tailscale/ipn
Maisem Ali e67069550b ipn/ipnlocal,net/tstun,wgengine: create and plumb jailed packet filter
This plumbs a packet filter for jailed nodes through to the
tstun.Wrapper; the filter for a jailed node is equivalent to a "shields
up" filter. Currently a no-op as there is no way for control to
tell the client whether a peer is jailed.

Updates tailscale/corp#19623

Co-authored-by: Andrew Dunham <andrew@du.nham.ca>
Signed-off-by: Maisem Ali <maisem@tailscale.com>
Change-Id: I5ccc5f00e197fde15dd567485b2a99d8254391ad
2024-05-06 15:32:22 -07:00
..
conffile ipn/{conffile,ipnlocal}: start booting tailscaled from a config file w/ auth key 2023-10-17 07:12:49 -07:00
ipnauth go.mod, all: move away from inet.af domain seized by Taliban 2024-02-13 19:21:09 -08:00
ipnlocal ipn/ipnlocal,net/tstun,wgengine: create and plumb jailed packet filter 2024-05-06 15:32:22 -07:00
ipnserver ipn/{ipnlocal,localapi},wgengine{,/magicsock}: plumb health.Tracker 2024-04-26 09:43:28 -07:00
ipnstate ipn/ipnlocal: populate peers' capabilities (#11365) 2024-04-03 10:55:28 -04:00
localapi appc: setting AdvertiseRoutes explicitly discards app connector routes 2024-04-29 11:40:04 -07:00
policy ipn,tailconfig: clean up unreleased and removed app connector service 2023-11-09 22:36:52 -08:00
store cmd/containerboot,kube,ipn/store/kubestore: allow interactive login on kube, check Secret create perms, allow empty state Secret (#11326) 2024-04-29 17:03:48 +01:00
backend.go ipn: remove unused Options.LegacyMigrationPrefs 2024-04-15 22:13:53 -07:00
conf.go cmd/k8s-operator,ipn/conf.go: fix --accept-routes for proxies (#11453) 2024-03-19 14:54:17 +00:00
doc.go all: update copyright and license headers 2023-01-27 15:36:29 -08:00
ipn_clone.go various: implement stateful firewalling on Linux (#12025) 2024-05-06 16:22:17 -06:00
ipn_test.go net/packet: split off checksum munging into different pkg 2023-10-11 14:25:58 -07:00
ipn_view.go various: implement stateful firewalling on Linux (#12025) 2024-05-06 16:22:17 -06:00
prefs.go various: implement stateful firewalling on Linux (#12025) 2024-05-06 16:22:17 -06:00
prefs_test.go various: implement stateful firewalling on Linux (#12025) 2024-05-06 16:22:17 -06:00
serve.go all: deprecate Node.Capabilities (more), remove PeerChange.Capabilities [capver 89] 2024-03-24 21:08:46 -07:00
serve_test.go {ipn/serve,cmd/tailscale/cli}: move some shared funcs to ipn 2024-03-05 14:30:38 -05:00
store.go ipn: add comment about thread-safety to StateStore 2024-03-06 12:42:18 -06:00
store_test.go ipn: avoid useless no-op WriteState calls 2023-08-07 08:44:24 -07:00