summaryrefslogtreecommitdiffhomepage
path: root/cmd
AgeCommit message (Collapse)AuthorFilesLines
2020-05-11cmd/tailscale: warn subnet route users if IP forwarding is off. #320David Anderson1-0/+25
Signed-off-by: David Anderson <danderson@tailscale.com>
2020-05-11cmd/tailscale: support IPs or CIDRs in -advertise-routes.David Anderson1-3/+26
Fixes #370. Signed-off-by: David Anderson <danderson@tailscale.com>
2020-05-09ipn: add AllowVersionSkew bool to Notify & MessageBrad Fitzpatrick1-0/+2
For "tailscale status" on macOS (from separately downloaded cmd/tailscale binary against App Store IPNExtension). (This isn't all of it, but I've had this sitting around uncommitted.)
2020-05-08Implement rate limiting on log messages (#356)Wendi Yu1-0/+2
Implement rate limiting on log messages Addresses issue #317, where logs can get spammed with the same message nonstop. Created a rate limiting closure on logging functions, which limits the number of messages being logged per second based on format string. To keep memory usage as constant as possible, the previous cache purging at periodic time intervals has been replaced by an LRU that discards the oldest string when the capacity of the cache is reached. Signed-off-by: Wendi Yu <wendi.yu@yahoo.ca>
2020-05-05cmd/netcheck: better DERP latency checking outputZijie Lu1-9/+17
Fixes #206 Signed-off-by: Zijie Lu <zijie@tailscale.com>
2020-05-04cmd/mkpkg: support adding empty directories.Dmytro Shynkevych1-2/+14
Signed-off-by: Dmytro Shynkevych <dmytro@tailscale.com>
2020-05-01cmd/tailscale: add --advertise-tags option.Avery Pennarun1-7/+20
These will be used for dynamically changing the identity of a node, so its ACL rights can be different from your own. Note: Not all implemented yet on the server side, but we need this so we can request the tagged rights in the first place. Signed-off-by: Avery Pennarun <apenwarr@tailscale.com>
2020-04-30wgengine/router: split out from wgengine.David Anderson1-1/+10
The router implementations are logically separate, with their own API. Signed-off-by: David Anderson <danderson@tailscale.com>
2020-04-29Add prefs.ShieldsUp and --shields-up option.Avery Pennarun1-4/+4
This sets a default packet filter that blocks all incoming requests, giving end users more control over who can get into their machine, even if the admin hasn't set any central ACLs. Signed-off-by: Avery Pennarun <apenwarr@tailscale.com>
2020-04-19cmd/taillogin: delete itwardn1-99/+0
Signed-off-by: wardn <wardn@users.noreply.github.com>
2020-04-11all: remove unnecessary trailing newlines in format patterns for consistencyBrad Fitzpatrick1-3/+3
And document on logger.Logf that it's unnecessary.
2020-04-09netcheck: aggregate spammy logging onto one concise lineBrad Fitzpatrick1-1/+2
2020-04-09cmd/tailscale: add up --authkey flagDavid Crawshaw1-0/+3
Signed-off-by: David Crawshaw <crawshaw@tailscale.com>
2020-04-08cmd/mkpkg: fix missing default value for --dependsSylvain Rabot1-1/+1
Signed-off-by: Sylvain Rabot <sylvain@abstraction.fr>
2020-04-05tsweb: rename Handler to ReturnHandlerBrad Fitzpatrick1-1/+1
The name's been bugging me for a long time. I liked neither the overlap between tsweb.Handler and http.Handler, nor the name "ServeHTTPErr" which sounds like it's an error being returned, like it's an error handler and not sometimes a happy path. Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2020-04-04cmd/mkpkg: support depending on stuff.David Anderson1-0/+4
Signed-off-by: David Anderson <dave@natulte.net>
2020-04-04cmd/tailscaled: set CacheDirectory in service.David Anderson1-0/+2
Signed-off-by: David Anderson <dave@natulte.net>
2020-04-01cmd/microproxy: adjust to export node stats and a Go expvar server's stats.David Anderson1-5/+50
This is a temporary specialization to what tailscale prod needs right now, it'll go back to something more generic later.
2020-03-31cmd/microproxy: tiny TLS proxy that borrows autocert x509 certs.David Anderson1-0/+130
2020-03-27cmd/tailscale: add status subcommandBrad Fitzpatrick3-41/+204
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2020-03-27cmd/tailscale: remove unnecessary logpolicy/logtail loggingBrad Fitzpatrick1-4/+0
2020-03-26cmd/tailscaled, wgengine, ipn: add /debug/ipn handler with world stateBrad Fitzpatrick1-3/+10
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2020-03-25cmd/relaynode: delete it!Avery Pennarun35-553/+1
tailscale+tailscaled now completely obsoletes relaynode, so let's let it finally go away.
2020-03-20derp: move write timeout to package constant.David Anderson1-1/+0
Signed-off-by: David Anderson <dave@natulte.net>
2020-03-20derp: add short queues between reader and writer, drop on overload.David Anderson1-5/+0
This avoids the server blocking on misbehaving or heavily contended clients. We attempt to drop from the head of the queue to keep overall queueing time lower. Also: - fixes server->client keepalives, which weren't happening. - removes read rate-limiter, deferring instead to kernel-level global limiter/fair queuer. Signed-off-by: David Anderson <dave@natulte.net>
2020-03-17all: update to wireguard-go API changesBrad Fitzpatrick2-2/+2
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2020-03-15cmd/tailscale: make failure message when tailscaled down less technicalBrad Fitzpatrick1-1/+1
2020-03-15cmd/tailscale: don't crash on too many non-flag argsBrad Fitzpatrick1-2/+1
2020-03-13cmd/tailscaled: remove default user/group from systemd.David Anderson1-2/+0
2020-03-13cmd/tailscaled: rename relaynode reference in defaults file commentBrad Fitzpatrick1-1/+1
2020-03-12controlclient/netmap: write our own b.ConciseDiffFrom(a) function.Avery Pennarun1-4/+1
This removes the need for go-cmp, which is extremely bloaty so we had to leave it out of iOS. As a result, we had also left it out of macOS, and so we didn't print netmap diffs at all on darwin-based platforms. Oops. As a bonus, the output format of the new function is way better. Minor oddity: because I used the dumbest possible diff algorithm, the sort order is a bit dumb. We print all "removed" lines and then print all "added" lines, rather than doing the usual diff-like thing of interspersing them. This probably doesn't matter (maybe it's an improvement).
2020-03-12netcheck: work behind UDP-blocked networks again, add testsBrad Fitzpatrick1-4/+0
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2020-03-12cmd/derper: set a write timeoutDavid Crawshaw1-0/+1
Signed-off-by: David Crawshaw <crawshaw@tailscale.com>
2020-03-11tailscale, tailscaled: update safesocket port number.Avery Pennarun2-1/+2
This makes them able to connect to each other on Windows.
2020-03-10wgengine/monitor: don't call LinkChange when interfaces look unchangedBrad Fitzpatrick1-1/+1
Basically, don't trust the OS-level link monitor to only tell you interesting things. Sanity check it. Also, move the interfaces package into the net directory now that we have it.
2020-03-10derp/derpmap: new DERP config package, merge netcheck into magicsock moreBrad Fitzpatrick1-3/+23
Fixes #153 Updates #162 Updates #163 Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2020-03-07wgengine: define default tunname for each platformMartin Baillie1-1/+1
The device name "tailscale0" will be used for all platforms except for OpenBSD where "tun" is enforced by the kernel. `CreateTUN()` in `wireguard-go` will select the next available "tunX" device name on the OpenBSD system. Signed-off-by: Martin Baillie <martin@baillie.email>
2020-03-06cmd/derper: also link to /debug/varzBrad Fitzpatrick1-1/+2
2020-03-04netcheck: include two more DERP nodes, show more in CLI reportBrad Fitzpatrick1-0/+1
2020-03-04metrics: add a LabelMap type for variables with 1 label dimension.David Anderson1-15/+25
This lets us publish sets of vars that are breakdowns along one dimension in a format that Prometheus and Grafana natively know how to do useful things with. Signed-off-by: David Anderson <dave@natulte.net>
2020-03-03cmd/mkpkg: support scripts for rpm as well.David Anderson1-5/+5
2020-03-03tsweb, derp: add expvar http.Handler for Prometheus's formatBrad Fitzpatrick1-7/+8
And add some opinions. Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2020-03-03cmd/mkpkg: support specifying that a package replaces another.David Anderson1-0/+6
Both RPM and Deb require us to specify both Replaces and Conflicts: Conflicts tells them that the packages cannot coexist on the system, Replaces tells them which one to keep.
2020-03-03cmd/derper: set autocert EmailBrad Fitzpatrick1-0/+1
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2020-03-03cmd/tailscale, cmd/tailscaled, paths: add paths package for default pathsBrad Fitzpatrick2-4/+6
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2020-03-02cmd/derper: appease staticcheckBrad Fitzpatrick1-2/+5
2020-03-02cmd/derper: accept more LetsEncrypt hostnames without explicit configBrad Fitzpatrick2-0/+46
2020-02-28netcheck: add hairpinning detectionBrad Fitzpatrick1-0/+1
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2020-02-28netcheck, stunner: reduce log spamBrad Fitzpatrick1-1/+1
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2020-02-28cmd/tailscale: switch to an ffcli based CLI.David Anderson2-31/+85
Two commands for now, `up` and `netcheck`. The commands and the flags they take will change a bunch in the future, but this is good enough to launch on parity with relaynode. Signed-Off-By: David Anderson <dave@natulte.net>
Copyright © 2025 - 2026 Wayne Cole. WTFPL. Attribution appreciated. No warranty. Not liable for bodily damages.