mirror of
https://github.com/tailscale/tailscale.git
synced 2024-12-12 03:04:40 +00:00
8cc5c51888
When reverse path filtering is in strict mode on Linux, using an exit node blocks all network connectivity. This change adds a warning about this to `tailscale status` and the logs. Example in `tailscale status`: ``` - not connected to home DERP region 22 - The following issues on your machine will likely make usage of exit nodes impossible: [interface "eth0" has strict reverse-path filtering enabled], please set rp_filter=2 instead of rp_filter=1; see https://github.com/tailscale/tailscale/issues/3310 ``` Example in the logs: ``` 2024/02/21 21:17:07 health("overall"): error: multiple errors: not in map poll The following issues on your machine will likely make usage of exit nodes impossible: [interface "eth0" has strict reverse-path filtering enabled], please set rp_filter=2 instead of rp_filter=1; see https://github.com/tailscale/tailscale/issues/3310 ``` Updates #3310 Signed-off-by: Anton Tolchanov <anton@tailscale.com>
16 lines
727 B
Go
16 lines
727 B
Go
// Copyright (c) Tailscale Inc & AUTHORS
|
|
// SPDX-License-Identifier: BSD-3-Clause
|
|
|
|
// Package healthmsg contains some constants for health messages.
|
|
//
|
|
// It's a leaf so both the server and CLI can depend on it without bringing too
|
|
// much in to the CLI binary.
|
|
package healthmsg
|
|
|
|
const (
|
|
WarnAcceptRoutesOff = "Some peers are advertising routes but --accept-routes is false"
|
|
TailscaleSSHOnBut = "Tailscale SSH enabled, but " // + ... something from caller
|
|
LockedOut = "this node is locked out; it will not have connectivity until it is signed. For more info, see https://tailscale.com/s/locked-out"
|
|
WarnExitNodeUsage = "The following issues on your machine will likely make usage of exit nodes impossible"
|
|
)
|