diff options
| author | Anton Tolchanov <anton@tailscale.com> | 2025-05-22 20:12:59 +0100 |
|---|---|---|
| committer | Anton Tolchanov <1687799+knyar@users.noreply.github.com> | 2025-06-10 07:38:06 +0100 |
| commit | db34cdcfe7d4825ed8a7edec3f6c0164b3c85b5a (patch) | |
| tree | 516753919748bc12dfd9cb36eedacc44f4741e86 /control/controlhttp/controlhttpserver | |
| parent | cc8dc9e4dcc83fced123d0268e62d4530c515ac6 (diff) | |
| download | tailscale-db34cdcfe7d4825ed8a7edec3f6c0164b3c85b5a.tar.xz tailscale-db34cdcfe7d4825ed8a7edec3f6c0164b3c85b5a.zip | |
cmd/tailscale/cli: add a risk message about rp_filter
We already present a health warning about this, but it is easy to miss
on a server when blackholing traffic makes it unreachable.
In addition to a health warning, present a risk message when exit node
is enabled.
Example:
```
$ tailscale up --exit-node=lizard
The following issues on your machine will likely make usage of exit nodes impossible:
- interface "ens4" has strict reverse-path filtering enabled
- interface "tailscale0" has strict reverse-path filtering enabled
Please set rp_filter=2 instead of rp_filter=1; see https://github.com/tailscale/tailscale/issues/3310
To skip this warning, use --accept-risk=linux-strict-rp-filter
$
```
Updates #3310
Signed-off-by: Anton Tolchanov <anton@tailscale.com>
Diffstat (limited to 'control/controlhttp/controlhttpserver')
0 files changed, 0 insertions, 0 deletions