You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/ssh/tailssh
Andrew Lytvynov b743b85dad
ipn/ipnlocal,ssh/tailssh: reject c2n /update if SSH conns are active (#11820)
Since we already track active SSH connections, it's not hard to
proactively reject updates until those finish. We attempt to do the same
on the control side, but the detection latency for new connections is in
the minutes, which is not fast enough for common short sessions.

Handle a `force=true` query parameter to override this behavior, so that
control can still trigger an update on a server where some long-running
abandoned SSH session is open.

Updates https://github.com/tailscale/corp/issues/18556

Signed-off-by: Andrew Lytvynov <awly@tailscale.com>
1 month ago
..
incubator.go ssh/tailssh: add envknobs to force override forwarding, sftp, pty 7 months ago
incubator_linux.go all: update copyright and license headers 1 year ago
privs_test.go all: use Go 1.21 slices, maps instead of x/exp/{slices,maps} 10 months ago
tailssh.go ipn/ipnlocal,ssh/tailssh: reject c2n /update if SSH conns are active (#11820) 1 month ago
tailssh_test.go all: use Go 1.22 range-over-int 2 months ago
user.go ssh/tailssh,util: extract new osuser package from ssh code (#10170) 7 months ago