<feed xmlns='http://www.w3.org/2005/Atom'>
<title>tailscale/wgengine/netstack, branch onebinary</title>
<subtitle>The easiest, most secure way to use WireGuard and 2FA</subtitle>
<id>http://git.waynecole.info/tailscale/atom?h=onebinary</id>
<link rel='self' href='http://git.waynecole.info/tailscale/atom?h=onebinary'/>
<link rel='alternate' type='text/html' href='http://git.waynecole.info/tailscale/'/>
<updated>2021-05-16T21:52:00Z</updated>
<entry>
<title>all: adapt to opaque netaddr types</title>
<updated>2021-05-16T21:52:00Z</updated>
<author>
<name>Josh Bleecher Snyder</name>
<email>josh@tailscale.com</email>
</author>
<published>2021-05-15T01:07:28Z</published>
<link rel='alternate' type='text/html' href='http://git.waynecole.info/tailscale/commit/?id=25df067dd0c854eebcd2841b82ad92ebb1d77165'/>
<id>urn:sha1:25df067dd0c854eebcd2841b82ad92ebb1d77165</id>
<content type='text'>
This commit is a mishmash of automated edits using gofmt:

gofmt -r 'netaddr.IPPort{IP: a, Port: b} -&gt; netaddr.IPPortFrom(a, b)' -w .
gofmt -r 'netaddr.IPPrefix{IP: a, Port: b} -&gt; netaddr.IPPrefixFrom(a, b)' -w .

gofmt -r 'a.IP.Is4 -&gt; a.IP().Is4' -w .
gofmt -r 'a.IP.As16 -&gt; a.IP().As16' -w .
gofmt -r 'a.IP.Is6 -&gt; a.IP().Is6' -w .
gofmt -r 'a.IP.As4 -&gt; a.IP().As4' -w .
gofmt -r 'a.IP.String -&gt; a.IP().String' -w .

And regexps:

\w*(.*)\.Port = (.*)  -&gt;  $1 = $1.WithPort($2)
\w*(.*)\.IP = (.*)  -&gt;  $1 = $1.WithIP($2)

And lots of manual fixups.

Signed-off-by: Josh Bleecher Snyder &lt;josh@tailscale.com&gt;</content>
</entry>
<entry>
<title>tsnet: add Tailscale-as-a-library package</title>
<updated>2021-05-14T19:46:42Z</updated>
<author>
<name>Brad Fitzpatrick</name>
<email>bradfitz@tailscale.com</email>
</author>
<published>2021-05-14T15:53:55Z</published>
<link rel='alternate' type='text/html' href='http://git.waynecole.info/tailscale/commit/?id=5b52b640944c72c57562287a7f0273bc54702227'/>
<id>urn:sha1:5b52b640944c72c57562287a7f0273bc54702227</id>
<content type='text'>
Signed-off-by: Brad Fitzpatrick &lt;bradfitz@tailscale.com&gt;
</content>
</entry>
<entry>
<title>wgengine/netstack: avoid delivering incoming packets to both netstack + host</title>
<updated>2021-05-06T13:43:16Z</updated>
<author>
<name>Brad Fitzpatrick</name>
<email>bradfitz@tailscale.com</email>
</author>
<published>2021-05-06T03:42:07Z</published>
<link rel='alternate' type='text/html' href='http://git.waynecole.info/tailscale/commit/?id=b8fb8264a590bfd82dd7c9fc9da58a80ffe24dc6'/>
<id>urn:sha1:b8fb8264a590bfd82dd7c9fc9da58a80ffe24dc6</id>
<content type='text'>
The earlier eb06ec172f1d984bb87c589da1dd2d3f15dc6d82 fixed
the flaky SSH issue (tailscale/corp#1725) by making sure that packets
addressed to Tailscale IPs in hybrid netstack mode weren't delivered
to netstack, but another issue remained:

All traffic handled by netstack was also potentially being handled by
the host networking stack, as the filter hook returned "Accept", which
made it keep processing. This could lead to various random racey chaos
as a function of OS/firewalls/routes/etc.

Instead, once we inject into netstack, stop our caller's packet
processing.

Signed-off-by: Brad Fitzpatrick &lt;bradfitz@tailscale.com&gt;
</content>
</entry>
<entry>
<title>wgengine/netstack: don't pass non-subnet traffic to netstack in hybrid mode</title>
<updated>2021-05-05T20:38:55Z</updated>
<author>
<name>Brad Fitzpatrick</name>
<email>bradfitz@tailscale.com</email>
</author>
<published>2021-05-05T19:32:46Z</published>
<link rel='alternate' type='text/html' href='http://git.waynecole.info/tailscale/commit/?id=eb06ec172f1d984bb87c589da1dd2d3f15dc6d82'/>
<id>urn:sha1:eb06ec172f1d984bb87c589da1dd2d3f15dc6d82</id>
<content type='text'>
Fixes tailscale/corp#1725

Signed-off-by: Brad Fitzpatrick &lt;bradfitz@tailscale.com&gt;
</content>
</entry>
<entry>
<title>wgengine/netstack: log error when acceptUDP fails</title>
<updated>2021-04-21T19:25:01Z</updated>
<author>
<name>Josh Bleecher Snyder</name>
<email>josharian@gmail.com</email>
</author>
<published>2021-04-21T19:10:28Z</published>
<link rel='alternate' type='text/html' href='http://git.waynecole.info/tailscale/commit/?id=eb2a9d4ce32b6ac8c94b39bd05b50ec7d56ed099'/>
<id>urn:sha1:eb2a9d4ce32b6ac8c94b39bd05b50ec7d56ed099</id>
<content type='text'>
I see a bunch of these in some logs I'm looking at,
separated only by a few seconds.
Log the error so we can tell what's going on here.

Signed-off-by: Josh Bleecher Snyder &lt;josharian@gmail.com&gt;
</content>
</entry>
<entry>
<title>wgengine/netstack: log ForwarderRequest in readable form, only in debug mode (#1758)</title>
<updated>2021-04-21T18:50:48Z</updated>
<author>
<name>Naman Sood</name>
<email>mail@nsood.in</email>
</author>
<published>2021-04-21T18:50:48Z</published>
<link rel='alternate' type='text/html' href='http://git.waynecole.info/tailscale/commit/?id=4a90a91d2996f31ac0f9b4d2b2263f643acf5f73'/>
<id>urn:sha1:4a90a91d2996f31ac0f9b4d2b2263f643acf5f73</id>
<content type='text'>
* wgengine/netstack: log ForwarderRequest in readable form, only in debug mode

Fixes #1757

Signed-off-by: Naman Sood &lt;mail@nsood.in&gt;</content>
</entry>
<entry>
<title>cmd/tailscaled, wgengine{,/netstack}: add netstack hybrid mode, add to Windows</title>
<updated>2021-04-07T04:37:28Z</updated>
<author>
<name>Brad Fitzpatrick</name>
<email>bradfitz@tailscale.com</email>
</author>
<published>2021-04-01T16:35:41Z</published>
<link rel='alternate' type='text/html' href='http://git.waynecole.info/tailscale/commit/?id=d488678fdc928def9caa6fb261093066bdaa8980'/>
<id>urn:sha1:d488678fdc928def9caa6fb261093066bdaa8980</id>
<content type='text'>
For #707

Signed-off-by: Brad Fitzpatrick &lt;bradfitz@tailscale.com&gt;
</content>
</entry>
<entry>
<title>wgengine/netstack: stop re-adding IPs registered by active TCP connections (#1629)</title>
<updated>2021-03-31T19:32:33Z</updated>
<author>
<name>Naman Sood</name>
<email>mail@nsood.in</email>
</author>
<published>2021-03-31T19:32:33Z</published>
<link rel='alternate' type='text/html' href='http://git.waynecole.info/tailscale/commit/?id=31c774563120970a1d6b285068fdb6fbddeff289'/>
<id>urn:sha1:31c774563120970a1d6b285068fdb6fbddeff289</id>
<content type='text'>
Signed-off-by: Naman Sood &lt;mail@nsood.in&gt;</content>
</entry>
<entry>
<title>wgengine/netstack: Allow userspace networking mode to expose subnets (#1588)</title>
<updated>2021-03-29T18:33:05Z</updated>
<author>
<name>Naman Sood</name>
<email>mail@nsood.in</email>
</author>
<published>2021-03-29T18:33:05Z</published>
<link rel='alternate' type='text/html' href='http://git.waynecole.info/tailscale/commit/?id=662fbd4a09664e849f0b898d1e8df13325d36efa'/>
<id>urn:sha1:662fbd4a09664e849f0b898d1e8df13325d36efa</id>
<content type='text'>
wgengine/netstack: Allow userspace networking mode to expose subnets

Updates #504

Updates #707

Signed-off-by: Naman Sood &lt;mail@nsood.in&gt;</content>
</entry>
<entry>
<title>net/tstun: rename TUN to Wrapper.</title>
<updated>2021-03-27T06:15:22Z</updated>
<author>
<name>David Anderson</name>
<email>danderson@tailscale.com</email>
</author>
<published>2021-03-27T06:13:20Z</published>
<link rel='alternate' type='text/html' href='http://git.waynecole.info/tailscale/commit/?id=016de16b2e7db78d0d312bf5740edf87f761e01e'/>
<id>urn:sha1:016de16b2e7db78d0d312bf5740edf87f761e01e</id>
<content type='text'>
The tstun packagen contains both constructors for generic tun
Devices, and a wrapper that provides additional functionality.

Signed-off-by: David Anderson &lt;danderson@tailscale.com&gt;
</content>
</entry>
</feed>
