webnet/tailscale
1
0
Fork 0
Code Issues Pull Requests 1 Packages Projects Releases Wiki Activity

Commit Graph

  • 488e63979e api.md: document new ACL validate mode Brad Fitzpatrick 2022-04-27 15:51:59 -07:00
  • 5a1ef1bbb9 net/tsdial: add SystemDial as a wrapper on netns.Dial Maisem Ali 2022-04-27 11:57:59 -07:00
  • e38d3dfc76 control/controlhttp: start port 443 fallback sooner if 80's stuck Brad Fitzpatrick 2022-04-27 08:19:45 -07:00
  • 637cc1b5fc ipn/ipnlocal/peerapi: add endpoint to list local interfaces Maisem Ali 2022-04-26 15:25:48 -07:00
  • 1aa75b1c9e wgengine/netstack: always set TCP keepalive James Tucker 2022-04-26 17:13:05 -07:00
  • adcb7e59d2 control/controlclient: fix log print with always-empty key Brad Fitzpatrick 2022-04-26 19:11:55 -07:00
  • c88506caa6 ipn/ipnlocal: add Wake-on-LAN function to peerapi Brad Fitzpatrick 2022-04-26 12:29:41 -07:00
  • 3f7cc3563f ipn: always treat login.tailscale.com as controlplane.tailscale.com Brad Fitzpatrick 2022-04-26 14:57:55 -07:00
  • c6c752cf64 net/tshttpproxy: fix typo Brad Fitzpatrick 2022-04-26 08:12:45 -07:00
  • 50eb8c5add cmd/tailscale: mostly fix 'tailscale ssh' on macOS (sandbox) Brad Fitzpatrick 2022-04-26 06:57:44 -07:00
  • 48e5f4ff88 cmd/tailscale/cli: add 'debug stat' subcommand Brad Fitzpatrick 2022-04-26 06:09:02 -07:00
  • 21413392cf safesocket: fix CLI on standalone mac GUI build Brad Fitzpatrick 2022-04-25 21:37:03 -07:00
  • 3601b43530 ipn: add IPCVersion override func Brad Fitzpatrick 2022-04-25 20:30:41 -07:00
  • 928d1fddd2 cmd/tailscale: s/-authkey/-auth-key/ in help text James Tucker 2022-04-25 17:14:18 -07:00
  • 5fb8e01a8b net/dns/resolver: add metric for number of truncated dns packets Tom DNetto 2022-04-22 15:01:55 -07:00
  • 80ba161c40 wgengine/monitor: do not ignore changes to pdp_ip* Maisem Ali 2022-04-25 12:10:31 -07:00
  • 1a19aed410 ipn/ipnlocal: do not initialize peer api listeners when shutting down Maisem Ali 2022-04-25 11:02:59 -07:00
  • e97209c6bf net/dns: add tailscaled-on-macOS DNS OSConfigurator Brad Fitzpatrick 2022-04-23 12:49:07 -07:00
  • bbca2c78cb tsnet: fix mem.Store check for normal nodes Maisem Ali 2022-04-22 23:22:00 -07:00
  • d819bb3bb0 VERSION.txt: This is 1.25.0 Denton Gentry 2022-04-22 13:02:19 -07:00
  • 2265587d38 wgengine/{,magicsock}: add metrics for rebinds and restuns Maisem Ali 2022-04-22 10:40:49 -07:00
  • 78fededaa5 net/dns/resolver: support magic resolution of via-<siteid>.<ip4> domains Tom DNetto 2022-04-21 14:13:13 -07:00
  • 910ae68e0b util/mak: move tailssh's mapSet into a new package for reuse elsewhere Brad Fitzpatrick 2022-04-21 20:25:24 -07:00
  • c2eff20008 ssh/tailssh: avoid user ssh configuration in tests James Tucker 2022-04-21 19:05:27 -07:00
  • 700bd37730 tshttpproxy: support synology proxy configuration James Tucker 2022-04-19 15:33:29 -07:00
  • 90b5f6286c cmd/tailscale: use double quotes in the ssh subcommands Maisem Ali 2022-04-21 17:29:27 -07:00
  • db70774685 cmd/tailscale/cli: do not use syscall.Exec from macOS sandbox Maisem Ali 2022-04-21 16:37:41 -07:00
  • 37c94c07cd shell.nix: update go toolchain Tom DNetto 2022-04-21 10:02:47 -07:00
  • a364bf2b62 ssh/tailssh: various typo fixes, clarifications. David Anderson 2022-04-21 14:52:05 -07:00
  • c994eba763 ssh/tailssh: simplify matchRule with Reject rules Brad Fitzpatrick 2022-04-21 14:58:41 -07:00
  • 31094d557b ssh/tailssh: chmod the auth socket to be only user accessible Maisem Ali 2022-04-21 14:45:36 -07:00
  • 337c77964b ssh/tailssh: set groups and gid in the incubated process Maisem Ali 2022-04-21 14:44:39 -07:00
  • 8ac4d52b59 ssh/tailssh: filter accepted environment variables Brad Fitzpatrick 2022-04-21 14:40:32 -07:00
  • 89832c1a95 tailcfg: fix typo in SessionDuration field name Brad Fitzpatrick 2022-04-21 14:13:42 -07:00
  • 695f8a1d7e ssh/tailssh: add support for sftp Maisem Ali 2022-04-21 10:11:16 -07:00
  • 53588f632d Revert "wgengine/router,util/kmod: load & log xt_mark" Brad Fitzpatrick 2022-04-21 09:50:23 -07:00
  • df26c63793 net/dns/resolver, net/tsaddr: fix reverse lookups in 4to6 IP range Tom DNetto 2022-04-20 14:35:20 -07:00
  • 8d6793fd70 wgengine/router,util/kmod: load & log xt_mark James Tucker 2022-04-11 18:25:35 -07:00
  • f7cb6630e7 tailcfg: document SSHPrincipal.PubKeys URL expansions Brad Fitzpatrick 2022-04-20 20:10:04 -07:00
  • 5b4154342e ssh/tailssh: fix double SSH-2.0- prefix in greeting banner Brad Fitzpatrick 2022-04-20 19:52:38 -07:00
  • 7a097ccc83 ipn/ipnlocal: close peerapi listeners on LocalBackend.Shutdown Brad Fitzpatrick 2022-04-20 19:15:43 -07:00
  • 2b8b887d55 ssh/tailssh: send banner messages during auth, move more to conn Maisem Ali 2022-04-20 17:36:19 -07:00
  • 13f75b9667 scripts/install: add Alma Linux. Denton Gentry 2022-04-16 17:33:45 -07:00
  • c2b907c965 scripts/installer: support LinuxMint Debian. Denton Gentry 2022-04-16 17:17:14 -07:00
  • 61868f281e scripts/installer: call emerge with --ask=n Denton Gentry 2022-04-16 15:58:32 -07:00
  • db7da6622a scripts/installer: add ParrotOS support Denton Gentry 2022-04-16 15:55:00 -07:00
  • d413850bd7 cmd/tailscale: add "debug via" subcommand to do CIDR math for via ranges Brad Fitzpatrick 2022-04-20 14:25:27 -07:00
  • f74ee80abe ssh/tailssh: support expansions in public key fetch URL too Brad Fitzpatrick 2022-04-20 13:53:01 -07:00
  • 14d077fc3a ssh/tailssh: terminate ssh auth early if no policy can match Maisem Ali 2022-04-20 13:39:15 -07:00
  • a2c330c496 ipn/ipnlocal: use the fake peerapi listener as fallback if netstack available Brad Fitzpatrick 2022-04-20 13:22:42 -07:00
  • 136f30fc92 wgengine/monitor: split the unexpected stringification log line Maisem Ali 2022-04-20 12:21:24 -07:00
  • 8e40bfc6ea wgengine/monitor: ignore OS-specific uninteresting interfaces Maisem Ali 2022-04-20 12:03:50 -07:00
  • 1b89662eff ipn/ipnlocal: make peerapi listener on Android avoid the kernel Brad Fitzpatrick 2022-04-20 11:57:34 -07:00
  • cf9b9a7fec tstest/iosdeps: add test for forbidden iOS dependencies Brad Fitzpatrick 2022-04-20 12:14:45 -07:00
  • 8b81254992 ipn/ipnlocal: reject tailscale up --ssh if disabled on tailnet Brad Fitzpatrick 2022-04-20 11:22:54 -07:00
  • 0ce67ccda6 wgengine/router: make supportsV6NAT check catch more cases Brad Fitzpatrick 2022-04-20 10:14:07 -07:00
  • fc2f628d4c cmd/nginx-auth: maintainer scripts and tailnet checking (#4460) Xe Iaso 2022-04-20 13:06:05 -04:00
  • 33fa43252e cmd/proxy-to-grafana: prevent premature termination Blake Mizerany 2022-04-19 11:08:16 -07:00
  • c8f4dfc8c0 derp/derphttp,net/netcheck: improve netcheck behavior under MITM proxies Tom DNetto 2022-04-19 11:46:30 -07:00
  • cc575fe4d6 net/dns: schedule DoH upgrade explicitly, fix Resolver.Addr confusion Brad Fitzpatrick 2022-04-18 21:58:00 -07:00
  • e3a4952527 net/dns/resolver: count errors when racing DNS queries, fail earlier Brad Fitzpatrick 2022-04-19 10:58:52 -07:00
  • d9efbd97cb net/dns: remove an unused function Brad Fitzpatrick 2022-04-19 10:51:33 -07:00
  • c13be0c509 tailcfg: clarify how SSHPolicy.Rules are evaluated between auth phases Brad Fitzpatrick 2022-04-18 21:36:32 -07:00
  • 91a187bf87 ssh/tailssh: make checkStillValid also consider username changes Maisem Ali 2022-04-18 16:23:49 -07:00
  • a04eebf59f ipn/ipnlocal: also use SSHPolicies when updating filterHash Maisem Ali 2022-04-18 16:17:10 -07:00
  • d201d217df go.toolchain.rev: update to go1.18.1 (#4438) Joe Tsai 2022-04-18 14:42:58 -07:00
  • 24cd26534f hostinfo, tailcfg: add desktop detection on Linux to hostinfo Tom DNetto 2022-04-07 11:42:48 -07:00
  • 9f1dd716e8 tailcfg, logtail: provide Debug bit to disable logtail Brad Fitzpatrick 2022-04-18 13:43:03 -07:00
  • ecea6cb994 net/dns/resolver: make DoH dialer use existing dnscache happy eyeball dialer Brad Fitzpatrick 2022-04-18 12:50:26 -07:00
  • e96dd00652 ipn/ipnlocal: add capability for debugging peers over peerapi Brad Fitzpatrick 2022-04-18 10:06:41 -07:00
  • 945879fa38 cmd/tailscale: [ssh] enable StrictHostKeyChecking mode Maisem Ali 2022-04-18 09:52:52 -07:00
  • 8f5e5bff1e cmd/tailscale, etc: make "tailscale up --ssh" fail fast when unavailable Brad Fitzpatrick 2022-04-18 09:37:23 -07:00
  • f0e2272e04 cmd/tailscale: unhide 'up --ssh' behind WIP env var Brad Fitzpatrick 2022-04-18 07:50:12 -07:00
  • 93221b4535 ssh/tailssh: cache public keys fetched from URLs Brad Fitzpatrick 2022-04-16 21:49:22 -07:00
  • 3ffd88a84a wgengine/monitor: do not set timeJumped on iOS/Android Maisem Ali 2022-04-17 21:36:35 -07:00
  • ade7bd8745 ssh/tailssh: close sessions on policy change if no longer allowed Brad Fitzpatrick 2022-04-17 11:49:56 -07:00
  • 4ec83fbad6 ipn/ipnlocal: only call updateFilter with mutex held Brad Fitzpatrick 2022-04-17 14:49:16 -07:00
  • cd916b728b ipn/ipnlocal: add start of inter-user Taildrop Brad Fitzpatrick 2022-04-17 08:45:49 -07:00
  • f4f76eb275 net/dnsfallback: update from 'go generate' Brad Fitzpatrick 2022-04-17 08:51:10 -07:00
  • 16f3520089 all: add arbitrary capability support Brad Fitzpatrick 2022-03-18 11:48:40 -07:00
  • c591c91653 tailcfg, control/controlclient: TSMP & disco pings James Tucker 2022-04-15 09:00:27 -07:00
  • 67192a2323 go.mod: bump u-root James Tucker 2022-04-15 13:56:33 -07:00
  • 8ee044ea4a ssh/tailssh: make the SSH server a singleton, register with LocalBackend Brad Fitzpatrick 2022-04-15 13:19:13 -07:00
  • da14e024a8 tailcfg, ssh/tailssh: optionally support SSH public keys in wire policy Brad Fitzpatrick 2022-04-01 12:57:12 -07:00
  • df9ce972c7 tailcfg, ipn/ipnlocal: add debug flag to enable one-big-CGNAT/10 route Brad Fitzpatrick 2022-04-14 14:40:17 -07:00
  • 52d32c94d8 net/dns/publicdns: add missing call to sync.Once.Do (#4410) phirework 2022-04-14 17:45:58 -04:00
  • 83c734a6e0 net/dns, util/publicdns: extract public DNS mapping into own package (#4405) phirework 2022-04-14 17:15:54 -04:00
  • 8de7f9bff7 tailscaled: no longer tune gcpercent James Tucker 2022-03-28 18:11:04 -07:00
  • 4f1d6c53cb cmd/nginx-auth: create new Tailscale NGINX auth service (#4400) Xe Iaso 2022-04-14 11:55:35 -04:00
  • 50b4b8b2c6 ipn/ipnlocal: make peerIPs return a sorted slice Maisem Ali 2022-04-13 15:41:04 -07:00
  • a49d8d5200 Revert ".github/workflows: work around golang/go#51629" Brad Fitzpatrick 2022-04-13 13:49:18 -07:00
  • 09c5c9eb83 go.mod: bump x/tools for go/packages generics fix Brad Fitzpatrick 2022-04-13 13:49:48 -07:00
  • dec68166e4 tstest/integration/vms: smoke test derphttp through mitm proxies Tom DNetto 2022-04-12 13:04:36 -07:00
  • 2748750aa2 ipn/ipnstate: make status page more mobile-friendly Ilya Mateyko 2022-04-04 23:15:43 +03:00
  • c87ed52ad4 cmd/tailscale: add id-token subcommand Maisem Ali 2022-04-12 11:57:46 -07:00
  • 3ae701f0eb net/tsaddr, wgengine/netstack: add IPv6 range that forwards to site-relative IPv4 Brad Fitzpatrick 2022-03-30 08:47:16 -07:00
  • f992749b98 cmd/tailscale: Add file get --loop flag. David Eger 2022-04-04 08:43:59 -07:00
  • f4aad61e67 wgengine/monitor: ignore duplicate RTM_NEWADDRs James Tucker 2022-04-08 13:06:40 -07:00
  • 2f69c383a5 wgengine/monitor: add envknob TS_DEBUG_NETLINK James Tucker 2022-04-08 14:54:28 -07:00
  • 8f6d8cf979 tstest/integration/vms: test on stable nixos (21.11) Tom DNetto 2022-04-11 11:58:06 -07:00