You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/wgengine
Nick Khyl 1608831c33 wgengine/router: use quad-100 as the nexthop on Windows
Windows requires routes to have a nexthop. Routes created using the interface's local IP address or an unspecified IP address ("0.0.0.0" or "::") as the nexthop are considered on-link routes. Notably, Windows treats on-link subnet routes differently, reserving the last IP in the range as the broadcast IP and therefore prohibiting TCP connections to it, resulting in WSA error 10049: "The requested address is not valid in its context. This does not happen with single-host routes, such as routes to Tailscale IP addresses, but becomes a problem with advertised subnets when all IPs in the range should be reachable.

Before Windows 8, only routes created with an unspecified IP address were considered on-link, so our previous approach of using the interface's own IP as the nexthop likely worked on Windows 7.

This PR updates configureInterface to use the TailscaleServiceIP (100.100.100.100) and its IPv6 counterpart as the nexthop for subnet routes.

Fixes tailscale/support-escalations#57

Signed-off-by: Nick Khyl <nickk@tailscale.com>
4 months ago
..
bench ipn/ipnlocal, all: plumb health trackers in tests 6 months ago
capture various: add golangci-lint, fix issues (#7905) 2 years ago
filter wgengine/filter: support FilterRules matching on srcIP node caps [capver 100] 5 months ago
magicsock wgengine/magicsock: use wireguard-go/conn.PeerAwareEndpoint 4 months ago
netlog wgengine: add exit destination logging enable for wgengine logger (#11952) 6 months ago
netstack proxymap, various: distinguish between different protocols 5 months ago
router wgengine/router: use quad-100 as the nexthop on Windows 4 months ago
wgcfg ipn,wgengine: remove vestigial Prefs.AllowSingleHosts 6 months ago
wgint wgengine{,/wgint}: add wgint.Peer wrapper type, add to wgengine.Engine 9 months ago
wglog all: use Go 1.22 range-over-int 7 months ago
winnet all: add test for package comments, fix, add comments as needed 4 months ago
mem_ios.go all: update copyright and license headers 2 years ago
pendopen.go net/flowtrack: optimize Tuple type for use as map key 5 months ago
userspace.go net/ipset, wgengine/filter/filtertype: add split-out packages 5 months ago
userspace_ext_test.go ipn/ipnlocal, all: plumb health trackers in tests 6 months ago
userspace_test.go ipn/ipnlocal, all: plumb health trackers in tests 6 months ago
watchdog.go ipn/ipnlocal,net/tstun,wgengine: create and plumb jailed packet filter 6 months ago
watchdog_js.go all: update copyright and license headers 2 years ago
watchdog_test.go ipn/ipnlocal, all: plumb health trackers in tests 6 months ago
wgengine.go all: add test for package comments, fix, add comments as needed 4 months ago