You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/ipn/ipnlocal
Brad Fitzpatrick c2efe46f72 ipn/ipnlocal: restrict exit node DoH server based on ACL'ed packet filter
Don't be a DoH DNS server to peers unless the Tailnet admin has permitted
that peer autogroup:internet access.

Updates #1713

Change-Id: Iec69360d8e4d24d5187c26904b6a75c1dabc8979
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
3 years ago
..
dnsconfig_test.go ipn/ipnlocal: for IPv6-only nodes, publish IPv6 MagicDNS records of peers 3 years ago
local.go ipn/ipnlocal: restrict exit node DoH server based on ACL'ed packet filter 3 years ago
local_test.go ipn/ipnlocal: use netaddr.IPSetBuilder when constructing list of interface IPPrefixes. 3 years ago
loglines_test.go ipn/ipnstate: use key.NodePublic instead of tailcfg.NodeKey. 3 years ago
peerapi.go ipn/ipnlocal: restrict exit node DoH server based on ACL'ed packet filter 3 years ago
peerapi_macios_ext.go all: simplify ts_macext build tags 3 years ago
peerapi_test.go ipn/ipnlocal: restrict exit node DoH server based on ACL'ed packet filter 3 years ago
state_test.go ipn/ipnlocal: handle key extensions after key has already expired 3 years ago