Andrew Lytvynov c9179bc261

various: disable stateful filtering by default (#12197) ...

After some analysis, stateful filtering is only necessary in tailnets
that use `autogroup:danger-all` in `src` in ACLs. And in those cases
users explicitly specify that hosts outside of the tailnet should be
able to reach their nodes. To fix local DNS breakage in containers, we
disable stateful filtering by default.

Updates #12108

Signed-off-by: Andrew Lytvynov <awly@tailscale.com>

2024-05-20 11:44:29 -07:00

..

conffile

ipn/{conffile,ipnlocal}: start booting tailscaled from a config file w/ auth key

2023-10-17 07:12:49 -07:00

ipnauth

go.mod, all: move away from inet.af domain seized by Taliban

2024-02-13 19:21:09 -08:00

ipnlocal

various: disable stateful filtering by default (#12197)

2024-05-20 11:44:29 -07:00

ipnserver

ipn/ipnserver: close a small race in ipnserver, ~simplify code

2024-05-07 21:27:06 -07:00

ipnstate

cmd/tailscale,controlclient,ipnlocal: fix 'up', deflake tests more

2024-05-07 22:34:45 -07:00

localapi

ipn/ipnlocal, all: plumb health trackers in tests

2024-05-07 22:22:10 -07:00

policy

ipn,tailconfig: clean up unreleased and removed app connector service

2023-11-09 22:36:52 -08:00

store

cmd/containerboot,kube,ipn/store/kubestore: allow interactive login on kube, check Secret create perms, allow empty state Secret (#11326)

2024-04-29 17:03:48 +01:00

backend.go

ipn: remove unused Options.LegacyMigrationPrefs

2024-04-15 22:13:53 -07:00

conf.go

cmd/k8s-operator,cmd/containerboot,ipn,k8s-operator: turn off stateful filter for egress proxies. (#12075)

2024-05-10 16:32:37 +01:00

doc.go

all: update copyright and license headers

2023-01-27 15:36:29 -08:00

ipn_clone.go

ipn,wgengine: remove vestigial Prefs.AllowSingleHosts

2024-05-17 20:50:19 -07:00

ipn_test.go

net/packet: split off checksum munging into different pkg

2023-10-11 14:25:58 -07:00

ipn_view.go

ipn,wgengine: remove vestigial Prefs.AllowSingleHosts

2024-05-17 20:50:19 -07:00

prefs_test.go

ipn,wgengine: remove vestigial Prefs.AllowSingleHosts

2024-05-17 20:50:19 -07:00

prefs.go

various: disable stateful filtering by default (#12197)

2024-05-20 11:44:29 -07:00

serve_test.go

{ipn/serve,cmd/tailscale/cli}: move some shared funcs to ipn

2024-03-05 14:30:38 -05:00

serve.go

all: deprecate Node.Capabilities (more), remove PeerChange.Capabilities [capver 89]

2024-03-24 21:08:46 -07:00

store_test.go

ipn: avoid useless no-op WriteState calls

2023-08-07 08:44:24 -07:00

store.go

ipn: add comment about thread-safety to StateStore

2024-03-06 12:42:18 -06:00