Andrew Lytvynov b743b85dad ipn/ipnlocal,ssh/tailssh: reject c2n /update if SSH conns are active (#11820) ... Since we already track active SSH connections, it's not hard to proactively reject updates until those finish. We attempt to do the same on the control side, but the detection latency for new connections is in the minutes, which is not fast enough for common short sessions. Handle a `force=true` query parameter to override this behavior, so that control can still trigger an update on a server where some long-running abandoned SSH session is open. Updates https://github.com/tailscale/corp/issues/18556 Signed-off-by: Andrew Lytvynov <awly@tailscale.com>		2024-04-22 10:27:12 -06:00
..
incubator_linux.go	all: update copyright and license headers	2023-01-27 15:36:29 -08:00
incubator.go	ssh/tailssh: add envknobs to force override forwarding, sftp, pty	2023-11-09 13:37:54 -08:00
privs_test.go	all: use Go 1.21 slices, maps instead of x/exp/{slices,maps}	2023-08-17 08:42:35 -07:00
tailssh_test.go	all: use Go 1.22 range-over-int	2024-04-16 15:32:38 -07:00
tailssh.go	ipn/ipnlocal,ssh/tailssh: reject c2n /update if SSH conns are active (#11820)	2024-04-22 10:27:12 -06:00
user.go	ssh/tailssh,util: extract new osuser package from ssh code (#10170)	2023-11-09 09:49:06 -08:00