Maisem Ali e67069550b ipn/ipnlocal,net/tstun,wgengine: create and plumb jailed packet filter ...

This plumbs a packet filter for jailed nodes through to the
tstun.Wrapper; the filter for a jailed node is equivalent to a "shields
up" filter. Currently a no-op as there is no way for control to
tell the client whether a peer is jailed.

Updates tailscale/corp#19623

Co-authored-by: Andrew Dunham <andrew@du.nham.ca>
Signed-off-by: Maisem Ali <maisem@tailscale.com>
Change-Id: I5ccc5f00e197fde15dd567485b2a99d8254391ad

2024-05-06 15:32:22 -07:00

..

testdata

ipn/ipnlocal: fix the path for writing cert files (#7203)

2023-02-07 14:34:04 -08:00

breaktcp_darwin.go

cmd/tailscale: add debug commands to break connections

2023-08-11 06:37:26 -07:00

breaktcp_linux.go

cmd/tailscale: add debug commands to break connections

2023-08-11 06:37:26 -07:00

c2n_pprof.go

ipn/ipnlocal: add c2n /debug/pprof/allocs endpoint

2024-03-22 17:29:59 -05:00

c2n_test.go

util/cmpx: delete now that we're using Go 1.22

2024-02-07 18:10:15 -08:00

c2n.go

ipn/ipnlocal,ssh/tailssh: reject c2n /update if SSH conns are active (#11820)

2024-04-22 10:27:12 -06:00

cert_js.go

ipn/ipnlocal: add c2n method to check on TLS cert fetch status

2023-11-16 14:08:38 -08:00

cert_test.go

all: use Go 1.21 slices, maps instead of x/exp/{slices,maps}

2023-08-17 08:42:35 -07:00

cert.go

ipn/ipnlocal: remove ancient transition mechanism for https certs

2024-02-17 10:33:11 -08:00

dnsconfig_test.go

util/cmpx: delete now that we're using Go 1.22

2024-02-07 18:10:15 -08:00

drive.go

ipn/ipnlocal: reuse transport across Taildrive remotes

2024-05-03 16:07:52 -05:00

expiry_test.go

types/netmap, all: make NetworkMap.SelfNode a tailcfg.NodeView

2023-08-21 13:34:49 -07:00

expiry.go

ssh/tailssh: use control server time instead of local time

2023-11-17 11:10:11 -06:00

local_test.go

ipnlocal, magicsock: store last suggested exit node id in local backend (#11959)

2024-05-03 13:24:26 -04:00

local.go

ipn/ipnlocal,net/tstun,wgengine: create and plumb jailed packet filter

2024-05-06 15:32:22 -07:00

loglines_test.go

all: use Go 1.22 range-over-int

2024-04-16 15:32:38 -07:00

network-lock_test.go

ipn/ipnlocal: plumb health.Tracker into profileManager constructor

2024-05-03 08:25:38 -07:00

network-lock.go

ipn/{ipnlocal,localapi},wgengine{,/magicsock}: plumb health.Tracker

2024-04-26 09:43:28 -07:00

peerapi_h2c.go

all: update copyright and license headers

2023-01-27 15:36:29 -08:00

peerapi_macios_ext.go

net/netmon, add: add netmon.State type alias of interfaces.State

2024-04-28 07:34:52 -07:00

peerapi_test.go

ipn/ipnlocal: plumb health.Tracker into profileManager constructor

2024-05-03 08:25:38 -07:00

peerapi.go

net/{interfaces,netmon}, all: merge net/interfaces package into net/netmon

2024-04-28 07:34:52 -07:00

profiles_notwindows.go

ipn/ipnlocal: fix profile duplication

2023-08-08 13:43:37 -06:00

profiles_test.go

various: implement stateful firewalling on Linux (#12025)

2024-05-06 16:22:17 -06:00

profiles_windows.go

ipn/ipnlocal: better enforce system policies

2023-12-06 14:45:06 -05:00

profiles.go

various: implement stateful firewalling on Linux (#12025)

2024-05-06 16:22:17 -06:00

serve_test.go

ipn/ipnlocal: plumb health.Tracker into profileManager constructor

2024-05-03 08:25:38 -07:00

serve.go

all: use Go 1.22 range-over-int

2024-04-16 15:32:38 -07:00

ssh_stub.go

ipnlocal: log failure to get ssh host keys

2024-01-30 16:57:16 -06:00

ssh_test.go

ipn/ipnlocal: plumb health.Tracker into profileManager constructor

2024-05-03 08:25:38 -07:00

ssh.go

ipnlocal: log failure to get ssh host keys

2024-01-30 16:57:16 -06:00

state_test.go

all: use Go 1.22 range-over-int

2024-04-16 15:32:38 -07:00

taildrop.go

ipn/localapi: add support for multipart POST to file-put

2024-03-27 08:53:52 -05:00

web_client_stub.go

ipn/ipnlocal: add mutex to webClient struct

2023-11-15 17:57:48 -05:00

web_client.go

all: remove LenIter, use Go 1.22 range-over-int instead

2024-02-25 12:29:45 -08:00