webnet/tailscale
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
3,927 Commits 3 Branches 0 Tags
14d077fc3ac82d581fe989008b888cadad00b2f4
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Maisem AliandBrad Fitzpatrick 14d077fc3a ssh/tailssh: terminate ssh auth early if no policy can match 
Also bump github.com/tailscale/golang-x-crypto/ssh

Updates #3802

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-04-20 13:44:04 -07:00
Maisem AliandMaisem Ali 136f30fc92 wgengine/monitor: split the unexpected stringification log line 
It unfortuantely gets truncated because it's too long, split it into 3
different log lines to circumvent truncation.

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-04-20 12:32:15 -07:00
Maisem AliandMaisem Ali 8e40bfc6ea wgengine/monitor: ignore OS-specific uninteresting interfaces 
Currently we ignore these interfaces in the darwin osMon but then would consider it
interesting when checking if anything had changed.

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-04-20 12:32:15 -07:00
Maisem AliandMaisem Ali 91a187bf87 ssh/tailssh: make checkStillValid also consider username changes 
Currently if the policy changes and the session is logged in with local
user "u1" and the new policy says they can only login with "u2" now, the
user doesn't get kicked out because they had requested
`rando@<ssh-host>` and the defaulting had made that go to `u1`.

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-04-18 16:34:06 -07:00
Maisem AliandMaisem Ali a04eebf59f ipn/ipnlocal: also use SSHPolicies when updating filterHash 
Updates #3802

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-04-18 16:34:06 -07:00
Maisem AliandMaisem Ali 945879fa38 cmd/tailscale: [ssh] enable StrictHostKeyChecking mode 
Updates #3802

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-04-18 10:11:36 -07:00
Maisem AliandMaisem Ali 3ffd88a84a wgengine/monitor: do not set timeJumped on iOS/Android 
In `(*Mon).Start` we don't run a timer to update `(*Mon).lastWall` on iOS and
Android as their sleep patterns are bespoke. However, in the debounce
goroutine we would notice that the the wall clock hadn't been updated
since the last event would assume that a time jump had occurred. This would
result in non-events being considered as major-change events.

This commit makes it so that `(*Mon).timeJumped` is never set to `true`
on iOS and Android.

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-04-17 23:46:17 -07:00
Maisem AliandMaisem Ali 50b4b8b2c6 ipn/ipnlocal: make peerIPs return a sorted slice 
Currently peerIPs doesn't do any sorting of the routes it returns. This
is typically fine, however imagine the case of an HA subnet router
failover. When a route R moves from peer A to peer B, the output of
peerIPs changes. This in turn causes all the deephash check inside
wgengine to fail as the hashed value of [R1, R2] is different than
the hashed value of [R2, R1]. When the hash check failes, it causes
wgengine to reconfigure all routes in the OS. This is especially
problematic for macOS and iOS where we use the NetworkExtension.

This commit makes it that the peerIPs are always sorted when returned,
thus making the hash be consistent as long as the list of routes remains
static.

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-04-13 16:30:17 -07:00
Maisem AliandMaisem Ali c87ed52ad4 cmd/tailscale: add id-token subcommand 
RELNOTE=Initial support for getting OIDC ID Tokens

Updates tailscale/corp#4347

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-04-12 12:04:04 -07:00
Maisem AliandMaisem Ali 3603a18710 ipn/localapi: add endpoint to request id token 
Updates tailscale/corp#4347

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-04-05 14:48:45 -07:00
Maisem AliandMaisem Ali 035e8ab00e tailcfg: add Token{Request,Response} types 
Updates tailscale/corp#4347

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-04-05 14:48:45 -07:00
Maisem AliandGitHub ac2033d98c go.mod: bump staticcheck (#4359) 
Updates #4194

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-04-05 12:24:33 -07:00
Maisem AliandMaisem Ali 6fecc16c3b ipn/ipnlocal: do not process old status messages received out of order 
When `setWgengineStatus` is invoked concurrently from multiple
goroutines, it is possible that the call invoked with a newer status is
processed before a call with an older status. e.g. a status that has
endpoints might be followed by a status without endpoints. This causes
unnecessary work in the engine and can result in packet loss.

This patch adds an `AsOf time.Time` field to the status to specifiy when the
status was calculated, which later allows `setWgengineStatus` to ignore
any status messages it receives that are older than the one it has
already processed.

Updates tailscale/corp#2579

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-03-26 20:23:50 -07:00
Maisem AliandMaisem Ali 42ee4c917d go.toolchain.rev: pick up httptest race fix 
tailscale/go@5ce3ec4d89

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-03-25 09:53:10 -07:00
Maisem AliandMaisem Ali b2f269d5b7 net/dnsfallback: do not attempt lookups of IPs. 
Currently if the passed in host is an IP, Lookup still attempts to
resolve it with a dns server. This makes it just return the IP directly.

Updates tailscale/corp#4475

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-03-24 22:43:01 -07:00
Maisem AliandMaisem Ali b45bb577a0 net/dnscache: do not call LookupIPFallback if the context was canceled. 
When the context is canceled, dc.dialOne returns an error from line 345.
This causes the defer on line 312 to try to resolve the host again, which
triggers a dns lookup of "127.0.0.1" from derp.

Updates tailscale/corp#4475

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-03-24 22:43:01 -07:00
Maisem AliandMaisem Ali b775df0b57 ssh/tailssh_test: skip TestSSH/stdin in CI 
Updates #4051

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-03-18 10:57:12 -07:00
Maisem AliandMaisem Ali 309c0a13a5 tsweb: add FQDN to Port80Handler to allow HTTPS redirects 
When the request comes in say over http://mon, the current
implementation would rewrite it https://mon which causes the cert
validation to fail. This PR keeps the existing behavior intact but also
allows passing in a FQDN to the handler to reroute to the correct
hostname.

Related to https://github.com/tailscale/tailscale/pull/4208#pullrequestreview-913832340

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-03-18 10:16:08 -07:00
Maisem AliandMaisem Ali 7f3d0992aa Makefile: use ./tool/go everywhere 
Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-03-18 10:13:18 -07:00
Maisem AliandMaisem Ali bd073b8dd6 types/views: rename Generic to Unwrap 
Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-03-17 14:41:57 -07:00
Maisem AliandMaisem Ali 1e12a29806 ssh/tailssh_test: Skip the env test in CI 
Updates #4051

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-03-17 14:34:49 -07:00
Maisem AliandMaisem Ali 6b9d938c1a types/views: add generic Slice[T] and remove StringSlice 
Also make IPPrefixSliceOf use Slice[netaddr.IPPrefix] as it also
provides additional functions besides the standard ones provided by
Slice[T].

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-03-16 22:13:16 -07:00
Maisem AliandMaisem Ali 07f48a7bfe wgengine: handle nil netmaps when assigning isSubnetRouter. 
Fixes tailscale/coral#51

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-03-16 10:51:12 -07:00
Maisem AliandMaisem Ali 45a7f6689c tailcfg: add field to allow LocalPortForwarding in SSHAction 
Updates #3802, #4129

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-03-14 13:39:42 -07:00
Maisem AliandMaisem Ali 98b45ef12c ssh/tailssh: add support for agent forwarding. 
Updates #3802

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-03-14 13:38:53 -07:00
Maisem AliandMaisem Ali 462e75666b ssh/tailssh: start sending the server version 
Updates #3802

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-03-12 19:40:51 -08:00
Maisem AliandMaisem Ali bf3559171f ssh/tailssh: set DBUS_SESSION_BUS_ADDRESS and SSH_TTY variables 
Updates #3802

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-03-12 19:40:51 -08:00
Maisem AliandMaisem Ali 6d61b7906e ssh/tailssh: handle terminal opcodes 
Updates #3802 #4146

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-03-12 17:57:07 -08:00
Maisem AliandMaisem Ali da6ce27416 go.mod: move from github.com/gliderlabs/ssh to github.com/tailscale/ssh 
Updates #4146

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-03-12 17:57:07 -08:00
Maisem AliandMaisem Ali 888e50e1f6 ipn/ipnlocal: migrate all platforms to controlplane.tailscale.com 
Updates #3488

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-03-09 21:14:06 -08:00
Maisem AliandMaisem Ali 2bcc047d4f tailcfg: bump capVer for Noise 
Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-03-09 14:41:24 -08:00
Maisem AliandMaisem Ali 2c89b3a601 control/controlbase: make Conn.Write return consumed bytes 
Currently `Write` returns the number of ciphertext bytes written.
According to the docs for io.Writer, Write should return the amount
of bytes consumed from the input.
```
// Write writes len(p) bytes from p to the underlying data stream.
// It returns the number of bytes written from p (0 <= n <= len(p))
// and any error encountered that caused the write to stop early.
// Write must return a non-nil error if it returns n < len(p).
// Write must not modify the slice data, even temporarily.
Write(p []byte) (n int, err error)
```

Fixes #4126

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-03-09 11:42:11 -08:00
Maisem AliandMaisem Ali e82a74553b control/controlclient: make MapRequests go over noise. 
Updates #3488

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-03-09 11:32:11 -08:00
Maisem AliandMaisem Ali 56bf2ce642 ssh/tailssh: handle local port forwarding 
Updates #3802

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-03-09 11:31:04 -08:00
Maisem AliandMaisem Ali 598c7a22e7 ssh/tailssh: use lu.Username not lu.Name. 
Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-03-08 22:39:03 -08:00
Maisem AliandMaisem Ali 06c147d848 ssh/tailssh: create login sessions for new connections 
Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-03-08 21:47:19 -08:00
Maisem AliandMaisem Ali ba2c0c3145 control/controlclient: call direct.Close after map requests are complete 
This was causing a flake in another repo.

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-03-08 21:17:35 -08:00
Maisem AliandMaisem Ali 2fb087891b net/socks5: always close client connections after serving 
Customer reported an issue where the connections were not closing, and
would instead just stay open. This commit makes it so that we close out
the connection regardless of what error we see. I've verified locally
that it fixes the issue, we should add a test for this.

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-03-08 12:52:20 -08:00
Maisem AliandMaisem Ali 91a8cdc84b control/controlclient: make Auto.Shutdown call Direct.Close 
Updates #3488

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-03-08 11:57:41 -08:00
Maisem AliandMaisem Ali 0f37317664 control/controlclient: make RegisterRequest go over Noise 
Updates #3488

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-03-08 11:57:41 -08:00
Maisem AliandMaisem Ali 0588ca5d8b control/controlclient: make SetDNS attempt to go over Noise first 
Updates #3488

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-03-07 16:27:13 -08:00
Maisem AliandMaisem Ali da1821197a tailcfg: add SetDNSResponse 
Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-03-07 16:27:13 -08:00
Maisem AliandMaisem Ali 0f31a0fc76 control/controlclient: add Noise client 
Updates #3488

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-03-07 15:43:19 -08:00
Maisem AliandMaisem Ali 249758df90 control/controlclient: start fetching the server noise key 
Updates #3488

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-03-07 11:29:27 -08:00
Maisem AliandBrad Fitzpatrick c85694fac4 types/views: add ContainsExitRoutes to IPPrefixSlice 
Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-03-04 09:08:42 -08:00
Maisem AliandMaisem Ali 518f6cee63 ipn/store: [TestNewStore] do not use an empty file 
Otherwise it would log warnings about an empty file.
```
    stores.go:138: store.NewFileStore("/tmp/3777352782"): file empty; treating it like a missing file [warning]
```

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-02-28 18:26:24 -08:00
Maisem AliandMaisem Ali 497324ddf6 ipn/store: add common package for instantiating ipn.StateStores 
Also move KubeStore and MemStore into their own package.

RELNOTE: tsnet now supports providing a custom ipn.StateStore.

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-02-28 13:23:33 -08:00
Maisem AliandMaisem Ali 38c59c0ad2 tsnet: fix typo in Ephemeral 
Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-02-22 15:35:24 -08:00
Maisem AliandMaisem Ali c7a8f0992d ipn/ipnlocal: use views for Peer.PrimaryRoutes and Peer.Tags 
RELNOTE=`tailscale status --json` now shows Tags and PrimaryRoutes

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-02-22 10:09:02 -08:00
Maisem AliandMaisem Ali 9cbb0913be ipn/{ipnlocal,ipnstate}: add Tags and PrimaryRoutes to PeerStatus 
Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-02-21 20:06:48 -08:00
Maisem AliandMaisem Ali f9a50779e2 cmd/tailscaled: add -state=mem: to support creation of an ephemeral node. 
RELNOTE=`tailscaled --state=mem:` registers as an ephemeral node and
does not store state to disk.

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-02-18 13:40:39 -08:00
Maisem AliandMaisem Ali 72d8672ef7 tailcfg: make Node.Hostinfo a HostinfoView 
Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-02-16 12:55:57 -08:00
Maisem AliandMaisem Ali 53998e26a6 tailcfg: introduce HostinfoView 
Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-02-16 12:55:57 -08:00
Maisem AliandMaisem Ali e64cecac8e chirp: remove regex dependency 
Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-02-03 11:24:17 -08:00
Maisem AliandMaisem Ali e3dccfd7ff chirp: handle multiline responses from BIRD 
Also add tests to verify the parsing logic.

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-02-02 13:48:07 -08:00
Maisem AliandMaisem Ali 0ada42684b Makefile: update make spk target to use the new go spk builder 
Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-01-21 12:27:00 -08:00
Maisem AliandMaisem Ali 26d4ccb816 scripts/installer.sh: add support to use the unstable track. 
Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-01-12 13:41:11 -08:00
Maisem AliandMaisem Ali 9e8a432146 cmd/tailscale/cli/web: fix typo where the html template data was being 
replaced instead of being appended to.

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-01-12 12:41:37 -08:00
Maisem AliandMaisem Ali 138662e248 Dockerfile.base: update to alpine:3.15 
Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-01-07 07:33:25 -08:00
Maisem AliandMaisem Ali 01a9906bf8 tool/go: add wrapper to download and use go.toolchain.rev go version. 
Also update build_dist.sh and build_docker.sh to use the wrapper.

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-01-04 09:45:29 -08:00
Maisem AliandMaisem Ali dd45bba76b tsnet: add Start method to allow connecting to the tailnet without 
requiring a call to Dial/Listen.

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-01-03 11:56:54 -08:00
Maisem AliandMaisem Ali 431329e47c build_docker.sh: add env overrides 
Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2022-01-03 10:59:55 -08:00
Maisem AliandMaisem Ali 44937b59e7 tsnet: add Dial method to allow dialing out to the tailnet. 
Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2021-12-28 10:19:36 -08:00
Maisem AliandMaisem Ali d24a8f7b5a wgengine/router{windows}: return the output from the firewallTweaker 
on error.

While debugging a customer issue where the firewallTweaker was failing
the only message we have is `router: firewall: error adding
Tailscale-Process rule: exit status 1` which is not really helpful.
This will help diagnose firewall tweaking failures.

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2021-12-13 10:07:32 -08:00
Maisem AliandMaisem Ali 0a9932f3b2 build_docker.sh: prefix version strings with v 
Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2021-12-03 13:55:09 -08:00
Maisem AliandMaisem Ali 9feb483ad3 build_docker.sh: use github.com/tailscale/mkctr instead of docker 
Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2021-11-22 11:39:30 -08:00
Maisem AliandMaisem Ali d6dde5a1ac ipn/ipnlocal: handle key extensions after key has already expired 
Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2021-11-08 18:15:09 -08:00
Maisem AliandMaisem Ali eccc2ac6ee net/interfaces/windows: update Tailscale interface detection logic to 
account for new wintun naming.

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2021-11-08 07:44:33 -08:00
Maisem AliandMaisem Ali 05e55f4a0b logtail/filch: limit buffer file size to 50MB 
Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2021-10-29 13:31:30 -07:00
Maisem AliandMaisem Ali 81cabf48ec control/controlclient,tailcfg: propagate registration errors to the frontend 
Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2021-10-27 06:57:26 -07:00
Maisem AliandMaisem Ali 10745c099a tailcfg: add Node.Tags 
Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2021-10-25 22:04:45 -07:00
Maisem AliandMaisem Ali 85fa1b0d61 wgengine: fail NewUserspaceEngine if wireguard device doesn't come up 
Just something I ran across while debugging an unrelated failure. This
is not in response to any bug/issue.

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2021-10-25 12:34:14 -07:00
Maisem AliandMaisem Ali 0bf515e780 cmd/tailscale: changes to --advertise-tags should wait for possible 
reauth.

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2021-10-20 10:31:40 -04:00
Maisem AliandMaisem Ali 53199738fb wgengine: don't try to delete legacy netfilter rules on synology. 
Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2021-10-18 14:51:25 -04:00
Maisem AliandMaisem Ali 27799a1a96 wgengine: only use AmbientCaps on DSM7+ 
Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2021-10-18 13:39:51 -04:00
Maisem AliandMaisem Ali 7817ab6b20 net/dns/resolver: set maxDoHInFlight to 1000 on iOS 15+. 
Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2021-10-14 23:29:23 -04:00
Maisem AliandMaisem Ali 2662a1c98c hostinfo: add EnvType for Kubernetes 
Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2021-10-14 23:02:26 -04:00
Maisem AliandMaisem Ali c6d3f622e9 ipn/ipnlocal: use netaddr.IPSetBuilder when constructing list of interface IPPrefixes. 
Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2021-10-14 18:53:54 -04:00
Maisem AliandMaisem Ali e538d47bd5 docs/k8s: update run.sh to use the correct socket path 
Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2021-10-14 18:09:12 -04:00
Maisem AliandMaisem Ali a6c3de72d6 docs/k8s: use ghcr.io for base image 
Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2021-10-13 17:55:14 -04:00
Maisem AliandMaisem Ali 9ab8492694 docker: install ip6tables 
Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2021-10-13 17:34:23 -04:00
Maisem AliandMaisem Ali 45d4adcb63 docs/k8s: use tailscale/tailscale as base image 
Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2021-10-13 15:34:44 -04:00
Maisem AliandMaisem Ali 061dab5d61 docker: only add tailscale and tailscaled binaries 
Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2021-10-13 14:43:29 -04:00
Maisem AliandMaisem Ali 2c403cbb31 docs/k8s: add instructions on how to run as a sidecar or a proxy. 
Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2021-10-13 13:26:53 -04:00
Maisem AliandMaisem Ali c121fa81c4 tsnet: add TLS and LetsEncrypt example. 
Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2021-10-12 15:31:18 -07:00
Maisem AliandMaisem Ali 52be1c0c78 tsnet: run the LocalAPI handler 
Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2021-10-07 10:01:03 -07:00
Maisem AliandMaisem Ali 0842e2f45b ipn/store: add ability to store data as k8s secrets. 
Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2021-09-01 12:50:59 -07:00
Maisem AliandMaisem Ali fd4838dc57 wgengine/userspace: add support to automatically enable/disable the tailscale 
protocol in BIRD, when the node is a primary subnet router as determined
by control.

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2021-08-30 10:18:05 -07:00
Maisem AliandMaisem Ali ae9b3f38d6 github: set GOOS/GOARCH for go list 
Currently we do not set the env variables for `go list ./...` resulting
in errors like
```
build constraints exclude all Go files in
/home/runner/work/tailscale/tailscale/chirp
```

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2021-08-26 16:27:37 -07:00
Maisem AliandMaisem Ali baf8854f9a tempfork/wireguard-windows: remove the old windows firewall code now that we are no 
longer relying on it.

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2021-08-26 15:00:45 -07:00
Maisem AliandMaisem Ali 1f006025c2 net/tstun: fix build on arm 
Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2021-08-18 15:28:14 -07:00
Maisem AliandMaisem Ali 9f62cc665e tailscaled: try migrating old state on synology devices 
Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2021-08-18 13:45:15 -07:00
Maisem AliandMaisem Ali 5c383bdf5d wgengine/router: pass in AmbientCaps when calling ip rule 
Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2021-08-18 13:28:53 -07:00
Maisem AliandDavid Crawshaw ec52760a3d wgengine/router_windows: support toggling local lan access when using 
exit nodes.

Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2021-06-29 09:22:10 -07:00
Maisem AliandMaisem Ali f482321f67 ipn/ipnlocal: support exit node local access switching on darwin. 
Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2021-06-16 19:28:02 +05:00
Maisem AliandMaisem Ali 2919b3e3e6 wf: loopback condition should use MatchTypeFlagsAllSet. 
Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2021-06-16 12:57:57 +05:00
Maisem AliandMaisem Ali f944614c5c cmd/tailscale/web: add support for QNAP 
Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2021-06-10 19:06:05 +05:00
Maisem AliandMaisem Ali 95e296fd96 cmd/tailscale/web: restrict web access to synology admins. 
Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2021-06-03 08:41:47 +05:00
Maisem AliandMaisem Ali 234cc87f48 cmd/tailscaled: use the wf package instead of wireguard-windows/firewall 
Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2021-05-17 13:07:25 -07:00
Maisem AliandMaisem Ali 590792915a wgengine/router{win}: ignore broadcast routes added by Windows when removing routes. 
Signed-off-by: Maisem Ali <maisem@tailscale.com>
 2021-04-24 14:13:35 -07:00