webnet/tailscale
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
1,758 Commits 3 Branches 0 Tags
52e24aa966ffaae20afbf0b5561bc1d34c102d33
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Brad FitzpatrickandBrad Fitzpatrick 52e24aa966 net/{interfaces,ns}: add tailscaled-mode darwin routing looping prevention 
Fixes #1331

Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
 2021-02-14 12:47:47 -08:00
Brad Fitzpatrick 4f7d60ad42 wgengine/monitor: add a darwin implementation for tailscaled mode 
Tangentially related to #987, #177, #594, #925, #505

Motivated by rebooting a launchd-controlled tailscaled and it going
into SetNetworkUp(false) mode immediately because there really is no
network up at system boot, but then it got stuck in that paused state
forever, without a monitor implementation.
 2021-02-13 21:09:27 -08:00
Brad Fitzpatrick 29b028b9c4 cmd/tailscaled: add subcommand on darwin to install+start tailscaled under launchd 
Tangentially related to #987, #177, #594, #925.
 2021-02-13 12:57:49 -08:00
Brad Fitzpatrick 54e108ff4e paths: update some default paths for darwin 2021-02-13 12:10:20 -08:00
Brad Fitzpatrick 20e66c5b92 net/interfaces: reconcile interface filtering with address printing in logs 
The interface.State logging tried to only log interfaces which had
interesting IPs, but the what-is-interesting checks differed between
the code that gathered the interface names to print and the printing
of their addresses.
 2021-02-12 18:42:45 -08:00
Brad Fitzpatrick ca51529b81 derp/derphttp: return nicer errors from Recv on Close 2021-02-12 12:04:16 -08:00
Brad Fitzpatrick 741d654aa3 derp/derphttp: add a context and infoLogger option to RunWatchConnectionLoop 2021-02-12 10:59:11 -08:00
Brad Fitzpatrick be906dabd4 version: bump date 2021-02-11 20:11:00 -08:00
Brad Fitzpatrick 6680976b50 cmd/tailscaled: pick automatic tun device name on darwin 2021-02-11 20:10:07 -08:00
Brad Fitzpatrick 88ab0173a7 wgengine/router: fix BSD router to support multiple local addrs, IPv6 
Fixes #1201
 2021-02-11 19:13:03 -08:00
Brad Fitzpatrick 5378776043 cmd/hello: chop DNS name at first dot 2021-02-11 16:38:26 -08:00
Brad FitzpatrickandBrad Fitzpatrick 917307a90c wgengine/tstun: reply to MagicDNS pings 
Fixes #849

Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
 2021-02-11 11:55:38 -08:00
Brad Fitzpatrick 34ffd4f7c6 cmd/hello: serve fake data in dev mode on whois failure 2021-02-11 10:57:08 -08:00
Brad Fitzpatrick de3001bc79 cmd/hello: in dev mode, live reload template 2021-02-11 10:53:33 -08:00
Brad FitzpatrickandBrad Fitzpatrick 1ec64bc94d wgengine/router: add another Windows firewall rule to allow incoming UDP 
Based on @sailorfrag's research.

Fixes #1312

Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
 2021-02-10 13:12:17 -08:00
Brad FitzpatrickandBrad Fitzpatrick 7e201806b1 wgengine/magicsock: reconnect to DERP home after network comes back up 
Updates #1310
 2021-02-10 10:29:03 -08:00
Brad Fitzpatrick cbd6224ca4 wgengine/winnet: don't build on non-windows 
It only affects 'go install ./...', etc, and only on darwin/arm64 (M1 Macs) where
the go-ole package doesn't compile.

No need to build it.

Updates #943
 2021-02-09 21:09:24 -08:00
Brad Fitzpatrick 9b4e50cec0 wgengine/magicsock: fix typo in comment 2021-02-09 09:37:24 -08:00
Brad FitzpatrickandBrad Fitzpatrick 6b365b0239 wgengine/magicsock: fix DERP reader hang regression during concurrent reads 
Fixes #1282

Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
 2021-02-08 14:30:15 -08:00
Brad Fitzpatrick 6d2b8df06d wgengine/magicsock: add disabled failing (deadlocking) test for #1282 
The fix can make this test run unconditionally.

This moves code from 5c619882bc for
testability but doesn't fix it yet. The #1282 problem remains (when I
wrote its wake-up mechanism, I forgot there were N DERP readers
funneling into 1 UDP reader, and the code just isn't correct at all
for that case).

Also factor out some test helper code from BenchmarkReceiveFrom.

The refactoring in magicsock.go for testability should have no
behavior change.
 2021-02-06 21:34:16 -08:00
Brad FitzpatrickandBrad Fitzpatrick 1e7a35b225 types/netmap: split controlclient.NetworkMap off into its own leaf package 
Updates #1278

Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
 2021-02-05 16:18:52 -08:00
Brad Fitzpatrick ddfcc4326c types/persist: split controlclient.Persist into a small leaf package 
This one alone doesn't modify the global dependency map much
(depaware.txt if anything looks slightly worse), but it leave
controlclient as only containing NetworkMap:

bradfitz@tsdev:~/src/tailscale.com/ipn$ grep -F "controlclient." *.go
backend.go:     NetMap        *controlclient.NetworkMap // new netmap received
fake_test.go:   b.notify(Notify{NetMap: &controlclient.NetworkMap{}})
fake_test.go:   b.notify(Notify{NetMap: &controlclient.NetworkMap{}})
handle.go:      netmapCache       *controlclient.NetworkMap
handle.go:func (h *Handle) NetMap() *controlclient.NetworkMap {

Once that goes into a leaf package, then ipn doesn't depend on
controlclient at all, and then the client gets smaller.

Updates #1278
 2021-02-05 15:25:33 -08:00
Brad FitzpatrickandBrad Fitzpatrick 6064b6ff47 wgengine/wgcfg/nmcfg: split control/controlclient/netmap.go into own package 
It couldn't move to ipnlocal due to test dependency cycles.

Updates #1278

Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
 2021-02-05 14:21:30 -08:00
Brad Fitzpatrick fb6b0e247c cmd/tailscaled: rename Windows service to just Tailscale 
Updates #1232
 2021-02-05 11:13:34 -08:00
Brad Fitzpatrick 98f9e82c62 logpolicy: on Windows, use tailscale-ipn log name if it already existed 
For the migration to tailscaled.exe on Windows, don't create a new logid
if one existed under the old filename.

Updates #1232
 2021-02-05 10:57:51 -08:00
Brad Fitzpatrick e8d4afedd1 control/controlclient: don't call lite endpoint update path when logged out 
This was the other half of the #1271 problem.

Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
 2021-02-05 10:00:35 -08:00
Brad Fitzpatrick a7562be5e1 cmd/tailscaled: move more of the Windows server setup code into tailscaled 
Updates #1232
 2021-02-05 09:53:54 -08:00
Brad Fitzpatrick 6f7974b7f2 cmd/tailscaled: add missing depaware.txt update 2021-02-05 08:48:00 -08:00
Brad Fitzpatrick 6099ecf7f4 cmd/tailscaled: run as a service on Windows 
Updates #1232
 2021-02-05 08:46:12 -08:00
Brad Fitzpatrick 7529b74018 control/controlclient: avoid crash sending map request with zero node key 
Fixes #1271

Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
 2021-02-04 16:23:50 -08:00
Brad FitzpatrickandDave Anderson d76334d2f0 ipn: split LocalBackend off into new ipn/ipnlocal package 
And move a couple other types down into leafier packages.

Now cmd/tailscale doesn't bring in netlink, magicsock, wgengine, etc.

Fixes #1181

Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
 2021-02-04 14:04:23 -08:00
Brad Fitzpatrick 6254efb9ef cmd/tailscale{,d}: move debug subcommand to tailscaled 
Work on reducing the size of the tailscale binary, which is
currently pulling in most of the same code as tailscaled.

Updates #1181
 2021-02-04 12:23:06 -08:00
Brad Fitzpatrick 70eb05fd47 wgengine: access flow pending problem with lock held 
Missed review feedback from just-submitted d37058af72.
 2021-02-04 11:18:32 -08:00
Brad FitzpatrickandBrad Fitzpatrick d37058af72 net/packet: add some more TSMP packet reject reasons and MaybeBroken bit 
Unused for now, but I want to backport this commit to 1.4 so 1.6 can
start sending these and then at least 1.4 logs will stringify nicely.

Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
 2021-02-04 10:59:07 -08:00
Brad FitzpatrickandBrad Fitzpatrick f7eed25bb9 wgengine/magicsock: filter disco packets and packets when stopped from wireguard 
Fixes #1167
Fixes tailscale/corp#219

Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
 2021-02-04 09:38:02 -08:00
Brad Fitzpatrick 9a70789853 cmd/tailscale: fix IPN message reading stall in tailscale status -web 
Fixes #1234
Updates #1254
 2021-02-02 14:51:44 -08:00
Brad Fitzpatrick a2aa6cd2ed wgengine/router: clarify disabled IPv6 message on Linux 2021-02-02 14:51:44 -08:00
Brad Fitzpatrick c7d4bf2333 cmd/tailscale/cli: recommend sudo for 'tailscale up' on failure 
Fixes #1220
 2021-02-01 13:53:57 -08:00
Brad FitzpatrickandBrad Fitzpatrick 2889fabaef cmd/tailscaled/tailscaled.service: revert recent hardening for now 
It broke Debian Stretch. We'll try again later.

Updates #1245

Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
 2021-02-01 13:37:48 -08:00
Brad Fitzpatrick 761188e5d2 wgengine/wgcfg: fix validateEndpoints of empty string 
Updates tailscale/corp#1238
 2021-01-30 11:17:55 -08:00
Brad Fitzpatrick 914a486af6 safesocket: refactor macOS auth code, pull out separate LocalTCPPortAndToken 2021-01-29 14:34:57 -08:00
Brad Fitzpatrick 60e189f699 cmd/hello: use safesocket client to connect 2021-01-29 13:49:17 -08:00
Brad Fitzpatrick 006a224f50 ipn/ipnserver, cmd/hello: do whois over unix socket, not debug http 
Start of a local HTTP API. Not a stable interface yet.
 2021-01-29 13:23:13 -08:00
Brad FitzpatrickandBrad Fitzpatrick 0bc73f8e4f cmd/hello: new hello.ipn.dev server 
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
 2021-01-29 12:23:13 -08:00
Brad Fitzpatrick c611d8480b cmd/tailscaled: add whois/identd-ish debug handler 2021-01-28 15:31:52 -08:00
Brad FitzpatrickandDave Anderson c7fc4a06da wgengine/router: don't configure IPv6 on Linux when IPv6 is unavailable 
Fixes #1214

Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
 2021-01-28 13:35:11 -08:00
Brad FitzpatrickandBrad Fitzpatrick 4d943536f1 wgengine: don't leak TUN device in NewUserspaceEngine error path 
Updates #1187

Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
 2021-01-27 11:06:56 -08:00
Brad Fitzpatrick 9f5b0d058f wgengine: fix bugs from earlier fix 
Fixes a regression from e970ed0995 that wasn't covered by tests
in this repo. (Our end-to-end tests in another repo caught this.)

Updates #1204
 2021-01-27 10:32:08 -08:00
Brad FitzpatrickandBrad Fitzpatrick 35e10c78fc net/interfaces: don't send over zt* interfaces 
Fixes #1208

Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
 2021-01-26 15:20:43 -08:00
Brad FitzpatrickandBrad Fitzpatrick e970ed0995 wgengine: fix crash reading long UAPI lines from legacy peers 
Also don't log.Fatalf in a function returning an error.

Fixes #1204

Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
 2021-01-26 11:39:13 -08:00
Brad Fitzpatrick a7edcd0872 ipn/ipnstate: update tailscale status -web to match CLI 2021-01-26 08:29:59 -08:00
Brad Fitzpatrick a98538f84a Merge branch 'main' of github.com:tailscale/tailscale into main 2021-01-25 15:53:13 -08:00
Brad FitzpatrickandBrad Fitzpatrick c3c59445ff ipn/ipnserver: on Windows in unattended mode, wait for Engine forever 
Updates #1187
 2021-01-25 15:52:24 -08:00
Brad Fitzpatrick 0dde8fa0a8 ipn/ipnserver: rearrange some code 
No functional change. Make a future diff easier to read.
 2021-01-25 15:46:39 -08:00
Brad Fitzpatrick 4d3c09ced4 ipn/ipnserver: on Windows in unattended mode, wait for Engine forever 
Updates #1187
 2021-01-25 15:32:13 -08:00
Brad Fitzpatrick 4fea604979 wgengine/router: stop setPrivateNetwork goroutine on configureInterface failure 
On Windows, configureInterface starts a goroutine reconfiguring the
Windows firewall.

But if configureInterface fails later, that goroutine kept running and
likely failing forever, spamming logs. Make it stop quietly if its
launching goroutine filed.
 2021-01-25 13:22:51 -08:00
Brad Fitzpatrick 9ce92aad3e cmd/tailscaled: update depaware.txt 2021-01-22 14:44:40 -08:00
Brad Fitzpatrick fa3543d629 control/controlclient: use more direct way of getting the MagicDNS suffix 
Suggested by Avery earlier. Ends up fixing bug in "tailscale status" when
MagicDNS if off too:
https://forum.tailscale.com/t/1-3-293-is-released-a-1-4-0-pre-release/349/11?u=bradfitz
 2021-01-22 14:30:56 -08:00
Brad Fitzpatrick e7bf144c3f ipn, wgengine/filter: fix Shields Up recent regression and old bug 
Fixes #1192 (regression)
Fixes #1193 (old bug)
 2021-01-22 13:39:53 -08:00
Brad Fitzpatrick 97496a83af wgengine/tstun: also support DropSilently on PostFilterIn 
Not a problem (yet). But should be consistent with other places that support both
types of drops.
 2021-01-22 13:22:32 -08:00
Brad Fitzpatrick eb47cba435 cmd/tailscaled: don't require --state for --cleanup 2021-01-22 11:35:22 -08:00
Brad Fitzpatrick daf2c70a08 go.mod: bump wireguard-go 2021-01-21 20:03:35 -08:00
Brad Fitzpatrick 4306433d1c cmd/tailscale: make "tailscale ping" also resolve names without DNS 
This lets "tailscale ping $NAME" work even if MagicDNS is off, letting you
ping a name that shows up in "tailscale status".

More user friendly.
 2021-01-21 15:45:36 -08:00
Brad FitzpatrickandBrad Fitzpatrick 9541886856 wgengine/magicsock: disable regular STUNs for all platforms by default 
Reduces background CPU & network.

Updates #1034

Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
 2021-01-21 14:56:07 -08:00
Brad FitzpatrickandBrad Fitzpatrick 54d0d83b67 safesocket: on Linux, make /var/run/tailscale be 0755 
Continuation of earlier two umask changes,
5611f290eb and
d6e9fb1df0.

This change mostly affects us, running tailscaled as root by hand (wit
a umask of 0077), not under systemd. End users running tailscaled
under systemd won't have a umask.

Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
 2021-01-21 13:23:14 -08:00
Brad Fitzpatrick c55d26967b wgengine/magicsock: log more details of endpoints learned over disco 
Also, don't try to use IPv6 LinkLocalUnicast addresses for now. Like endpoints
exchanged with control, we share them but don't yet use them.

Updates #1172
 2021-01-21 08:06:14 -08:00
Brad Fitzpatrick 9f1b02699a tstime: add RandomDurationBetween helper 
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
 2021-01-21 07:54:14 -08:00
Brad Fitzpatrick a905ce5607 control/controlclient: add debug knob to not use control's endpoints 2021-01-20 21:31:06 -08:00
Brad Fitzpatrick 359055d3fa wgengine/magicsock: fix logging regression 
c8c493f3d9 made it always say
`created=false` which scared me when I saw it, as that would've implied
things were broken much worse. Fortunately the logging was just wrong.
 2021-01-20 20:48:02 -08:00
Brad Fitzpatrick b5628cee4e control/controlclient: add detail to verbose log about route skips 2021-01-20 19:28:21 -08:00
Brad FitzpatrickandBrad Fitzpatrick edf64e0901 wgengine/magicsock: send, use endpoints in CallMeMaybe messages 
Fixes #1172

Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
 2021-01-20 14:59:41 -08:00
Brad FitzpatrickandBrad Fitzpatrick ec77b80c53 tailcfg, control/controlclient: add mapver 10: MapResponse.PeerSeenChange 
This adds a more wire-efficient way of updating peers' Node.LastSeen times.

Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
 2021-01-20 13:20:21 -08:00
Brad FitzpatrickandBrad Fitzpatrick b5b4992eff disco: support parsing/encoding endpoints in call-me-maybe frames 
Updates #1172

Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
 2021-01-20 12:16:33 -08:00
Brad FitzpatrickandBrad Fitzpatrick 187e22a756 wgengine/magicsock: don't run the DERP cleanup so often 
To save CPU and wakeups, don't run the DERP cleanup timer regularly
unless there is a non-home DERP connection open.

Also eliminates the goroutine, moving to a time.AfterFunc.

Updates #1034

Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
 2021-01-19 18:14:25 -08:00
Brad Fitzpatrick b405644f5d api.md: add TOC 2021-01-19 12:35:09 -08:00
Brad Fitzpatrick edce91a8a6 wgengine/magicsock: fix a naked return bug/crash where we returned (nil, true) 
The 'ok' from 'ipp, ok :=' above was the result parameter ok. Whoops.
 2021-01-19 10:57:40 -08:00
Brad FitzpatrickandBrad Fitzpatrick 51bd1feae4 wgengine/magicsock: add single element IPPort->endpoint cache in receive path 
name           old time/op  new time/op  delta
ReceiveFrom-4  21.8µs ± 2%  20.9µs ± 2%  -4.27%  (p=0.000 n=10+10)

Updates #414

Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
 2021-01-18 21:40:58 -08:00
Brad FitzpatrickandBrad Fitzpatrick 5c619882bc wgengine/magicsock: simplify ReceiveIPv4+DERP path 
name           old time/op  new time/op  delta
ReceiveFrom-4  35.8µs ± 3%  21.9µs ± 5%  -38.92%  (p=0.008 n=5+5)

Fixes #1145
Updates #414

Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
 2021-01-18 15:23:17 -08:00
Brad Fitzpatrick 3fa86a8b23 wgengine/magicsock: use relatively new netaddr.IPPort.IsZero method 2021-01-15 19:21:10 -08:00
Brad Fitzpatrick 4811236189 wgengine/magicsock: speed up BenchmarkReceiveFrom, store context.Done chan 
context.cancelCtx.Done involves a mutex and isn't as cheap as I
previously assumed. Convert the donec method into a struct field and
store the channel value once. Our one magicsock.Conn gets one pointer
larger, but it cuts ~1% of the CPU time of the ReceiveFrom benchmark
and removes a bubble from the --svg output :)
 2021-01-15 19:19:27 -08:00
Brad Fitzpatrick c78ed5b399 go.sum: update (forgotten after earlier wireguard-go update again) 2021-01-15 19:19:27 -08:00
Brad FitzpatrickandBrad Fitzpatrick b560386c1a net/packet, wgengine, tstun: add inter-node TSMP protocol for connect errors 
This adds a new IP Protocol type, TSMP on protocol number 99 for
sending inter-tailscale messages over WireGuard, currently just for
why a peer rejects TCP SYNs (ACL rejection, shields up, and in the
future: nothing listening, something listening on that port but wrong
interface, etc)

Updates #1094
Updates tailscale/corp#1185

Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
 2021-01-15 14:03:57 -08:00
Brad FitzpatrickandBrad Fitzpatrick 5611f290eb ipn, ipnserver: only require sudo on Linux for mutable CLI actions 
This partially reverts d6e9fb1df0, which modified the permissions
on the tailscaled Unix socket and thus required "sudo tailscale" even
for "tailscale status".

Instead, open the permissions back up (on Linux only) but have the
server look at the peer creds and only permit read-only actions unless
you're root.

In the future we'll also have a group that can do mutable actions.

On OpenBSD and FreeBSD, the permissions on the socket remain locked
down to 0600 from d6e9fb1df0.

Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
 2021-01-15 10:13:00 -08:00
Brad Fitzpatrick a45665426b cmd/tailscale/cli: tweak the status name column a bit 
* make peers without DNS names show their hostnames as always one column, for cut/etc users
* remove trailing dot from shared peers' DNS names
 2021-01-15 07:46:58 -08:00
Brad Fitzpatrick 3ac952d4e9 go.sum: update 2021-01-14 20:19:44 -08:00
Brad Fitzpatrick a4b39022e0 wgengine/tsdns: fix MagicDNS lookups of shared nodes 
Fixes tailscale/corp#1184
 2021-01-14 14:49:32 -08:00
Brad Fitzpatrick b00c0e5f60 go.sum: update 2021-01-14 14:49:32 -08:00
Brad Fitzpatrick 017dcd520f tsweb: export VarzHandler 2021-01-14 11:49:44 -08:00
Brad Fitzpatrick c1dabd9436 control/controlclient: let clients opt in to Sharer-vs-User split model 
Updates tailscale/corp#1183
 2021-01-13 15:03:15 -08:00
Brad Fitzpatrick b987b2ab18 control/controlclient: treat node sharer as owner for display purposes 
This make clients (macOS, Windows, tailscale status) show the node
sharer's profile rather than the node owner (which may be anonymized).

Updates #992
 2021-01-12 12:15:35 -08:00
Brad Fitzpatrick 7acd3397d5 README: names of contributors, link to them instead 2021-01-12 08:24:32 -08:00
Brad FitzpatrickandBrad Fitzpatrick 9d73f84a71 tailcfg, control/controlclient: make MapResponse.CollectServices an opt.Bool 
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
 2021-01-12 08:08:00 -08:00
Brad Fitzpatrick 85e54af0d7 wgengine: on TCP connect fail/timeout, log some clues about why it failed 
So users can see why things aren't working.

A start. More diagnostics coming.

Updates #1094
 2021-01-11 22:09:09 -08:00
Brad Fitzpatrick 5eeaea9ef9 net/packet: add TCPFlag type and some more constants 
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
 2021-01-11 22:09:09 -08:00
Brad Fitzpatrick ad3fb6125d net/flowtrack: add Tuple.String method 
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
 2021-01-11 22:09:09 -08:00
Brad FitzpatrickandBrad Fitzpatrick d6e9fb1df0 all: adjust Unix permissions for those without umasks 
Fixes tailscale/corp#1165

Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
 2021-01-11 19:24:41 -08:00
Brad Fitzpatrick 6b08303b0f Dockerfile: add big warning banner 
Updates #504
 2021-01-11 19:23:47 -08:00
Brad FitzpatrickandBrad Fitzpatrick 676b5b7946 net/netcheck: improve the preferred DERP hysteresis 
Users in Amsterdam (as one example) were flipping back and forth
between equidistant London & Frankfurt relays too much.

Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
 2021-01-11 14:50:47 -08:00
Brad Fitzpatrick f85769b1ed wgengine/magicsock: drop netaddr.IPPort cache 
netaddr.IP no longer allocates, so don't need a cache or all its associated
code/complexity.

This totally removes groupcache/lru from the deps.

Also go mod tidy.
 2021-01-11 13:23:04 -08:00
Brad Fitzpatrick a80446c026 Update depaware (removes lru from wgengine/filter) 2021-01-11 13:17:18 -08:00