Adrian Dewhurst f31cfaec32 ipn/ipnlocal: add exceptions to 4via6 filter ...

Some customers rely on the ability for 4via6 subnet routers to expose
loopback and/or link-local addresses. In situations where the
administrator has deemed these to be safe, accept a list of allowed
addresses in an environment variable named TS_4VIA6_ALLOW_LOCAL.

Fixes #21019

Change-Id: I7b3fe863696ee67aa352c4bd11edcbc8836920e3
Signed-off-by: Adrian Dewhurst <adrian@tailscale.com>

2026-09-11 15:41:26 -04:00

..

ipnlocaltest

ipn/ipnlocal, feature/acme: move most remaining cert code into feature/acme

2026-06-29 12:57:22 -07:00

netmapcache

tailcfg: replace int with DERPRegionID for additional type safety (#20646)

2026-08-19 16:25:50 -07:00

testdata

ipn/ipnlocal: fix the path for writing cert files (#7203)

2023-02-07 14:34:04 -08:00

breaktcp_darwin.go

all: apply go fix

2026-07-10 17:39:16 -07:00

breaktcp_linux.go

all: use Go 1.26 things, run most gofix modernizers

2026-03-06 13:32:03 -08:00

bus_test.go

ipn/ipnlocal: add wireguard session state metrics + publish on IPN bus

2026-06-15 11:41:18 -07:00

bus.go

ipn, ipn/ipnlocal: remove darwin & ios from goosGetsLegacyNetmapNotify

2026-07-15 14:47:16 -04:00

c2n_pprof.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

c2n_test.go

ipn/ipnlocal, feature/acme: move most remaining cert code into feature/acme

2026-06-29 12:57:22 -07:00

c2n.go

cmd/tailscale, ipn, feature/remoteconfig: add remote-config support

2026-07-07 12:10:34 -07:00

cert.go

ipn/ipnlocal: avoid deadlocks during shutdown

2026-08-01 13:57:38 -07:00

diskcache_test.go

tailcfg: replace int with DERPRegionID for additional type safety (#20646)

2026-08-19 16:25:50 -07:00

diskcache.go

tailcfg: replace int with DERPRegionID for additional type safety (#20646)

2026-08-19 16:25:50 -07:00

dnsconfig_test.go

tailcfg,tailcfg/{nodecap,selfcap}: split capability constants to their own packages (#20639)

2026-08-07 16:30:35 -07:00

drive_test.go

tailcfg,tailcfg/{nodecap,selfcap}: split capability constants to their own packages (#20639)

2026-08-07 16:30:35 -07:00

drive_tomove.go

tailcfg,tailcfg/{nodecap,selfcap}: split capability constants to their own packages (#20639)

2026-08-07 16:30:35 -07:00

drive.go

tailcfg,tailcfg/{nodecap,selfcap}: split capability constants to their own packages (#20639)

2026-08-07 16:30:35 -07:00

expiry_test.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

expiry.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

extension_host_test.go

ipn/{ipnext,ipnlocal}: expose authReconfig in ipnext.Host as AuthReconfigAsync

2026-03-20 17:29:11 -04:00

extension_host.go

ipn/ipnlocal: fix reporting of active ipnext extensions

2026-07-01 15:35:06 -07:00

fortest.go

ipn/ipnlocal, feature/acme: move most remaining cert code into feature/acme

2026-06-29 12:57:22 -07:00

hwattest.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

local_test.go

ipn/ipnlocal: preserve peer deltas on expiry

2026-09-04 12:13:40 -07:00

local.go

ipn/ipnlocal: preserve peer deltas on expiry

2026-09-04 12:13:40 -07:00

loglines_test.go

ipn/ipnlocal: consolidate test-only LocalBackend methods behind ForTest

2026-06-27 16:11:42 -07:00

netstack.go

types/ptr: deprecate ptr.To, use Go 1.26 new

2026-03-05 20:13:18 -08:00

node_backend_test.go

ipn/ipnlocal: don't evict another node's index entries on netmap deltas

2026-09-04 12:13:31 -07:00

node_backend.go

ipn/ipnlocal: don't evict another node's index entries on netmap deltas

2026-09-04 12:13:31 -07:00

peerapi_drive.go

tailcfg,tailcfg/{nodecap,selfcap}: split capability constants to their own packages (#20639)

2026-08-07 16:30:35 -07:00

peerapi_macios_ext.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

peerapi_test.go

ipn/ipnlocal: only require peerapi masquerade Host match per address family

2026-09-10 08:24:34 -07:00

peerapi.go

ipn/ipnlocal: only require peerapi masquerade Host match per address family

2026-09-10 08:24:34 -07:00

prefs_metrics.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

profiles_notwindows.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

profiles_test.go

ipn/ipnlocal: sort profiles by date created when possible (#20223)

2026-06-30 09:01:32 -04:00

profiles_windows.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

profiles.go

ipn/ipnlocal: fix comment typo

2026-07-30 14:16:53 -04:00

resolve_test.go

net/tsdial, ipn/ipnlocal: stop using netmap.NetworkMap in Dialer

2026-06-24 13:14:45 -07:00

resolve.go

wgengine: support per-peer WireGuard PSKs

2026-09-03 20:04:09 -07:00

routecheck_disabled.go

ipn/ipnlocal: use routecheck reports to make exit node suggestions

2026-07-02 20:26:27 -07:00

routecheck_enabled.go

ipn/ipnlocal: use routecheck reports to make exit node suggestions

2026-07-02 20:26:27 -07:00

serve_disabled.go

ipn/ipnlocal, feature/acme: move most remaining cert code into feature/acme

2026-06-29 12:57:22 -07:00

serve_metrics_test.go

ipn/ipnlocal: add metrics for inbound and outbound bytes on Serve connections (#19991)

2026-06-12 05:49:00 -05:00

serve_test.go

tailcfg,tailcfg/{nodecap,selfcap}: split capability constants to their own packages (#20639)

2026-08-07 16:30:35 -07:00

serve_unix_test.go

ipn/ipnlocal,cmd/tailscale/cli: support unix socket targets for TCP serve

2026-07-16 09:13:38 -06:00

serve.go

tailcfg,tailcfg/{nodecap,selfcap}: split capability constants to their own packages (#20639)

2026-08-07 16:30:35 -07:00

shutdown_test.go

ipn/ipnlocal: avoid deadlocks during shutdown

2026-08-01 13:57:38 -07:00

state_test.go

wgengine: support per-peer WireGuard PSKs

2026-09-03 20:04:09 -07:00

tailnet-lock_test.go

ipn/ipnlocal: consolidate test-only LocalBackend methods behind ForTest

2026-06-27 16:11:42 -07:00

tailnet-lock.go

ipn/ipnlocal: consolidate test-only LocalBackend methods behind ForTest

2026-06-27 16:11:42 -07:00

tailnetlock_disabled.go

ipn/ipnlocal, types/netmap, tsnet: filter unsigned peers on delta path

2026-06-23 08:12:36 -07:00

via_test.go

ipn/ipnlocal: add exceptions to 4via6 filter

2026-09-11 15:41:26 -04:00

via.go

ipn/ipnlocal: add exceptions to 4via6 filter

2026-09-11 15:41:26 -04:00

watchdog_test.go

ipn/ipnlocal: add back a watchdog after earlier removal from engine

2026-06-02 11:57:12 -07:00

watchdog.go

wgengine: add Engine.ProbeLocks, drop PeerForIP lock-probe overload

2026-06-23 12:02:49 -07:00

web_client_stub.go

ipn/ipnlocal: add webclient support for tvOS (#20256)

2026-06-26 08:58:23 -04:00

web_client.go

ipn/ipnlocal: add webclient support for tvOS (#20256)

2026-06-26 08:58:23 -04:00