You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Jordan Whited
755309c04e
net/udprelay: use blake2s-256 MAC for handshake challenge
...
This commit replaces crypto/rand challenge generation with a blake2s-256
MAC. This enables the peer relay server to respond to multiple forward
disco.BindUDPRelayEndpoint messages per handshake generation without
sacrificing the proof of IP ownership properties of the handshake.
Responding to multiple forward disco.BindUDPRelayEndpoint messages per
handshake generation improves client address/path selection where
lowest client->server path/addr one-way delay does not necessarily
equate to lowest client<->server round trip delay.
It also improves situations where outbound traffic is filtered
independent of input, and the first reply
disco.BindUDPRelayEndpointChallenge message is dropped on the reply
path, but a later reply using a different source would make it through.
Reduction in serverEndpoint state saves 112 bytes per instance, trading
for slightly more expensive crypto ops: 277ns/op vs 321ns/op on an M1
Macbook Pro.
Updates tailscale/corp#34414
Signed-off-by: Jordan Whited <jordan@tailscale.com>
5 months ago
..
ace
feature/ace: make ACE modular
7 months ago
art
all: rename variables with lowercase-l/uppercase-I
5 months ago
bakedroots
tstest/tlstest: simplify, don't even bake in any keys
10 months ago
batching
net/batching: fix import formatting
5 months ago
captivedetection
syncs: add Mutex/RWMutex alias/wrappers for future mutex debugging
5 months ago
connectproxy
net/tlsdial: fix TLS cert validation of HTTPS proxies
10 months ago
dns
all: rename variables with lowercase-l/uppercase-I
5 months ago
dnscache
syncs: add Mutex/RWMutex alias/wrappers for future mutex debugging
5 months ago
dnsfallback
feature, net/tshttpproxy: pull out support for using proxies as a feature
7 months ago
flowtrack
net/flowtrack: fix, test String method
2 years ago
ipset
all: use iterators over slice views more
1 year ago
ktimeout
all: rename variables with lowercase-l/uppercase-I
5 months ago
memnet
all: rename variables with lowercase-l/uppercase-I
5 months ago
netaddr
all: rename variables with lowercase-l/uppercase-I
5 months ago
netcheck
all: rename variables with lowercase-l/uppercase-I
5 months ago
neterror
net/neterror, wgengine/magicsock: use UDP GSO and GRO on Linux ( #7791 )
3 years ago
netkernelconf
all: remove non-applicable "linux" deps on Android
11 months ago
netknob
all: update copyright and license headers
3 years ago
netmon
syncs: add Mutex/RWMutex alias/wrappers for future mutex debugging
5 months ago
netns
net/netns: remove spammy logs for interface binding caps
5 months ago
netstat
all: add test for package comments, fix, add comments as needed
2 years ago
netutil
syncs: add Mutex/RWMutex alias/wrappers for future mutex debugging
5 months ago
netx
net/{netx,memnet},all: add netx.DialFunc, move memnet Network impl
1 year ago
packet
wgengine: stop importing flowtrack when unused
6 months ago
ping
syncs: add Mutex/RWMutex alias/wrappers for future mutex debugging
5 months ago
portmapper
go.mod: bump golang.org/x/crypto ( #17907 )
5 months ago
proxymux
all: cleanup unused code, part 1 ( #10661 )
2 years ago
routetable
net/routetable: don't try to fetch the route table on android
1 year ago
sockopts
wgengine/magicsock,net/sockopts: export Windows ICMP suppression logic ( #16917 )
8 months ago
socks5
all: rename variables with lowercase-l/uppercase-I
5 months ago
sockstats
go.mod: bump golang.org/x/crypto ( #17907 )
5 months ago
speedtest
all: rename variables with lowercase-l/uppercase-I
5 months ago
stun
ci: enable checklocks workflow for specific packages
2 years ago
stunserver
all: use Go 1.22 range-over-int
2 years ago
tcpinfo
all: use Go 1.22 range-over-int
2 years ago
tlsdial
feature/featuretags, all: add build features, use existing ones in more places
7 months ago
tsaddr
net/tsaddr: include test input in test failure output
1 year ago
tsdial
types/netmap,*: remove some redundant fields from NetMap
5 months ago
tshttpproxy
go.mod: bump golang.org/x/crypto ( #17907 )
5 months ago
tstun
wgengine/netlog: embed node information in network flow logs ( #17668 )
6 months ago
udprelay
net/udprelay: use blake2s-256 MAC for handshake challenge
5 months ago
wsconn
syncs: add Mutex/RWMutex alias/wrappers for future mutex debugging
5 months ago