diff options
| author | Michael Ben-Ami <mzb@tailscale.com> | 2026-03-18 16:25:09 -0400 |
|---|---|---|
| committer | mzbenami <mike.benami@gmail.com> | 2026-03-20 17:29:11 -0400 |
| commit | ea7040eea217affd6be75a990d19aa7d13fd0993 (patch) | |
| tree | 7e14874efcc7ca9632b1a3ba51d268ccfefd34ba /control/controlhttp/controlhttpserver | |
| parent | 3a5afc335885f535806232313e6d4b9d805abb2d (diff) | |
| download | tailscale-ea7040eea217affd6be75a990d19aa7d13fd0993.tar.xz tailscale-ea7040eea217affd6be75a990d19aa7d13fd0993.zip | |
ipn/{ipnext,ipnlocal}: expose authReconfig in ipnext.Host as AuthReconfigAsync
Also implement a limit of one on the number of goroutines that can be
waiting to do a reconfig via AuthReconfig, to prevent extensions from
calling too fast and taxing resources.
Even with the protection, the new method should only be used in
experimental or proof-of-concept contexts. The current intended use is
for an extension to be able force a reconfiguration of WireGuard, and
have the reconfiguration call back into the extension for extra Allowed
IPs.
If in the future if WireGuard is able to reconfigure individual peers more
dynamically, an extension might be able to hook into that process, and
this method on ipnext.Host may be deprecated.
Fixes tailscale/corp#38120
Updates tailscale/corp#38124
Updates tailscale/corp#38125
Signed-off-by: Michael Ben-Ami <mzb@tailscale.com>
Diffstat (limited to 'control/controlhttp/controlhttpserver')
0 files changed, 0 insertions, 0 deletions