Nick Khyl 272854df41 ipn/ipnlocal: unconfigure wgengine when switching profiles ...

LocalBackend transitions to ipn.NoState when switching to a different (or new) profile.
When this happens, we should unconfigure wgengine to clear routes, DNS configuration,
firewall rules that block all traffic except to the exit node, etc.

In this PR, we update (*LocalBackend).enterStateLockedOnEntry to do just that.

Fixes #15316
Updates tailscale/corp#23967

Signed-off-by: Nick Khyl <nickk@tailscale.com>

2025-03-28 10:31:45 -05:00

..

testdata

ipn/ipnlocal: fix the path for writing cert files (#7203)

2023-02-07 14:34:04 -08:00

autoupdate_disabled.go

ipn/ipnlocal: periodically run auto-updates when "offline" (#12118)

2024-06-03 19:24:53 -07:00

autoupdate.go

clientupdate: return true for CanAutoUpdate for macsys (#12746)

2024-07-08 15:54:50 -07:00

breaktcp_darwin.go

cmd/tailscale: add debug commands to break connections

2023-08-11 06:37:26 -07:00

breaktcp_linux.go

cmd/tailscale: add debug commands to break connections

2023-08-11 06:37:26 -07:00

bus_test.go

ipn/ipnlocal: add IPN Bus NotifyRateLimit watch bit NotifyRateLimit

2024-11-18 10:50:30 -08:00

bus.go

ipn/ipnlocal: fix build, remove another Notify.BackendLogID reference that crept in

2024-11-18 12:17:19 -08:00

c2n_pprof.go

ipn/ipnlocal: add c2n /debug/pprof/allocs endpoint

2024-03-22 17:29:59 -05:00

c2n_test.go

util/cmpx: delete now that we're using Go 1.22

2024-02-07 18:10:15 -08:00

c2n.go

feature/*: make Wake-on-LAN conditional, start supporting modular features

2025-01-22 17:16:15 -08:00

cert_js.go

ipn/ipnlocal: add c2n method to check on TLS cert fetch status

2023-11-16 14:08:38 -08:00

cert_test.go

ipn/ipnlocal, envknob: make it possible to configure the cert client to act in read-only mode (#15250)

2025-03-13 14:14:03 +00:00

cert.go

ipn/ipnlocal, envknob: make it possible to configure the cert client to act in read-only mode (#15250)

2025-03-13 14:14:03 +00:00

desktop_sessions.go

various: keep tailscale connected when Always On mode is enabled on Windows

2025-02-14 16:40:54 -06:00

dnsconfig_test.go

ipn/ipnlocal: don't program system DNS when node key is expired (#13370)

2024-09-09 15:15:29 -04:00

drive.go

cmd/viewer,types/views,various: avoid allocations in pointer field getters whenever possible

2025-01-14 09:37:10 -06:00

expiry_test.go

cmd/viewer,types/views,various: avoid allocations in pointer field getters whenever possible

2025-01-14 09:37:10 -06:00

expiry.go

all: add Node.HomeDERP int, phase out "127.3.3.40:$region" hack [capver 111]

2025-01-14 12:27:14 -08:00

local_test.go

ipn/ipnlocal: unconfigure wgengine when switching profiles

2025-03-28 10:31:45 -05:00

local.go

ipn/ipnlocal: unconfigure wgengine when switching profiles

2025-03-28 10:31:45 -05:00

loglines_test.go

util/usermetrics: make usermetrics non-global

2024-09-25 15:57:00 +02:00

network-lock_test.go

ipn: generate LoginProfileView and use it instead of *LoginProfile where appropriate

2025-01-30 18:12:54 -06:00

network-lock.go

ipn: generate LoginProfileView and use it instead of *LoginProfile where appropriate

2025-01-30 18:12:54 -06:00

peerapi_h2c.go

all: update copyright and license headers

2023-01-27 15:36:29 -08:00

peerapi_macios_ext.go

net/netmon, add: add netmon.State type alias of interfaces.State

2024-04-28 07:34:52 -07:00

peerapi_test.go

util/usermetrics: make usermetrics non-global

2024-09-25 15:57:00 +02:00

peerapi.go

net/netmon: use Monitor's tsIfName if set by SetTailscaleInterfaceName

2025-03-24 13:34:02 -07:00

profiles_notwindows.go

ipn/ipnlocal: refactor and cleanup profileManager

2024-08-28 14:42:35 -05:00

profiles_test.go

ipn/ipnlocal: fix (*profileManager).DefaultUserProfileID for users other than current

2025-02-10 10:23:10 -06:00

profiles_windows.go

ipn/ipnlocal: refactor and cleanup profileManager

2024-08-28 14:42:35 -05:00

profiles.go

ipn/ipn{local,server}: extract logic that determines the "best" Tailscale profile to use

2025-02-12 19:06:40 -06:00

serve_test.go

types/netmap,*: pass around UserProfiles as views (pointers) instead

2025-02-11 07:12:54 -08:00

serve.go

ipn: generate LoginProfileView and use it instead of *LoginProfile where appropriate

2025-01-30 18:12:54 -06:00

ssh_stub.go

ipnlocal: log failure to get ssh host keys

2024-01-30 16:57:16 -06:00

ssh_test.go

ipn/ipnlocal: plumb health.Tracker into profileManager constructor

2024-05-03 08:25:38 -07:00

ssh.go

ssh,tempfork/gliderlabs/ssh: replace github.com/tailscale/golang-x-crypto/ssh with golang.org/x/crypto/ssh

2025-01-31 16:36:39 -06:00

state_test.go

ipn/ipnlocal: unconfigure wgengine when switching profiles

2025-03-28 10:31:45 -05:00

taildrop.go

ipn/localapi: add support for multipart POST to file-put

2024-03-27 08:53:52 -05:00

web_client_stub.go

all: use new LocalAPI client package location

2025-02-05 14:41:42 -08:00

web_client.go

all: use new LocalAPI client package location

2025-02-05 14:41:42 -08:00