summaryrefslogtreecommitdiffhomepage
diff options
context:
space:
mode:
authorClaire Wang <claire@tailscale.com>2024-03-28 14:26:56 -0400
committerClaire Wang <claire@tailscale.com>2024-04-02 15:18:00 -0400
commit18fe05fd47996b500e45b36eab12cd3061d89845 (patch)
tree732474f832dd241db25012f3ea820961333f9a7d
parentf2be3f70cf443a65d1bec8c3b0c6b56898dc8989 (diff)
downloadtailscale-enable-exit-node-dst-logs-2.tar.xz
tailscale-enable-exit-node-dst-logs-2.zip
-rw-r--r--wgengine/netlog/logger.go4
1 files changed, 2 insertions, 2 deletions
diff --git a/wgengine/netlog/logger.go b/wgengine/netlog/logger.go
index 94f321f97..4233125a9 100644
--- a/wgengine/netlog/logger.go
+++ b/wgengine/netlog/logger.go
@@ -178,8 +178,8 @@ func recordStatistics(logger *logtail.Logger, nodeID tailcfg.StableNodeID, start
case srcWithinSubnet || dstWithinSubnet:
m.SubnetTraffic = append(m.SubnetTraffic, netlogtype.ConnectionCounts{Connection: conn, Counts: cnts})
default:
- const anonymize = false
- if anonymize {
+ const anonymize = true
+ if anonymize && !enableExitDstFlowLogs {
// Only preserve the address if it is a Tailscale IP address.
srcOrig, dstOrig := conn.Src, conn.Dst
conn = netlogtype.Connection{} // scrub everything by default