You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Andrew Dunham
3a41c0c585
ipn/ipnlocal: add PROXY protocol support to Funnel/Serve
...
This adds the --proxy-protocol flag to 'tailscale serve' and
'tailscale funnel', which tells the Tailscale client to prepend a PROXY
protocol[1] header when making connections to the proxied-to backend.
I've verified that this works with our existing funnel servers without
additional work, since they pass along source address information via
PeerAPI already.
Updates #7747
[1]: https://www.haproxy.org/download/1.8/doc/proxy-protocol.txt
Change-Id: I647c24d319375c1b33e995555a541b7615d2d203
Signed-off-by: Andrew Dunham <andrew@du.nham.ca>
5 months ago
..
auditlog
ipn/ipnext: remove some interface indirection to add hooks
12 months ago
conffile
cmd/tailscale/cli,ipn/conffile: add declarative config mode for Services ( #17435 )
6 months ago
desktop
util/syspolicy: finish plumbing policyclient, add feature/syspolicy, move global impl
8 months ago
ipnauth
all: use buildfeature constants in a few more places
7 months ago
ipnext
ipn/ipnlocal: remove all the weird locking (LockedOnEntry, UnlockEarly, etc)
5 months ago
ipnlocal
ipn/ipnlocal: add PROXY protocol support to Funnel/Serve
5 months ago
ipnserver
feature/featuretags, all: add build features, use existing ones in more places
7 months ago
ipnstate
cmd/tailscale, ipn/ipnstate, wgengine/magicsock: update ping output for peer relay ( #16515 )
9 months ago
lapitest
various: allow tailscaled shutdown via LocalAPI
7 months ago
localapi
types/netmap: remove PrivateKey from NetworkMap
5 months ago
policy
ipn,tailconfig: clean up unreleased and removed app connector service
2 years ago
store
ipn/store, feature/condregister: permit callers to empty import optonal ipn stores
7 months ago
backend.go
types/netmap: remove PrivateKey from NetworkMap
5 months ago
backend_test.go
ipn: fix the string representation of an empty ipn.Notify
7 months ago
conf.go
ipn: ensure that conffile is source of truth for advertised services. ( #15361 )
1 year ago
doc.go
ipn: generate LoginProfileView and use it instead of *LoginProfile where appropriate
1 year ago
ipn_clone.go
ipn/ipnlocal: add PROXY protocol support to Funnel/Serve
5 months ago
ipn_test.go
all: do not depend on the testing package
2 years ago
ipn_view.go
ipn/ipnlocal: add PROXY protocol support to Funnel/Serve
5 months ago
prefs.go
types/persist: add AttestationKey ( #17281 )
6 months ago
prefs_test.go
Revert "control/controlclient: back out HW key attestation ( #17664 )" ( #17732 )
6 months ago
serve.go
ipn/ipnlocal: add PROXY protocol support to Funnel/Serve
5 months ago
serve_test.go
cmd/tailscale/cli: Add service flag to serve command ( #16191 )
9 months ago
store.go
tailcfg: report StateEncrypted in Hostinfo ( #16434 )
10 months ago
store_test.go
ipn/store: automatically migrate between plaintext and encrypted state ( #16318 )
10 months ago