diff options
| author | Peter A. <ink.splatters@pm.me> | 2025-11-28 23:39:41 +0100 |
|---|---|---|
| committer | Brad Fitzpatrick <brad@danga.com> | 2025-12-04 11:06:06 -0800 |
| commit | f4d34f38bece35652ec0c4d73e2a9ffaf1fa6823 (patch) | |
| tree | 441bc54f37c779b0c618043f5beadb75d8a28e60 /control/controlhttp/controlhttpserver/controlhttpserver.go | |
| parent | 557457f3c2e896a41c123e72278194d9f9f60663 (diff) | |
| download | tailscale-f4d34f38bece35652ec0c4d73e2a9ffaf1fa6823.tar.xz tailscale-f4d34f38bece35652ec0c4d73e2a9ffaf1fa6823.zip | |
cmd/tailscale,ipn: add Unix socket support for serve
Based on PR #16700 by @lox, adapted to current codebase.
Adds support for proxying HTTP requests to Unix domain sockets via
tailscale serve unix:/path/to/socket, enabling exposure of services
like Docker, containerd, PHP-FPM over Tailscale without TCP bridging.
The implementation includes reasonable protections against exposure of
tailscaled's own socket.
Adaptations from original PR:
- Use net.Dialer.DialContext instead of net.Dial for context propagation
- Use http.Transport with Protocols API (current h2c approach, not http2.Transport)
- Resolve conflicts with hasScheme variable in ExpandProxyTargetValue
Updates #9771
Signed-off-by: Peter A. <ink.splatters@pm.me>
Co-authored-by: Lachlan Donald <lachlan@ljd.cc>
Diffstat (limited to 'control/controlhttp/controlhttpserver/controlhttpserver.go')
0 files changed, 0 insertions, 0 deletions