cccdd81441
go.mod: update some deps to get past a wireguard-windows checkptr fix
2020-11-13 11:55:13 -08:00
ce45f4f3ff
wgengine/filter: inline ip6InList into match.
...
matchIPsOnly gets 5% slower when inlining, despite significantly reduced
memory ops and slightly tighter code.
Part of #19 .
Filter/tcp6_syn_in-8 45.5ns ± 1% 42.4ns ± 2% -6.86% (p=0.000 n=10+10)
Filter/udp6_in-8 107ns ± 2% 94ns ± 2% -11.50% (p=0.000 n=9+10)
Signed-off-by: David Anderson <danderson@tailscale.com>
2020-11-12 21:41:47 -08:00
3d34128171
go.mod: update to new wireguard-go.
2020-10-26 19:23:01 +00:00
f2ce64f0c6
wgengine/router: unfork winipcfg-go package, use upstream
...
Use golang.zx2c4.com/wireguard/windows/tunnel/winipcfg
instead of github.com/tailscale/winipcfg-go package.
Updates #760
Signed-off-by: Alex Brainman <alex.brainman@gmail.com>
2020-10-13 09:21:22 -07:00
63d65368db
go.mod: bump wireguard-go for x/sys/unix symbol loss
...
Updates golang/go#41868
2020-10-08 09:47:58 -07:00
a5103a4cae
all: upgrade to latest version of depaware
2020-10-02 20:35:13 -07:00
56a787fff8
go.mod, go.sum: bump wireguard-go
2020-09-21 15:22:56 -07:00
f0e9dcdc0a
wgengine/router: restore /etc/resolv.conf after tailscale down is called
...
This change is to restore /etc/resolv.conf after tailscale down is called. This is done by setting the dns.Manager before errors occur. Error collection is also added.
Fixes #723
2020-09-17 16:40:22 -04:00
3aeb2e204c
go.mod: bump github.com/tailscale/winipcfg-go for some Windows fixes
2020-09-16 14:49:00 -07:00
3f4d93feb2
go.mod: bump depaware to get diffs out of -check, again
...
I had to use
go get -u github.com/tailscale/depaware@e09ee10c18249e4bf198e66bbd47babcd502637a
to force it to the correct version; it kept selecting head~1.
Maybe because the branch is called main instead of master?
Maybe because of some delay?
2020-09-14 16:25:09 -07:00
41f6c78c53
go.mod: bump depaware to get diffs out of -check
2020-09-14 13:25:28 -07:00
22ed3c503e
Add depaware.txt files and GitHub checks. ( #745 )
...
See https://github.com/tailscale/depaware
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2020-09-09 12:11:46 -07:00
3b05cbacfb
go.mod: update wireguard-go version
2020-09-02 12:22:49 -07:00
f915ab6552
net/tshttpproxy: add start of Kerberos Negotiate auth to proxies on Windows
...
For now only used by a new cmd/tailscale debug --get-url
subcommand. Not yet wired up to the places making HTTP requests.
Updates tailscale/corp#583
2020-08-25 13:49:06 -07:00
c5eb57f4d6
net/tshttpproxy: new package, support WPAD/PAC proxies on Windows
...
Updates tailscale/corp#553
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2020-08-18 15:40:56 -07:00
87cbc067c2
cmd/tailscale/cli: validate advertised routes' IP address-vs-network bits
...
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2020-08-10 09:16:49 -07:00
b840e7dd5b
go mod tidy
2020-08-06 21:24:09 -07:00
1b27eb431a
go.mod: update to newly rebased wireguard-go
2020-08-06 17:50:31 -07:00
43e2efe441
go mod tidy
2020-07-27 10:20:30 -07:00
648268192b
go.mod: bump wireguard-go
2020-07-24 08:54:17 -07:00
3efc29d39d
go.mod: bump netaddr.
...
Closes #567 .
Signed-off-by: Dmytro Shynkevych <dmytro@tailscale.com>
2020-07-18 04:28:03 -04:00
cdfea347d0
wgengine: update for tailscale/wireguard-go API changes
...
* update to new HandshakeDone signature
* use new Device.IpcGetOperationFiltered call to avoid sending allowed_ips
See dd6c1c8fe1
2020-07-15 20:30:45 -07:00
30bbbe9467
wgengine/router: dns: unify on *BSD, multimode on Linux, Magic DNS ( #536 )
...
Signed-off-by: Dmytro Shynkevych <dmytro@tailscale.com>
2020-07-14 09:12:00 -04:00
21d1dbfce0
wgengine/tsdns: local DNS server for testing
...
Signed-off-by: Dmytro Shynkevych <dmytro@tailscale.com>
2020-07-10 14:56:59 -04:00
98ffd78251
go.mod: bump wireguard-go dep
2020-07-09 21:46:44 -07:00
67ebba90e1
tsdns: dual resolution mode, IPv6 support ( #526 )
...
This change adds to tsdns the ability to delegate lookups to upstream nameservers.
This is crucial for setting Magic DNS as the system resolver.
Signed-off-by: Dmytro Shynkevych <dmytro@tailscale.com>
2020-07-07 15:25:32 -04:00
4db60a8436
wgengine/monitor: parse Linux netlink messages, ignore our own events
...
Fixes tailscale/corp#412 ("flood of link change events at start-up")
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2020-07-06 22:42:01 -07:00
32156330a8
net/interfaces: add func LikelyHomeRouterIP
...
For discovering where we might direct NAT-PMP/PCP/UPnP queries at in
the future.
2020-07-06 10:38:00 -07:00
9fbe8d7cf2
go.mod: bump wireguard
2020-07-03 14:09:29 -07:00
7883e5c5e7
go.mod: restore staticcheck module, make it stick around, go mod tidy
...
It kept coming & going as different people ran go mod tidy and others
ran staticcheck.
Make it stop going away with go mod tidy by adding a dep to it.
2020-07-02 22:55:14 -07:00
9cd4e65191
smallzstd: new package that constructs zstd small encoders/decoders.
...
It's just a config wrapper that passes "use less memory at the
expense of compression" parameters by default, so that we don't
accidentally construct resource-hungry (de)compressors.
Also includes a benchmark that measures the memory cost of the
small variants vs. the stock variants. The savings are significant
on both compressors (~8x less memory) and decompressors (~1.4x less,
not including the savings from the significantly smaller
window on the compression side - with those savings included it's
more like ~140x smaller).
BenchmarkSmallEncoder-8 56174 19354 ns/op 31 B/op 0 allocs/op
BenchmarkSmallEncoderWithBuild-8 2900 382940 ns/op 1746547 B/op 36 allocs/op
BenchmarkStockEncoder-8 48921 25761 ns/op 286 B/op 0 allocs/op
BenchmarkStockEncoderWithBuild-8 426 2630241 ns/op 13843842 B/op 124 allocs/op
BenchmarkSmallDecoder-8 123814 9344 ns/op 0 B/op 0 allocs/op
BenchmarkSmallDecoderWithBuild-8 41547 27455 ns/op 27694 B/op 31 allocs/op
BenchmarkStockDecoder-8 129832 9417 ns/op 1 B/op 0 allocs/op
BenchmarkStockDecoderWithBuild-8 25561 51751 ns/op 39607 B/op 92 allocs/op
Signed-off-by: David Anderson <danderson@tailscale.com>
2020-07-02 16:13:06 -07:00
a477e70632
tstest/natlab: network address allocation
...
Pairing with @danderson
2020-07-02 13:39:41 -07:00
77d3ef36f4
wgengine/magicsock: hook up discovery messages, upgrade to LAN works
...
Ping messages now go out somewhat regularly, pong replies are sent,
and pong replies are now partially handled enough to upgrade off DERP
to LAN.
CallMeMaybe packets are sent & received over DERP, but aren't yet
handled. That's next (and regular maintenance timers), and then WAN
should work.
Updates #483
2020-07-01 13:00:50 -07:00
9b8ca219a1
wgengine/magicsock: remove allocs in UDP write, use new netaddr.PutUDPAddr
...
The allocs were only introduced yesterday with a TODO. Now they're gone again.
2020-07-01 10:17:08 -07:00
eb4eb34f37
disco: new package for parsing & marshaling discovery messages
...
Updates #483
2020-06-29 21:54:34 -07:00
10368ef4c0
go.mod: bump wireguard-go version.
2020-06-17 02:54:18 +00:00
6757c990a8
Fix staticcheck warning, add Makefile with staticcheck targets, lock in staticcheck version in go.mod
2020-06-15 11:05:46 -07:00
e01a4c50ba
go.mod: require Go 1.14, since we use some of its features.
...
Signed-off-by: David Anderson <danderson@tailscale.com>
2020-06-03 17:53:48 -07:00
722673f307
Update go4.org/mem, adjust to revised API.
2020-05-31 20:22:46 -07:00
c5495288a6
Bump inet.af/netaddr dep for FromStdIP behavior change I want to depend on.
2020-05-28 09:34:41 -07:00
e6b84f2159
all: make client use server-provided DERP map, add DERP region support
...
Instead of hard-coding the DERP map (except for cmd/tailscale netcheck
for now), get it from the control server at runtime.
And make the DERP map support multiple nodes per region with clients
picking the first one that's available. (The server will balance the
order presented to clients for load balancing)
This deletes the stunner package, merging it into the netcheck package
instead, to minimize all the config hooks that would've been
required.
Also fix some test flakes & races.
Fixes #387 (Don't hard-code the DERP map)
Updates #388 (Add DERP region support)
Fixes #399 (wgengine: flaky tests)
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2020-05-23 22:31:59 -07:00
39d20e8a75
go.mod: bump wireguard-go version.
2020-05-18 21:03:48 +00:00
cd2f6679bb
go.mod: bump wireguard-go version.
...
Signed-off-by: David Anderson <danderson@tailscale.com>
2020-05-15 22:29:27 +00:00
e42ec4efba
derp/derphttp: use SOCKS/etc proxies for derphttp dials
...
Updates #227
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2020-05-12 14:38:15 -07:00
874be6566d
netcheck: DERP latency over HTTPS when UDP is blocked
...
* netcheck: DERP letency over HTTPS when UDP failed
Updates #207
Signed-off-by: Zijie Lu <zijie@tailscale.com>
* netcheck: async DERP latency check over HTTPS
Updates #207
Signed-off-by: Zijie Lu <zijie@tailscale.com>
* netcheck: DERP latency check over HTTPS: fix concurrent map
Updates #207
Signed-off-by: Zijie Lu <zijie@tailscale.com>
* netcheck: DERP latency check over HTTPS: some improvements
Updates #207
Signed-off-by: Zijie Lu <zijie@tailscale.com>
* netcheck: DERP latency check over HTTPS: use timeout context
Updates #207
Signed-off-by: Zijie Lu <zijie@tailscale.com>
* netcheck: DERP latency check over HTTPS: use report mutex
Updates #207
Signed-off-by: Zijie Lu <zijie@tailscale.com>
* netcheck: DERP latency check over HTTPS if UDP is BLOCKED
Updates #207
Signed-off-by: Zijie Lu <zijie@tailscale.com>
* netcheck: DERP latency check over HTTPS: new function measureHTTPSLatency
Updates #207
Signed-off-by: Zijie Lu <zijie@tailscale.com>
2020-05-11 11:23:09 -04:00
b01db109f5
wgengine/router: use inet.af/netaddr, not wgcfg.CIDR.
...
Signed-off-by: David Anderson <danderson@tailscale.com>
2020-05-07 23:40:03 -07:00
0068e57407
go.mod,go.sum: bump golang.org/x/sys for the Android dup2 fix
...
No tidy, because it doesn't work for me:
$ go mod tidy
go: finding module for package tailscale.io/control
go: finding module for package tailscale.io/control/cfgdb
tailscale.com/control/controlclient tested by
tailscale.com/control/controlclient.test imports
tailscale.io/control: cannot find module providing package tailscale.io/control: unrecognized import path "tailscale.io/control": parse https://tailscale.io/control?go-get=1 : no go-import meta tags (meta tag tailscale.com did not match import path tailscale.io/control)
tailscale.com/control/controlclient tested by
tailscale.com/control/controlclient.test imports
tailscale.io/control/cfgdb: cannot find module providing package tailscale.io/control/cfgdb: unrecognized import path "tailscale.io/control/cfgdb": parse https://tailscale.io/control/cfgdb?go-get=1 : no go-import meta tags (meta tag tailscale.com did not match import path tailscale.io/control/cfgdb)
Signed-off-by: Elias Naur <mail@eliasnaur.com>
2020-05-01 18:41:19 +10:00
1a0f6fea58
go.mod, go.sum: bump wireguard-go, tidy
2020-04-26 08:06:06 -07:00
7fc97c5493
wgengine/magicsock: use netaddr more
...
In prep for deleting from the ever-growing maps.
2020-04-17 15:15:42 -07:00
6fb30ff543
wgengine/magicsock: start using inet.af/netaddr a bit
2020-04-17 13:51:52 -07:00
ccfc4e0634
go.mod: bump wireguard-go version.
...
Signed-off-by: David Anderson <danderson@tailscale.com>
2020-04-16 12:53:58 -07:00
dc9b39e3fb
wgengine/windows: use new winipcfg.Sync{Addresses,Routes} functions.
...
This avoids flushing and reloading the whole list of addresses and
routes whenever remote node information changes.
2020-04-13 13:20:20 -04:00
780deb9996
go.mod, go.sum: update go4.org/mem to its new home in its own module
...
Cleans up our go.sum, not that it really matters.
2020-04-11 14:00:48 -07:00
922d9546bf
wgengine: don't allocate so much in userspaceEngine.getStatus
...
It was one of the top garbage producers on my phone.
It's slated to be deleted and replaced anyway, but this helps in the
meantime.
The go.sum changes look scary, but the new dep only adds 240 bytes to
the binary. The go.sum noise is just cmd/go being aggressive in
including a lot of stuff (which is being fixed in Go 1.15, for what I
understand). And I ran a go mod tidy, which added some too. (I had to
write a custom wrapper around go mod tidy because this mod tidy
normally breaks on tailscale.io/control being missing but referenced
in tests)
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2020-04-09 12:49:17 -07:00
59800138ff
bump wireguard dep
2020-04-07 10:02:34 -07:00
a4ef345737
cmd/tailscale: add status subcommand
...
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2020-03-27 20:34:36 -07:00
2c7ddd0828
go.mod, go.sum: tidy
2020-03-25 14:05:33 -07:00
cbd8aceb95
go.mod: bump wireguard-go version.
...
Fixes #219 .
Signed-off-by: David Anderson <dave@natulte.net>
2020-03-25 12:20:46 -07:00
f9184ad12b
go.mod: update wireguard-go for https://github.com/tailscale/wireguard-go/pull/13
2020-03-19 22:46:36 -07:00
5fa825f057
go.mod, go.sum: update
2020-03-19 08:49:12 -07:00
acd14960f8
go.mod: bump wireguard-go
...
Signed-off-by: David Crawshaw <crawshaw@tailscale.com>
2020-03-19 09:10:13 +11:00
14a2564ef0
go.mod: bump wireguard-go
2020-03-18 13:26:08 -07:00
e085aec8ef
all: update to wireguard-go API changes
...
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2020-03-17 08:53:05 -07:00
bf98913106
go.mod: bump wireguard-go version.
...
Signed-off-by: David Anderson <dave@natulte.net>
2020-03-16 18:36:30 -07:00
72d9e1d633
go.mod: bump wireguard-go version.
2020-03-11 10:32:50 -07:00
af58cfc476
go.mod: bump wireguard-go version
...
Signed-off-by: David Crawshaw <crawshaw@tailscale.com>
2020-03-11 11:29:14 -04:00
4affea2691
go.mod: bump wireguard-go version.
...
Signed-off-by: David Anderson <danderson@tailscale.com>
2020-03-10 18:00:37 -07:00
d07146aafb
go.mod, go.sum: update
2020-03-09 21:01:08 -07:00
96e0f86263
go.mod: bump wireguard-go.
...
Signed-off-by: David Anderson <danderson@tailscale.com>
2020-03-06 23:38:02 -08:00
b9512edb7b
go.mod: bump wireguard-go version.
...
Signed-off-by: David Anderson <danderson@tailscale.com>
2020-03-06 20:49:31 -08:00
9b802d338c
go.mod: pull in deadlock fix from tailscale/wireguard-go.
...
Signed-off-by: David Anderson <danderson@tailscale.com>
2020-03-06 20:43:38 -08:00
f6dd2128d9
version: bump
2020-03-06 14:57:27 -08:00
47265000da
Revert "update CI and everything to Go 1.14."
...
This reverts commit 905fe9f6a2
2020-03-06 13:45:54 -08:00
6b49347e4d
Update staticcheck version in go.mod.
...
Signed-off-by: David Anderson <danderson@tailscale.com>
2020-03-06 13:24:32 -08:00
905fe9f6a2
update CI and everything to Go 1.14.
2020-03-06 12:55:52 -08:00
551964c562
go.mod: update wireguard-go version
...
Signed-off-by: David Crawshaw <crawshaw@tailscale.com>
2020-03-04 21:29:53 -05:00
4a7638c319
go.mod: update wireguard-go version
...
Signed-off-by: David Crawshaw <crawshaw@tailscale.com>
2020-03-04 18:13:56 -05:00
89a2c3eb04
wgengine: don't create duplicate iptables rules on Linux, clean up
...
Fixes #131
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2020-03-03 13:46:53 -08:00
11489a6e67
go.sum: add lines
2020-03-02 11:07:42 -08:00
9cdaeac00a
go.mod: update wireguard-go version.
...
I accidentally crushed one of crawshaw's patches, fixing this now.
2020-03-01 14:04:10 -08:00
92bae83cc1
go.mod: update wireguard-go commit.
...
Signed-Off-By: David Anderson <dave@natulte.net>
2020-03-01 13:58:09 -08:00
719c974c38
go.mod: update wireguard-go version
...
Signed-off-by: David Crawshaw <crawshaw@tailscale.com>
2020-03-01 12:17:10 -05:00
18fb98792b
go.mod: update wireguard-go version.
...
Signed-off-by: David Anderson <dave@natulte.net>
2020-03-01 01:16:07 -08:00
061315acb4
go.mod: update version of wireguard-go.
...
Signed-Off-By: David Anderson <dave@natulte.net>
2020-03-01 00:50:39 -08:00
1dbd1babc9
go.mod: use latest wireguard-go version
...
Signed-off-by: David Crawshaw <crawshaw@tailscale.com>
2020-02-29 16:08:28 -05:00
d5050c37a5
go.mod: use latest wireguard-go version
2020-02-29 11:26:44 -05:00
8aa2090919
go.mod: roll forward wireguard-go
...
Signed-off-by: David Crawshaw <crawshaw@tailscale.com>
2020-02-28 22:12:05 -05:00
38acccad09
derp: remove some debug noise I left in
...
:(
2020-02-28 13:20:56 -08:00
4cd3e82bbd
go.mod: bump wireguard-go
...
Updates #112
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2020-02-28 11:15:07 -08:00
06bf0d980e
go.mod: bump wireguard-go version
...
For #110
2020-02-28 06:21:07 -05:00
78654ee1bd
cmd/tailscale: switch to an ffcli based CLI.
...
Two commands for now, `up` and `netcheck`. The commands and the flags they take
will change a bunch in the future, but this is good enough to launch on parity
with relaynode.
Signed-Off-By: David Anderson <dave@natulte.net>
2020-02-28 00:15:25 -08:00
14559340ee
Start of netcheck package & including network state in Hostinfo.
...
* adds new packet "netcheck" to do the checking of UDP, IPv6, and
nearest DERP server, and the Report type for all that (and more
in the future, probably pulling in danderson's natprobe)
* new tailcfg.NetInfo type
* cmd/tailscale netcheck subcommand (tentative name, likely to
change/move) to print out the netcheck.Report.
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2020-02-27 11:05:27 -08:00
74650d6fb5
go.mod, go.sum: update
2020-02-26 15:19:10 -08:00
6d2ac01464
go.mod: bump wireguard-go version
...
Signed-off-by: David Crawshaw <crawshaw@tailscale.com>
2020-02-25 17:03:20 -05:00
7a3be96199
wgengine: add pinger to generate initial spray packets
...
For 3 seconds after a successful handshake, wgengine will send a
ping packet every 300ms to its peer. This ensures the spray logic
in magicsock has something to spray.
Signed-off-by: David Crawshaw <crawshaw@tailscale.com>
2020-02-25 15:09:08 -05:00
868cfae84f
wgengine, magicsock: adjust for wireguard-go conn/device package split
...
Signed-off-by: David Crawshaw <crawshaw@tailscale.com>
2020-02-24 07:30:14 -05:00
8994a59e20
go.mod: update wireguard-go version
...
Signed-off-by: David Crawshaw <crawshaw@tailscale.com>
2020-02-23 13:49:21 -05:00
ebc70acac7
go.mod: update wireguard-go version
2020-02-21 21:30:00 -05:00
cc44e8a443
cmd/mkpkg: add small wrapper around nfpm to build deb/rpm packages.
...
Signed-Off-By: David Anderson <dave@natulte.net>
2020-02-21 10:45:59 -08:00
88f1cc0c98
derp, cmd/derper: add rate limiting support, add default 5Mbps limit
...
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2020-02-20 15:26:30 -08:00
f266e2d1eb
version: add CmdName func for future use by logpolicy
...
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
Change-Id: I02a7c907844f71242ef06ed097f2a92ece7ae091
2020-02-19 11:34:45 -08:00
431929c09a
go.mod: fix wireguard-go version
2020-02-19 11:48:59 -05:00
d0f697ee07
wgengine: update for wgcfg changes
...
Signed-off-by: David Crawshaw <crawshaw@tailscale.com>
2020-02-19 11:44:37 -05:00
4d09316f9a
wgengine/monitor: use RTMGRP_* consts from x/sys/unix
...
Bump golang.org/x/sys/unix to get the RTMGRP_* consts and use them.
Signed-off-by: Tobias Klauser <tklauser@distanz.ch>
2020-02-17 14:15:08 -08:00
9dbc52bb5b
go.mod: fix wireguard-go dep
...
Fixes #59
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2020-02-15 18:50:05 -08:00
745c8c92b1
wgengine: fix windows build for winipcfg-go
...
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2020-02-12 22:05:13 -08:00
d404f1caed
cmd/tsshd: add basic SSH server
2020-02-12 14:46:59 -08:00
2227ede8af
controlclient: fix staticcheck lint.
...
Signed-off-by: David Anderson <dave@natulte.net>
2020-02-10 23:16:13 -08:00
87334fb332
wgengine, controlclient: fewer pointers in wgcfg key types
...
Signed-off-by: David Crawshaw <david@zentus.com>
2020-02-10 22:09:59 -05:00
a8d8b8719a
Move Linux client & common packages into a public repo.
2020-02-09 09:32:57 -08:00
Brad Fitzpatrick
David Anderson
Alex Brainman
Josh Bleecher Snyder
Christina Wen
Josh Bleecher Snyder
Dmytro Shynkevych
halulu
Elias Naur
Avery Pennarun
Brad Fitzpatrick
David Anderson
David Crawshaw
Tobias Klauser
David Crawshaw
Earl Lee