tailscale/wgengine/netstack
Andrew Dunham 9240f5c1e2
wgengine/netstack: only accept connection after dialing (#5503)
If we accept a forwarded TCP connection before dialing, we can
erroneously signal to a client that we support IPv6 (or IPv4) without
that actually being possible. Instead, we only complete the client's TCP
handshake after we've dialed the outbound connection; if that fails, we
respond with a RST.

Updates #5425 (maybe fixes!)

Signed-off-by: Andrew Dunham <andrew@tailscale.com>
2022-09-06 16:04:10 -04:00
..
netstack_linux.go wgengine/netstack: make userspace ping work when tailscaled has CAP_NET_RAW 2022-01-12 14:23:39 -08:00
netstack_test.go all: convert more code to use net/netip directly 2022-07-25 21:53:49 -07:00
netstack.go wgengine/netstack: only accept connection after dialing (#5503) 2022-09-06 16:04:10 -04:00
subnet_router_wrapper.go cmd/tailscaled, wgengine{,/netstack}: add netstack hybrid mode, add to Windows 2021-04-06 21:37:28 -07:00