webnet/tailscale
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
8,214 Commits 3 Branches 0 Tags
cb10eddc269b03a816f39b0bb4564d54d3843248
Commit Graph
27 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Naman SoodandGitHub 09ec2f39b5 tailcfg: add func to check for known valid ServiceProtos (#13668) 
Updates tailscale/corp#23574.

Signed-off-by: Naman Sood <mail@nsood.in>
 2024-10-02 22:54:02 -04:00
Naman SoodandGitHub f79183dac7 cmd/tsidp: add funnel support (#12591) 
* cmd/tsidp: add funnel support

Updates #10263.

Signed-off-by: Naman Sood <mail@nsood.in>

* look past funnel-ingress-node to see who we're authenticating

Signed-off-by: Naman Sood <mail@nsood.in>

* fix comment typo

Signed-off-by: Naman Sood <mail@nsood.in>

* address review feedback, support Basic auth for /token

Turns out you need to support Basic auth if you do client ID/secret
according to OAuth.

Signed-off-by: Naman Sood <mail@nsood.in>

* fix typos

Signed-off-by: Naman Sood <mail@nsood.in>

* review fixes

Signed-off-by: Naman Sood <mail@nsood.in>

* remove debugging log

Signed-off-by: Naman Sood <mail@nsood.in>

* add comments, fix header

Signed-off-by: Naman Sood <mail@nsood.in>

---------

Signed-off-by: Naman Sood <mail@nsood.in>
 2024-08-08 10:46:45 -04:00
Naman SoodandGitHub 75254178a0 ipn/ipnlocal: don't bind localListener if its context is canceled (#12621) 
The context can get canceled during backoff, and binding after that
makes the listener impossible to close afterwards.

Fixes #12620.

Signed-off-by: Naman Sood <mail@nsood.in>
 2024-06-26 11:18:45 -04:00
Naman SoodandGitHub 97f84200ac wgengine/router: implement UpdateMagicsockPort for CallbackRouter (#10494) 
Updates #9084.

Signed-off-by: Naman Sood <mail@nsood.in>
 2023-12-07 10:45:14 -05:00
Naman SoodandGitHub d46a4eced5 util/linuxfw, wgengine: allow ingress to magicsock UDP port on Linux (#10370) 
* util/linuxfw, wgengine: allow ingress to magicsock UDP port on Linux

Updates #9084.

Currently, we have to tell users to manually open UDP ports on Linux when
certain firewalls (like ufw) are enabled. This change automates the process of
adding and updating those firewall rules as magicsock changes what port it
listens on.

Signed-off-by: Naman Sood <mail@nsood.in>
 2023-12-05 18:12:02 -05:00
Naman Sood 650c67a0a1 tailcfg: bump CapabilityVersion for Linux netfilter NodeAttrs and c2n endpoint 
Updates tailscale/corp#14029.

Signed-off-by: Naman Sood <mail@nsood.in>
 2023-12-05 14:22:02 -05:00
Naman Sood 0a59754eda linuxfw,wgengine/route,ipn: add c2n and nodeattrs to control linux netfilter 
Updates tailscale/corp#14029.

Signed-off-by: Naman Sood <mail@nsood.in>
 2023-12-05 14:22:02 -05:00
Naman SoodandGitHub d5c460e83c client/{tailscale,web}: add initial webUI frontend for self-updates (#10191) 
Updates #10187.

Signed-off-by: Naman Sood <mail@nsood.in>
 2023-11-15 16:04:44 -05:00
Naman SoodandGitHub e57fd9cda4 ipn/{ipnlocal,ipnstate,localapi}: add localapi endpoints for client self-update (#10188) 
* ipn/{ipnlocal,ipnstate,localapi}: add localapi endpoints for client self-update

Updates #10187.

Signed-off-by: Naman Sood <mail@nsood.in>

* depaware

Updates #10187.

Signed-off-by: Naman Sood <mail@nsood.in>

* address review feedback

Signed-off-by: Naman Sood <mail@nsood.in>

---------

Signed-off-by: Naman Sood <mail@nsood.in>
 2023-11-09 16:00:47 -05:00
Naman SoodandGitHub 7783a960e8 client/web: add metric for exit node advertising (#9781) 
* client/web: add metric for exit node advertising

Updates tailscale/corp#15215

Signed-off-by: Naman Sood <mail@nsood.in>

* client/web: use http request's context for IncrementCounter

Updates #cleanup

Signed-off-by: Naman Sood <mail@nsood.in>

---------

Signed-off-by: Naman Sood <mail@nsood.in>
 2023-10-12 17:02:20 -04:00
Naman SoodandGitHub 4a90a91d29 wgengine/netstack: log ForwarderRequest in readable form, only in debug mode (#1758) 
* wgengine/netstack: log ForwarderRequest in readable form, only in debug mode

Fixes #1757

Signed-off-by: Naman Sood <mail@nsood.in>
 2021-04-21 14:50:48 -04:00
Naman SoodandGitHub 71b7e48547 net/tsaddr: expand ephemeral nodes range to /64 
Signed-off-by: Naman Sood <mail@nsood.in>
 2021-04-19 15:54:53 -04:00
Naman SoodandGitHub b85d80b37f net/tsaddr: add new IP range for ephemeral nodes in Tailscale ULA (#1715) 
Signed-off-by: Naman Sood <mail@nsood.in>
 2021-04-16 14:47:55 -04:00
Naman SoodandGitHub 5ea53891fe cmd/tailscaled: populate netstack variable to use dialer in SOCKS5 
Signed-off-by: Naman Sood <mail@nsood.in>
 2021-04-14 13:13:10 -04:00
Naman SoodandGitHub 31c7745631 wgengine/netstack: stop re-adding IPs registered by active TCP connections (#1629) 
Signed-off-by: Naman Sood <mail@nsood.in>
 2021-03-31 15:32:33 -04:00
Naman SoodandGitHub 662fbd4a09 wgengine/netstack: Allow userspace networking mode to expose subnets (#1588) 
wgengine/netstack: Allow userspace networking mode to expose subnets

Updates #504

Updates #707

Signed-off-by: Naman Sood <mail@nsood.in>
 2021-03-29 14:33:05 -04:00
Naman Sood 770aa71ffb client, cmd/hello, ipn, wgengine: fix whois for netstack-forwarded connections 
Updates #504

Updates #707

Signed-off-by: Naman Sood <mail@nsood.in>
 2021-03-15 18:14:09 -04:00
Naman Sood 4c80344e27 wgengine/netstack: stop UDP forwarding when one side dies 
Updates #504

Updates #707

Signed-off-by: Naman Sood <mail@nsood.in>
 2021-03-08 13:59:37 -05:00
Naman Sood 7325b5a7ba wgengine/netstack: add support for incoming UDP connections 
Updates #504

Updates #707

Signed-off-by: Naman Sood <mail@nsood.in>
 2021-03-08 13:27:27 -05:00
Naman Sood d01c60dad5 wgengine/netstack: use system dialer to contact servers on localhost 
Updates #504

Updates #707

Signed-off-by: Naman Sood <mail@nsood.in>
 2021-03-03 13:27:50 -05:00
Naman Sood 95c03d1ead wgengine/netstack: forward incoming connections to localhost 
Updates #707
Updates #504

Signed-off-by: Naman Sood <mail@nsood.in>
 2021-03-02 15:26:40 -05:00
Naman SoodandBrad Fitzpatrick fec9dcbda1 wgengine/netstack: start SOCKS5 server in netstack mode 
Updates #707
Updates #504

Signed-off-by: Naman Sood <mail@nsood.in>
 2021-02-26 13:44:49 -08:00
Naman SoodandBrad Fitzpatrick fe16ef6812 net/socks5: create SOCKS5 package for proxy server in userspace networking 
Updates #707
Updates #504

Signed-off-by: Naman Sood <mail@nsood.in>
 2021-02-26 13:44:49 -08:00
Naman SoodandGitHub 517c90d7e5 wgengine, cmd/tailscaled: refactor netstack, forward TCP to hello as demo (#1301) 
Updates #707
Updates #504

Signed-off-by: Naman Sood <mail@nsood.in>
 2021-02-25 14:18:16 -05:00
Naman SoodandBrad Fitzpatrick 07c3df13c6 wgengine/tstun: inform userspaceEngine about injected outbound packets in tundev 
Signed-off-by: Naman Sood <mail@nsood.in>
 2021-02-09 08:08:01 -08:00
Naman SoodandGitHub 420c7a35e2 wgengine/netstack: use tailscale IPs instead of a hardcoded one (#1131) 
Signed-off-by: Naman Sood <mail@nsood.in>
 2021-01-15 09:16:28 -05:00
Naman SoodandGitHub f69e46175d wengine/netstack: bump gvisor to latest version 
* wengine/netstack: bump gvisor to latest version

Signed-off-by: Naman Sood <naman@tailscale.com>

* update dependencies

Signed-off-by: Naman Sood <naman@tailscale.com>

* Don't change hardcoded IP

Signed-off-by: Naman Sood <naman@tailscale.com>
 2021-01-11 15:46:48 -05:00