tailscale/wgengine/netstack/netstack.go, branch andrew/netstack-forwarder-debugThe easiest, most secure way to use WireGuard and 2FAhttp://git.waynecole.info/tailscale/atom?h=andrew%2Fnetstack-forwarder-debug2024-02-26T21:33:10Zwgengine/netstack: add debug page for TCP forwarder2024-02-26T21:33:10ZAndrew Dunhamandrew@du.nham.ca2024-02-26T19:34:56Zurn:sha1:35dc1fea725f3b947870ca9994bfbead26433eaf
To help in debugging issues with subnet routers in userspace mode–for
example, hitting the max inflight limit.
Updates tailscale/corp#12184
Signed-off-by: Andrew Dunham <andrew@du.nham.ca>
Change-Id: Idd922f4ae37695f6598a914c2d050574755ef309
all: remove LenIter, use Go 1.22 range-over-int instead2024-02-25T20:29:45ZBrad Fitzpatrickbradfitz@tailscale.com2024-02-25T15:57:11Zurn:sha1:e1bd7488d0fce970278a59b670154e850b3df99d
Updates #11058
Updates golang/go#65685
Change-Id: Ibb216b346e511d486271ab3d84e4546c521e4e22
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
tailfs: listen for local clients only on 100.100.100.1002024-02-12T20:08:00ZPercy Wegmannpercy@tailscale.com2024-02-11T21:01:59Zurn:sha1:c42a4e407a9fcaccdf29a275dcb9bbbd3040bb59
FileSystemForLocal was listening on the node's Tailscale address,
which potentially exposes the user's view of TailFS shares to other
Tailnet users. Remote nodes should connect to exported shares via
the peerapi.
This removes that code so that FileSystemForLocal is only avaialable
on 100.100.100.100:8080.
Updates tailscale/corp#16827
Signed-off-by: Percy Wegmann <percy@tailscale.com>
tailfs: disable TailFSForLocal via policy2024-02-10T02:00:42ZPercy Wegmannpercy@tailscale.com2024-02-09T22:23:42Zurn:sha1:ddcffaef7ae3ca96d4710ac307d9e2930694f8bd
Adds support for node attribute tailfs:access. If this attribute is
not present, Tailscale will not accept connections to the local TailFS
server at 100.100.100.100:8080.
Updates tailscale/corp#16827
Signed-off-by: Percy Wegmann <percy@tailscale.com>
tailfs: clean up naming and package structure2024-02-10T02:00:42ZPercy Wegmannpercy@tailscale.com2024-02-09T17:26:43Zurn:sha1:abab0d4197ac73111a62e27de46377d5c8ef0827
- Restyles tailfs -> tailFS
- Defines interfaces for main TailFS types
- Moves implemenatation of TailFS into tailfsimpl package
Updates tailscale/corp#16827
Signed-off-by: Percy Wegmann <percy@tailscale.com>
tailfs: initial implementation2024-02-09T15:13:51ZPercy Wegmannpercy@tailscale.com2024-02-02T18:45:32Zurn:sha1:993acf4475b22d693f210ae08cd8de57e2452d28
Add a WebDAV-based folder sharing mechanism that is exposed to local clients at
100.100.100.100:8080 and to remote peers via a new peerapi endpoint at
/v0/tailfs.
Add the ability to manage folder sharing via the new 'share' CLI sub-command.
Updates tailscale/corp#16827
Signed-off-by: Percy Wegmann <percy@tailscale.com>
go.mod,wgengine/netstack: bump gvisor2024-01-20T02:23:53ZJames Tuckerjames@tailscale.com2024-01-19T23:56:57Zurn:sha1:7e3bcd297ebb04c10baaf12110e746e6c7681650
Updates #8043
Signed-off-by: James Tucker <james@tailscale.com>
wgengine/netstack: expose gVisor metrics through expvar2024-01-19T23:36:54ZAndrew Dunhamandrew@du.nham.ca2024-01-19T23:06:55Zurn:sha1:7a0392a8a3f91a0a2a52904f9fff587a53d665b3
When tailscaled is run with "-debug 127.0.0.1:12345", these metrics are
available at:
http://localhost:12345/debug/metrics
Updates #8210
Signed-off-by: Andrew Dunham <andrew@du.nham.ca>
Change-Id: I19db6c445ac1f8344df2bc1066a3d9c9030606f8
wgengine/netstack: disable RACK on Windows (#10402)2023-11-28T20:12:32ZJordan Whitedjordan@tailscale.com2023-11-28T20:12:32Zurn:sha1:5e861c38718ffcde3ded6d2922ca464886e41321
Updates #9707
Signed-off-by: Jordan Whited <jordan@tailscale.com>wgengine/netstack: standardize var names in UpdateNetstackIPs2023-11-01T15:29:32ZMaisem Alimaisem@tailscale.com2023-10-24T15:26:08Zurn:sha1:d0f2c0664b394370face42c183ea79982f4a7bd7
Updates #cleanup
Signed-off-by: Maisem Ali <maisem@tailscale.com>