5 Commits

Author	SHA1	Message	Date
David Anderson	76d99cf01a	wgengine/filter: remove the Matches type. ... It only served to obscure the underlying slice type without adding much value. Signed-off-by: David Anderson <danderson@tailscale.com>	2020-11-09 21:39:25 -08:00
chungdaniel	4d56d19b46	control/controlclient, wgengine/filter: extract parsePacketFilter to … (#696) ... control/controlclient, wgengine/filter: extract parsePacketFilter to new constructor in wgengine/filter Signed-off-by: chungdaniel <daniel@tailscale.com>	2020-08-20 10:36:19 -07:00
Brad Fitzpatrick	337c86b89d	control/controlclient: don't crash on invalid filter CIDR from server ... Fixes #691	2020-08-17 07:56:03 -07:00
Avery Pennarun	5e5e5db75f	Appease the "missing copyright header" check. ... Signed-off-by: Avery Pennarun <apenwarr@tailscale.com>	2020-04-30 06:15:26 -04:00
Avery Pennarun	65fbb9c303	wgengine/filter: support subnet mask rules, not just /32 IPs. ... This depends on improved support from the control server, to send the new subnet width (Bits) fields. If these are missing, we fall back to assuming their value is /32. Conversely, if the server sends Bits fields to an older client, it will interpret them as /32 addresses. Since the only rules we allow are "accept" rules, this will be narrower or equal to the intended rule, so older clients will simply reject hosts on the wider subnet (fail closed). With this change, the internal filter.Matches format has diverged from the wire format used by controlclient, so move the wire format into tailcfg and convert it to filter.Matches in controlclient. Signed-off-by: Avery Pennarun <apenwarr@tailscale.com>	2020-04-30 04:56:43 -04:00