wgengine/magicsock: make debugNeverDirectUDP influence remote peer decisions

By dropping inbound disco.Ping messages received over direct UDP paths. Fixes #18560 Signed-off-by: Jordan Whited <jordan@tailscale.com>
2026-01-29 15:41:55 -08:00
parent 3ce13eb2b9
commit 3b6d542923
2 changed files with 6 additions and 1 deletions
@@ -2555,6 +2555,10 @@ func (c *Conn) handlePingLocked(dm *disco.Ping, src epAddr, di *discoInfo, derpN

 	// This is a naked [disco.Ping] without a VNI.

+	if debugNeverDirectUDP() && !isDerp {
+		return
+	}
+
 	// If we can figure out with certainty which node key this disco
 	// message is for, eagerly update our [epAddr]<>node and disco<>node
 	// mappings to make p2p path discovery faster in simple