You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/cmd
Mihai Parparita fa932fefe7 net/interfaces: redo how we get the default interface on macOS and iOS
With #6566 we added an external mechanism for getting the default
interface, and used it on macOS and iOS (see tailscale/corp#8201).
The goal was to be able to get the default physical interface even when
using an exit node (in which case the routing table would say that the
Tailscale utun* interface is the default).

However, the external mechanism turns out to be unreliable in some
cases, e.g. when multiple cellular interfaces are present/toggled (I
have occasionally gotten my phone into a state where it reports the pdp_ip1
interface as the default, even though it can't actually route traffic).

It was observed that `ifconfig -v` on macOS reports an "effective interface"
for the Tailscale utn* interface, which seems promising. By examining
the ifconfig source code, it turns out that this is done via a
SIOCGIFDELEGATE ioctl syscall. Though this is a private API, it appears
to have been around for a long time (e.g. it's in the 10.13 xnu release
at https://opensource.apple.com/source/xnu/xnu-4570.41.2/bsd/net/if_types.h.auto.html)
and thus is unlikely to go away.

We can thus use this ioctl if the routing table says that a utun*
interface is the default, and go back to the simpler mechanism that
we had before #6566.

Updates #7184
Updates #7188

Signed-off-by: Mihai Parparita <mihai@tailscale.com>
3 years ago
..
addlicense all: update tools that manage copyright headers 3 years ago
cloner all: update tools that manage copyright headers 3 years ago
containerboot ipn/ipnlocal: add support to store certs in k8s secrets 3 years ago
derper net/interfaces: redo how we get the default interface on macOS and iOS 3 years ago
derpprobe cmd/derpprobe: migrate to the prober framework 3 years ago
get-authkey get-authkey: require tags to be specified 3 years ago
gitops-pusher all: update copyright and license headers 3 years ago
hello all: update copyright and license headers 3 years ago
k8s-operator cmd/k8s-operator: add support for running an auth proxy 3 years ago
mkmanifest all: update copyright and license headers 3 years ago
mkpkg all: update copyright and license headers 3 years ago
nardump all: update copyright and license headers 3 years ago
netlogfmt all: update copyright and license headers 3 years ago
nginx-auth all: update copyright and license headers 3 years ago
pgproxy all: update copyright and license headers 3 years ago
printdep go.toolchain.rev: use new statically built toolchain 3 years ago
proxy-to-grafana all: update copyright and license headers 3 years ago
speedtest all: update copyright and license headers 3 years ago
ssh-auth-none-demo all: update copyright and license headers 3 years ago
stunc all: update copyright and license headers 3 years ago
sync-containers all: update copyright and license headers 3 years ago
tailscale all: implement pcap streaming for datapath debugging 3 years ago
tailscaled all: implement pcap streaming for datapath debugging 3 years ago
testcontrol all: update copyright and license headers 3 years ago
testwrapper all: update copyright and license headers 3 years ago
tsconnect cmd/tsconnect: update to xterm.js 5.1 3 years ago
tsshd all: update copyright and license headers 3 years ago
viewer all: update tools that manage copyright headers 3 years ago