssh/tailssh: reject c2n /update if SSH conns are active (#11820) 7 months ago
ipnserver all: use Go 1.22 range-over-int 7 months ago
ipnstate ipn/ipnlocal: populate peers' capabilities (#11365) 7 months ago
localapi all: use Go 1.22 range-over-int 7 months ago
policy ipn,tailconfig: clean up unreleased and removed app connector service 1 year ago
store ipn/store: omit AWS & Kubernetes support on 'small' Linux GOARCHes 7 months ago
backend.go ipn: remove unused Options.LegacyMigrationPrefs 7 months ago
conf.go cmd/k8s-operator,ipn/conf.go: fix --accept-routes for proxies (#11453) 8 months ago
doc.go all: update copyright and license headers 2 years ago
ipn_clone.go ipn/{localapi, ipnlocal}: forget the prior exit node when localAPI is used to zero the ExitNodeID (#11681) 7 months ago
ipn_test.go net/packet: split off checksum munging into different pkg 1 year ago
ipn_view.go ipn/{localapi, ipnlocal}: forget the prior exit node when localAPI is used to zero the ExitNodeID (#11681) 7 months ago
prefs.go all: use Go 1.22 range-over-int 7 months ago
prefs_test.go all: use Go 1.22 range-over-int 7 months ago
serve.go all: deprecate Node.Capabilities (more), remove PeerChange.Capabilities [capver 89] 8 months ago
serve_test.go {ipn/serve,cmd/tailscale/cli}: move some shared funcs to ipn 8 months ago
store.go ipn: add comment about thread-safety to StateStore 8 months ago
store_test.go ipn: avoid useless no-op WriteState calls 1 year ago