f9bfd8118a
wgengine/magicsock: resolve epAddr collisions across peer relay conns (#16526)
Jordan Whited
2025-07-10 12:41:14 -07:00
d0cafc0a67
cmd/{k8s-operator,k8s-proxy}: apply accept-routes configuration to k8s-proxy (#16522)
David Bond
2025-07-10 15:53:01 +01:00
2b665c370c
cmd/{k8s-operator,k8s-proxy}: allow setting login server url (#16504)
David Bond
2025-07-10 14:33:30 +01:00
cf0460b9da
cmd/k8s-operator: allow letsencrypt staging on k8s proxies (#16521)
David Bond
2025-07-10 14:33:13 +01:00
fbc4c34cf7
ipn/localapi: do not break client on event marshalling errors (#16503)
Claus Lensbøl
2025-07-10 03:04:29 -04:00
6a0fad1e10
wgengine/magicsock: don't peer relay if NodeAttrOnlyTCP443 is set (#16517)
Jordan Whited
2025-07-09 20:02:00 -07:00
ae8641735d
cmd/tailscale/cli,ipn/ipnstate,wgengine/magicsock: label peer-relay (#16510)
Jordan Whited
2025-07-09 15:17:51 -07:00
d40b25326c
tailcfg, wgengine/magicsock: disable all UDP relay usage if disable-relay-client is set (#16492)
Dylan Bargatze
2025-07-09 18:06:58 -04:00
ff1803158a
ipn/ipnlocal: change order of exit node refresh and netmap update so that clients receive the new netmap first
Nick Khyl
2025-07-09 13:01:32 -05:00
21a4058ec7
ipn/ipnlocal: add test to verify handling of unknown auto exit node expressions
Nick Khyl
2025-07-08 18:35:32 -05:00
c5fdf9e1db
cmd/tailscale/cli: add support for tailscale {up,set} --exit-node=auto:any
Nick Khyl
2025-07-09 12:07:44 -05:00
cc2f4ac921
ipn: move ParseAutoExitNodeID from ipn/ipnlocal to ipn
Nick Khyl
2025-07-09 11:59:57 -05:00
008a238acd
wgengine/magicsock: support self as candidate peer relay (#16499)
Jordan Whited
2025-07-09 09:16:29 -07:00
27fa2ad868
cmd/k8s-operator: don't require generation for Available condition (#16497)
Tom Proctor
2025-07-09 09:37:45 +01:00
4dfed6b146
cmd/{k8s-operator,k8s-proxy}: add kube-apiserver ProxyGroup type (#16266)
Tom Proctor
2025-07-09 09:21:56 +01:00
bad17a1bfa
cmd/tailscale: format empty cities and countries as hyphens (#16495)
Simon Law
2025-07-08 22:14:18 -07:00
a60e0caf6a
wgengine/magicsock: remove conn.InitiationAwareEndpoint TODO (#16498)
Jordan Whited
2025-07-08 19:37:09 -07:00
740b77df59
ipn/ipnlocal,util/syspolicy: add support for ExitNode.AllowOverride policy setting
Nick Khyl
2025-07-08 16:08:28 -05:00
2c630e126b
ipn/ipnlocal: make applySysPolicy a method on LocalBackend
Nick Khyl
2025-07-07 19:05:41 -05:00
9bf99741dd
ipn/ipnlocal: refactor resolveExitNodeInPrefsLocked, setExitNodeID and resolveExitNodeIP
Nick Khyl
2025-07-07 19:02:10 -05:00
1fe82d6ef5
cmd/tailscale/cli,ipn/ipnlocal: restrict logout when AlwaysOn mode is enabled
Nick Khyl
2025-07-08 14:37:13 -05:00
5b0074729d
go.mod,wgengine/magicsock: implement conn.InitiationAwareEndpoint (#16486)
Jordan Whited
2025-07-08 09:45:18 -07:00
47f431b656
net/udprelay: fix relaying between mixed address family sockets (#16485)
Jordan Whited
2025-07-07 19:46:20 -07:00
ea4018b757
ipn/ipnlocal: fix missing defer in testExtension.Shutdown
Nick Khyl
2025-07-07 17:21:21 -05:00
f1c7b463cd
ipn/{ipnauth,ipnlocal,localapi}: make EditPrefs return an error if changing exit node is restricted by policy
Nick Khyl
2025-07-07 17:04:07 -05:00
a6f6478129
util/syspolicy: add HasAnyOf to check if any specified policy settings are configured
Nick Khyl
2025-07-07 11:50:59 -05:00
cb7b49941e
ipn/ipnlocal: add (*LocalBackend).reconcilePrefsLocked
Nick Khyl
2025-07-03 19:37:56 -05:00
381fdcc3f1
ipn/ipnlocal,util/syspolicy/source: retain existing exit node when using auto exit node, if it's allowed by policy
Nick Khyl
2025-07-03 20:32:30 -05:00
4c1c0bac8d
ipn/ipnlocal: plumb nodeBackend into suggestExitNode to support delta updates, such as online status changes
Nick Khyl
2025-07-03 14:32:28 -05:00
3e01652e4d
ipn/ipnlocal: add (*LocalBackend).RefreshExitNode
Nick Khyl
2025-07-03 14:25:33 -05:00