Naman Sood and GitHub
aefbed323f
ipn,tailcfg: add VIPService struct and c2n to fetch them from client ( #14046 )
...
* ipn,tailcfg: add VIPService struct and c2n to fetch them from client
Updates tailscale/corp#22743 , tailscale/corp#22955
Signed-off-by: Naman Sood <mail@nsood.in >
* more review fixes
Signed-off-by: Naman Sood <mail@nsood.in >
* don't mention PeerCapabilityServicesDestination since it's currently unused
Signed-off-by: Naman Sood <mail@nsood.in >
---------
Signed-off-by: Naman Sood <mail@nsood.in >
2024-11-15 16:14:06 -05:00
Naman Sood and GitHub
7c6562c861
words: scale up our word count ( #14082 )
...
Updates tailscale/corp#14698
Signed-off-by: Naman Sood <mail@nsood.in >
2024-11-13 09:56:02 -05:00
Naman Sood and GitHub
22c89fcb19
cmd/tailscale,ipn,tailcfg: add tailscale advertise subcommand behind envknob ( #13734 )
...
Signed-off-by: Naman Sood <mail@nsood.in >
2024-10-16 19:08:06 -04:00
Naman Sood and GitHub
09ec2f39b5
tailcfg: add func to check for known valid ServiceProtos ( #13668 )
...
Updates tailscale/corp#23574 .
Signed-off-by: Naman Sood <mail@nsood.in >
2024-10-02 22:54:02 -04:00
Naman Sood and GitHub
f79183dac7
cmd/tsidp: add funnel support ( #12591 )
...
* cmd/tsidp: add funnel support
Updates #10263 .
Signed-off-by: Naman Sood <mail@nsood.in >
* look past funnel-ingress-node to see who we're authenticating
Signed-off-by: Naman Sood <mail@nsood.in >
* fix comment typo
Signed-off-by: Naman Sood <mail@nsood.in >
* address review feedback, support Basic auth for /token
Turns out you need to support Basic auth if you do client ID/secret
according to OAuth.
Signed-off-by: Naman Sood <mail@nsood.in >
* fix typos
Signed-off-by: Naman Sood <mail@nsood.in >
* review fixes
Signed-off-by: Naman Sood <mail@nsood.in >
* remove debugging log
Signed-off-by: Naman Sood <mail@nsood.in >
* add comments, fix header
Signed-off-by: Naman Sood <mail@nsood.in >
---------
Signed-off-by: Naman Sood <mail@nsood.in >
2024-08-08 10:46:45 -04:00
Naman Sood and GitHub
75254178a0
ipn/ipnlocal: don't bind localListener if its context is canceled ( #12621 )
...
The context can get canceled during backoff, and binding after that
makes the listener impossible to close afterwards.
Fixes #12620 .
Signed-off-by: Naman Sood <mail@nsood.in >
2024-06-26 11:18:45 -04:00
Naman Sood and GitHub
97f84200ac
wgengine/router: implement UpdateMagicsockPort for CallbackRouter ( #10494 )
...
Updates #9084 .
Signed-off-by: Naman Sood <mail@nsood.in >
2023-12-07 10:45:14 -05:00
Naman Sood and GitHub
d46a4eced5
util/linuxfw, wgengine: allow ingress to magicsock UDP port on Linux ( #10370 )
...
* util/linuxfw, wgengine: allow ingress to magicsock UDP port on Linux
Updates #9084 .
Currently, we have to tell users to manually open UDP ports on Linux when
certain firewalls (like ufw) are enabled. This change automates the process of
adding and updating those firewall rules as magicsock changes what port it
listens on.
Signed-off-by: Naman Sood <mail@nsood.in >
2023-12-05 18:12:02 -05:00
Naman Sood
650c67a0a1
tailcfg: bump CapabilityVersion for Linux netfilter NodeAttrs and c2n endpoint
...
Updates tailscale/corp#14029 .
Signed-off-by: Naman Sood <mail@nsood.in >
2023-12-05 14:22:02 -05:00
Naman Sood
0a59754eda
linuxfw,wgengine/route,ipn: add c2n and nodeattrs to control linux netfilter
...
Updates tailscale/corp#14029 .
Signed-off-by: Naman Sood <mail@nsood.in >
2023-12-05 14:22:02 -05:00
Naman Sood and GitHub
d5c460e83c
client/{tailscale,web}: add initial webUI frontend for self-updates ( #10191 )
...
Updates #10187 .
Signed-off-by: Naman Sood <mail@nsood.in >
2023-11-15 16:04:44 -05:00
Naman Sood and GitHub
e57fd9cda4
ipn/{ipnlocal,ipnstate,localapi}: add localapi endpoints for client self-update ( #10188 )
...
* ipn/{ipnlocal,ipnstate,localapi}: add localapi endpoints for client self-update
Updates #10187 .
Signed-off-by: Naman Sood <mail@nsood.in >
* depaware
Updates #10187 .
Signed-off-by: Naman Sood <mail@nsood.in >
* address review feedback
Signed-off-by: Naman Sood <mail@nsood.in >
---------
Signed-off-by: Naman Sood <mail@nsood.in >
2023-11-09 16:00:47 -05:00
Naman Sood and GitHub
7783a960e8
client/web: add metric for exit node advertising ( #9781 )
...
* client/web: add metric for exit node advertising
Updates tailscale/corp#15215
Signed-off-by: Naman Sood <mail@nsood.in >
* client/web: use http request's context for IncrementCounter
Updates #cleanup
Signed-off-by: Naman Sood <mail@nsood.in >
---------
Signed-off-by: Naman Sood <mail@nsood.in >
2023-10-12 17:02:20 -04:00
Naman Sood and GitHub
4a90a91d29
wgengine/netstack: log ForwarderRequest in readable form, only in debug mode ( #1758 )
...
* wgengine/netstack: log ForwarderRequest in readable form, only in debug mode
Fixes #1757
Signed-off-by: Naman Sood <mail@nsood.in >
2021-04-21 14:50:48 -04:00
Naman Sood and GitHub
71b7e48547
net/tsaddr: expand ephemeral nodes range to /64
...
Signed-off-by: Naman Sood <mail@nsood.in >
2021-04-19 15:54:53 -04:00
Naman Sood and GitHub
b85d80b37f
net/tsaddr: add new IP range for ephemeral nodes in Tailscale ULA ( #1715 )
...
Signed-off-by: Naman Sood <mail@nsood.in >
2021-04-16 14:47:55 -04:00
Naman Sood and GitHub
5ea53891fe
cmd/tailscaled: populate netstack variable to use dialer in SOCKS5
...
Signed-off-by: Naman Sood <mail@nsood.in >
2021-04-14 13:13:10 -04:00
Naman Sood and GitHub
31c7745631
wgengine/netstack: stop re-adding IPs registered by active TCP connections ( #1629 )
...
Signed-off-by: Naman Sood <mail@nsood.in >
2021-03-31 15:32:33 -04:00
Naman Sood and GitHub
662fbd4a09
wgengine/netstack: Allow userspace networking mode to expose subnets ( #1588 )
...
wgengine/netstack: Allow userspace networking mode to expose subnets
Updates #504
Updates #707
Signed-off-by: Naman Sood <mail@nsood.in >
2021-03-29 14:33:05 -04:00
Naman Sood
770aa71ffb
client, cmd/hello, ipn, wgengine: fix whois for netstack-forwarded connections
...
Updates #504
Updates #707
Signed-off-by: Naman Sood <mail@nsood.in >
2021-03-15 18:14:09 -04:00
Naman Sood
4c80344e27
wgengine/netstack: stop UDP forwarding when one side dies
...
Updates #504
Updates #707
Signed-off-by: Naman Sood <mail@nsood.in >
2021-03-08 13:59:37 -05:00
Naman Sood
7325b5a7ba
wgengine/netstack: add support for incoming UDP connections
...
Updates #504
Updates #707
Signed-off-by: Naman Sood <mail@nsood.in >
2021-03-08 13:27:27 -05:00
Naman Sood
d01c60dad5
wgengine/netstack: use system dialer to contact servers on localhost
...
Updates #504
Updates #707
Signed-off-by: Naman Sood <mail@nsood.in >
2021-03-03 13:27:50 -05:00
Naman Sood
95c03d1ead
wgengine/netstack: forward incoming connections to localhost
...
Updates #707
Updates #504
Signed-off-by: Naman Sood <mail@nsood.in >
2021-03-02 15:26:40 -05:00
Naman Sood and Brad Fitzpatrick
fec9dcbda1
wgengine/netstack: start SOCKS5 server in netstack mode
...
Updates #707
Updates #504
Signed-off-by: Naman Sood <mail@nsood.in >
2021-02-26 13:44:49 -08:00
Naman Sood and Brad Fitzpatrick
fe16ef6812
net/socks5: create SOCKS5 package for proxy server in userspace networking
...
Updates #707
Updates #504
Signed-off-by: Naman Sood <mail@nsood.in >
2021-02-26 13:44:49 -08:00
Naman Sood and GitHub
517c90d7e5
wgengine, cmd/tailscaled: refactor netstack, forward TCP to hello as demo ( #1301 )
...
Updates #707
Updates #504
Signed-off-by: Naman Sood <mail@nsood.in >
2021-02-25 14:18:16 -05:00
Naman Sood and Brad Fitzpatrick
07c3df13c6
wgengine/tstun: inform userspaceEngine about injected outbound packets in tundev
...
Signed-off-by: Naman Sood <mail@nsood.in >
2021-02-09 08:08:01 -08:00
Naman Sood and GitHub
420c7a35e2
wgengine/netstack: use tailscale IPs instead of a hardcoded one ( #1131 )
...
Signed-off-by: Naman Sood <mail@nsood.in >
2021-01-15 09:16:28 -05:00
Naman Sood and GitHub
f69e46175d
wengine/netstack: bump gvisor to latest version
...
* wengine/netstack: bump gvisor to latest version
Signed-off-by: Naman Sood <naman@tailscale.com >
* update dependencies
Signed-off-by: Naman Sood <naman@tailscale.com >
* Don't change hardcoded IP
Signed-off-by: Naman Sood <naman@tailscale.com >
2021-01-11 15:46:48 -05:00