Andrew Dunham bd14112d0b

wgengine/netstack: only accept connection after dialing (#5503) ...

If we accept a forwarded TCP connection before dialing, we can
erroneously signal to a client that we support IPv6 (or IPv4) without
that actually being possible. Instead, we only complete the client's TCP
handshake after we've dialed the outbound connection; if that fails, we
respond with a RST.

Updates #5425 (maybe fixes!)

Signed-off-by: Andrew Dunham <andrew@tailscale.com>
(cherry picked from commit 9240f5c1e20bac3ecf945a58a447f53157f68e14)

2022-09-07 19:36:17 -07:00

..

netstack_linux.go

wgengine/netstack: make userspace ping work when tailscaled has CAP_NET_RAW

2022-01-12 14:23:39 -08:00

netstack_test.go

all: convert more code to use net/netip directly

2022-07-25 21:53:49 -07:00

netstack.go

wgengine/netstack: only accept connection after dialing (#5503)

2022-09-07 19:36:17 -07:00

subnet_router_wrapper.go

cmd/tailscaled, wgengine{,/netstack}: add netstack hybrid mode, add to Windows

2021-04-06 21:37:28 -07:00