You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/net
Denton Gentry d2480fd508 net/netns: support !CAP_NET_ADMIN
netns_linux checked whether "ip rule" could run to determine
whether to use SO_MARK for network namespacing. However in
Linux environments which lack CAP_NET_ADMIN, such as various
container runtimes, the "ip rule" command succeeds but SO_MARK
fails due to lack of permission. SO_BINDTODEVICE would work in
these environments, but isn't tried.

In addition to running "ip rule" check directly whether SO_MARK
works or not. Among others, this allows Microsoft Azure App
Service and AWS App Runner to work.

Signed-off-by: Denton Gentry <dgentry@tailscale.com>
4 years ago
..
dns net/dns: do not run wsl.exe as LocalSystem 5 years ago
dnscache control/controlclient, net/{dnscache,dnsfallback}: add DNS fallback mechanism 5 years ago
dnsfallback ipn, etc: use controlplane.tailscale.com 5 years ago
flowtrack net/packet, wgengine/filter: support SCTP 5 years ago
interfaces net/interface: add AWS App Runner /proc/net/route test 4 years ago
netcheck net/{interfaces,netcheck}: rename some fields, funcs 5 years ago
netns net/netns: support !CAP_NET_ADMIN 4 years ago
netstat all: adapt to opaque netaddr types 5 years ago
nettest net/nettest: make nettest.NewConn pass x/net/nettest.TestConn. 5 years ago
packet net/packet: use netaddr AppendTo methods 5 years ago
portmapper wgengine/magicsock: make portmapping async 4 years ago
socks5 net/socks5/tssocks: add a SOCKS5 dialer type, method-ifying code 5 years ago
stun tstest/integration: add testNode.AwaitListening, DERP+STUN, improve proxy trap 5 years ago
tlsdial net/tlsdial, derp/derphttp: finish DERPNode.CertName validation 6 years ago
tsaddr net/tsaddr: simplify TailscaleServiceIP 5 years ago
tshttpproxy net/tshttpproxy: call winhttp calls from a fixed OS thread 5 years ago
tstun net/tstun: fix data races 4 years ago