net/portmapper: put mappings and releases into an execqueuecmol/run_portmapper_in_exec_queue

We had an issue where releasing mappings would cause a deadlock when the
UPnP gateway did not respond. Instead of working on mappings sync, put
it into an exec queue and add a timeout on releasing the mappings.

Updates tailscale/corp#33888
Updates tailscale/corp#33619

Signed-off-by: Claus Lensbøl <claus@tailscale.com>

1 files changed, 9 insertions, 5 deletions

diff --git a/feature/portmapper/portmapper.go b/feature/portmapper/portmapper.go
index d1b903cb6..9c9d6acfc 100644
--- a/feature/portmapper/portmapper.go
+++ b/feature/portmapper/portmapper.go
@@ -6,6 +6,8 @@
 package portmapper
 
 import (
+	"context"
+
 	"tailscale.com/feature"
 	"tailscale.com/net/netmon"
 	"tailscale.com/net/portmapper"
@@ -20,16 +22,18 @@ func init() {
 }
 
 func newPortMapper(
+	ctx context.Context,
 	logf logger.Logf,
 	bus *eventbus.Bus,
 	netMon *netmon.Monitor,
 	disableUPnPOrNil func() bool,
-	onlyTCP443OrNil func() bool) portmappertype.Client {
-
+	onlyTCP443OrNil func() bool,
+) portmappertype.Client {
 	pm := portmapper.NewClient(portmapper.Config{
-		EventBus: bus,
-		Logf:     logf,
-		NetMon:   netMon,
+		ShutdownCtx: ctx,
+		EventBus:    bus,
+		Logf:        logf,
+		NetMon:      netMon,
 		DebugKnobs: &portmapper.DebugKnobs{
 			DisableAll:      onlyTCP443OrNil,
 			DisableUPnPFunc: disableUPnPOrNil,