tailscale/wgengine/router
Irbe Krumina 3af0f526b8
cmd{containerboot,k8s-operator},util/linuxfw: support ExternalName Services (#11802)
* cmd/containerboot,util/linuxfw: support proxy backends specified by DNS name

Adds support for optionally configuring containerboot to proxy
traffic to backends configured by passing TS_EXPERIMENTAL_DEST_DNS_NAME env var
to containerboot.
Containerboot will periodically (every 10 minutes) attempt to resolve
the DNS name and ensure that all traffic sent to the node's
tailnet IP gets forwarded to the resolved backend IP addresses.

Currently:
- if the firewall mode is iptables, traffic will be load balanced
accross the backend IP addresses using round robin. There are
no health checks for whether the IPs are reachable.
- if the firewall mode is nftables traffic will only be forwarded
to the first IP address in the list. This is to be improved.

* cmd/k8s-operator: support ExternalName Services

 Adds support for exposing endpoints, accessible from within
a cluster to the tailnet via DNS names using ExternalName Services.
This can be done by annotating the ExternalName Service with
tailscale.com/expose: "true" annotation.
The operator will deploy a proxy configured to route tailnet
traffic to the backend IPs that service.spec.externalName
resolves to. The backend IPs must be reachable from the operator's
namespace.

Updates tailscale/tailscale#10606

Signed-off-by: Irbe Krumina <irbe@tailscale.com>
2024-04-23 17:30:00 +01:00
..
callback.go wgengine/router: implement UpdateMagicsockPort for CallbackRouter (#10494) 2023-12-07 10:45:14 -05:00
ifconfig_windows.go wgengine\router: fix the Tailscale-In firewall rule to work on domain networks 2024-04-19 15:43:15 -05:00
ifconfig_windows_test.go all: use Go 1.22 range-over-int 2024-04-16 15:32:38 -07:00
router.go cmd/tailscaled: move cleanup to an implicit action during startup 2024-04-09 12:44:08 -07:00
router_darwin.go cmd/tailscaled: move cleanup to an implicit action during startup 2024-04-09 12:44:08 -07:00
router_default.go cmd/tailscaled: move cleanup to an implicit action during startup 2024-04-09 12:44:08 -07:00
router_fake.go util/linuxfw, wgengine: allow ingress to magicsock UDP port on Linux (#10370) 2023-12-05 18:12:02 -05:00
router_freebsd.go cmd/tailscaled: move cleanup to an implicit action during startup 2024-04-09 12:44:08 -07:00
router_linux.go wgengine/router: don't attempt route cleanup on Synology 2024-04-15 09:49:25 -07:00
router_linux_test.go cmd{containerboot,k8s-operator},util/linuxfw: support ExternalName Services (#11802) 2024-04-23 17:30:00 +01:00
router_openbsd.go cmd/tailscaled: move cleanup to an implicit action during startup 2024-04-09 12:44:08 -07:00
router_test.go all: use Go 1.22 range-over-int 2024-04-16 15:32:38 -07:00
router_userspace_bsd.go util/linuxfw, wgengine: allow ingress to magicsock UDP port on Linux (#10370) 2023-12-05 18:12:02 -05:00
router_windows.go wgengine\router: fix the Tailscale-In firewall rule to work on domain networks 2024-04-19 15:43:15 -05:00
router_windows_test.go wgengine/router: look up absolute path to netsh.exe on Windows 2024-01-10 20:20:19 -05:00
runner.go all: update copyright and license headers 2023-01-27 15:36:29 -08:00