diff options
| author | Alex Valiushko <alexvaliushko@tailscale.com> | 2026-04-15 19:22:07 -0700 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2026-04-15 19:22:07 -0700 |
| commit | d3ba1480f5c23def55578f9cc086a0d2c6b9a1a9 (patch) | |
| tree | dc5e5a5ce7736643630bc1920bc535d4d7a39252 /control/controlhttp/controlhttpserver | |
| parent | b39ee0445d1e7b1f7fda57caa0f387c42ddd1db6 (diff) | |
| download | tailscale-d3ba1480f5c23def55578f9cc086a0d2c6b9a1a9.tar.xz tailscale-d3ba1480f5c23def55578f9cc086a0d2c6b9a1a9.zip | |
magicsock: invalidate endpoint on trust timeout (#19415)
Endpoint's best address was cleared on trustBestAddrUntil expiry
only if it was a udprelay connection. This generalizes invalidation
to also cover direct UDP.
Trust deadline is checked in two cases:
On disco ping timeout from the endpoint's best address.
Traffic goes DERP-only, heartbeats to the old address stop.
The discovery pings are still in flight, handled by the following.
On disco ping success from an alternative. BestAddr switches to the
working path, trust refreshed, eager discovery stops. The still
in flight pongs are handled by betterAddr().
Updates #19407
Change-Id: Ic41ed18edb4a6e4350a2d49271ba01566a6a6964
Signed-off-by: Alex Valiushko <alexvaliushko@tailscale.com>
Diffstat (limited to 'control/controlhttp/controlhttpserver')
0 files changed, 0 insertions, 0 deletions