Nick Khyl 272854df41 ipn/ipnlocal: unconfigure wgengine when switching profiles ...

LocalBackend transitions to ipn.NoState when switching to a different (or new) profile.
When this happens, we should unconfigure wgengine to clear routes, DNS configuration,
firewall rules that block all traffic except to the exit node, etc.

In this PR, we update (*LocalBackend).enterStateLockedOnEntry to do just that.

Fixes #15316
Updates tailscale/corp#23967

Signed-off-by: Nick Khyl <nickk@tailscale.com>

2025-03-28 10:31:45 -05:00

..

auditlog

control/controlclient, ipn: add client audit logging (#14950)

2025-03-12 10:37:03 -04:00

conffile

ipn/conffile: don't depend on hujson on iOS/Android

2024-10-10 09:14:36 -07:00

desktop

various: keep tailscale connected when Always On mode is enabled on Windows

2025-02-14 16:40:54 -06:00

ipnauth

control/controlclient, ipn: add client audit logging (#14950)

2025-03-12 10:37:03 -04:00

ipnlocal

ipn/ipnlocal: unconfigure wgengine when switching profiles

2025-03-28 10:31:45 -05:00

ipnserver

various: keep tailscale connected when Always On mode is enabled on Windows

2025-02-14 16:40:54 -06:00

ipnstate

ipn: update AddPeer to include TaildropTarget (#15091)

2025-02-28 14:17:28 -08:00

localapi

ipn/{ipnserver,localapi},tsnet: use ipnauth.Self as the actor in tsnet localapi handlers

2025-02-04 16:37:30 -06:00

policy

ipn,tailconfig: clean up unreleased and removed app connector service

2023-11-09 22:36:52 -08:00

store

ipn/store/kubestore: skip cache for the write replica in cert share mode (#15417)

2025-03-25 23:25:29 +00:00

backend.go

ipn: declare NotifyWatchOpt consts without using iota

2025-01-04 18:43:27 -08:00

conf.go

ipn: ensure that conffile is source of truth for advertised services. (#15361)

2025-03-20 14:40:36 +00:00

doc.go

ipn: generate LoginProfileView and use it instead of *LoginProfile where appropriate

2025-01-30 18:12:54 -06:00

ipn_clone.go

ipn: generate LoginProfileView and use it instead of *LoginProfile where appropriate

2025-01-30 18:12:54 -06:00

ipn_test.go

all: do not depend on the testing package

2024-05-24 05:23:36 -07:00

ipn_view.go

ipn: generate LoginProfileView and use it instead of *LoginProfile where appropriate

2025-01-30 18:12:54 -06:00

prefs_test.go

types/persist: remove Persist.LegacyFrontendPrivateMachineKey

2025-01-27 22:01:50 +00:00

prefs.go

cmd/tailscale: fix default for tailscale set --accept-routes

2025-03-27 15:47:26 -04:00

serve_test.go

ipn: [serve] warn that foreground funnel won't work if shields are up (#14685)

2025-01-19 19:00:21 +00:00

serve.go

tailcfg: add ServiceName

2025-01-22 15:27:46 -05:00

store_test.go

ipn: avoid useless no-op WriteState calls

2023-08-07 08:44:24 -07:00

store.go

ipn: add comment about thread-safety to StateStore

2024-03-06 12:42:18 -06:00