Adrian Dewhurst a4c7902240 feature/conn25, ipn/ipnlocal: restrict conn25 DNS by peercap ...

Instead of opening all DNS queries with conn25, only permit clients to
access domains of the apps that they have permission to use. Previous
changes ensure that clients report which app they are making a DNS query
for, simplifying the check.

Updates tailscale/corp#40076
Updates tailscale/corp#47585

Change-Id: I40fee220b3f190b2a0db9b3e6cc79f323ef16b73
Signed-off-by: Adrian Dewhurst <adrian@tailscale.com>

2026-09-08 15:57:20 -04:00

..

addrAssignments_test.go

feature/conn25: return expired addrs from index lookups

2026-06-30 13:56:21 -07:00

addrAssignments.go

feature/conn25: keep mappings with active flows

2026-06-30 13:56:21 -07:00

api_test.go

feature/conn25: rename localapi.go to api.go

2026-07-22 13:04:41 -04:00

api.go

feature/conn25,ipn/ipnlocal: remove UseWIPCode() guards

2026-07-30 12:14:49 -04:00

conn25_test.go

feature/conn25, ipn/ipnlocal: restrict conn25 DNS by peercap

2026-09-08 15:57:20 -04:00

conn25.go

feature/conn25, ipn/ipnlocal: restrict conn25 DNS by peercap

2026-09-08 15:57:20 -04:00

datapath_test.go

all: use ~128KiB packet buf for batched i/o

2026-09-04 09:32:55 -07:00

datapath.go

feature/conn25: clear address assignments, flow tables on profile switch

2026-07-30 16:20:36 -04:00

flowtable_test.go

feature/conn25: clear address assignments, flow tables on profile switch

2026-07-30 16:20:36 -04:00

flowtable.go

feature/conn25: don't pre-size flow table maps

2026-08-11 15:52:08 +02:00

ippool_test.go

feature/conn25,types/appctype: serve active Conn25 state over localapi

2026-07-16 16:35:38 -04:00

ippool.go

feature/conn25,types/appctype: serve active Conn25 state over localapi

2026-07-16 16:35:38 -04:00