diff options
| author | Jonathan Nobels <jnobels@gmail.com> | 2025-04-01 13:20:46 -0400 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2025-04-01 13:20:46 -0400 |
| commit | fb47824d749c214ac74115a92f89256c0ee51bf9 (patch) | |
| tree | eea1e45c5bf6cf0c934d8d41fc386e8a92631c7b /control/controlhttp/controlhttpserver | |
| parent | 886ab4fad4b407a60c882ec984815ade65396210 (diff) | |
| download | tailscale-fb47824d749c214ac74115a92f89256c0ee51bf9.tar.xz tailscale-fb47824d749c214ac74115a92f89256c0ee51bf9.zip | |
wgengine: return explicit lo0 for loopback addrs on sandboxed macOS (#15493)
fixes tailscale/corp#27506
The source address link selection on sandboxed macOS doesn't deal
with loopback addresses correctly. This adds an explicit check to ensure
we return the loopback interface for loopback addresses instead of the
default empty interface.
Specifically, this allows the dns resolver to route queries to a loopback
IP which is a common tactic for local DNS proxies.
Tested on both macos, macsys and tailscaled. Forwarded requests to
127/8 all bound to lo0.
Signed-off-by: Jonathan Nobels <jonathan@tailscale.com>
Diffstat (limited to 'control/controlhttp/controlhttpserver')
0 files changed, 0 insertions, 0 deletions