wgengine/magicsock: don't peer relay if NodeAttrOnlyTCP443 is set (#16517)

Updates tailscale/corp#30138

Signed-off-by: Jordan Whited <jordan@tailscale.com>
This commit is contained in:
Jordan Whited
2025-07-09 20:02:00 -07:00
committed by GitHub
parent ae8641735d
commit 6a0fad1e10

View File

@@ -2704,6 +2704,7 @@ func (c *Conn) onNodeViewsUpdate(update NodeViewsUpdate) {
relayClientEnabled := update.SelfNode.Valid() &&
!update.SelfNode.HasCap(tailcfg.NodeAttrDisableRelayClient) &&
!update.SelfNode.HasCap(tailcfg.NodeAttrOnlyTCP443) &&
envknob.UseWIPCode()
c.mu.Lock()