Claus Lensbøl be7cce74ba wgengine/userspace: do not fall back to old key on tsmpLearned mismatch (#19575) ...

The mismatch behaviour of falling back to a previous key could end up
breaking connections when the netmap update took longer than the 2
seconds allowed in controlClient.auto for netmap updates, or if the
controlClient context was canceled. This could end up breaking
legitimate updates to the netmap for disco keys coming from control.

Instead, log the event, and let the connection be reset to that of the
key as that is safer.

Issue found by @bradfitz.

Updates #19574

Signed-off-by: Claus Lensbøl <claus@tailscale.com>

2026-04-29 13:23:04 -04:00

..

bench

wgengine/magicsock,ipn/ipnlocal: store and load homeDERP from cache (#19491)

2026-04-29 10:24:09 -04:00

filter

all: use Go 1.26 things, run most gofix modernizers

2026-03-06 13:32:03 -08:00

magicsock

wgengine/magicsock,ipn/ipnlocal: store and load homeDERP from cache (#19491)

2026-04-29 10:24:09 -04:00

netlog

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

netstack

wgengine/netstack: absorb all quad-100 traffic locally, never leak to peers

2026-04-24 12:42:16 -07:00

router

The connmark save/restore rules in mangle/PREROUTING restore the Tailscale bypass fwmark (0x80000) onto reply packets so that rp_filter's reverse-path check routes through the main table instead of table 52. However, the kernel only uses the packet's fwmark during the rp_filter lookup when net.ipv4.conf.all.src_valid_mark=1. (#19537)

2026-04-27 13:52:45 -04:00

wgcfg

cmd/vet: add subtestnames analyzer; fix all existing violations

2026-04-05 15:52:51 -07:00

wgint

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

wglog

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

winnet

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

mem_ios.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

pendopen_omit.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

pendopen.go

all: use bart.Lite instead of bart.Table where appropriate

2026-03-24 14:45:23 +00:00

userspace_ext_test.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

userspace_test.go

wgengine/userspace: do not fall back to old key on tsmpLearned mismatch (#19575)

2026-04-29 13:23:04 -04:00

userspace.go

wgengine/userspace: do not fall back to old key on tsmpLearned mismatch (#19575)

2026-04-29 13:23:04 -04:00

watchdog_omit.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

watchdog_test.go

cmd/vet: add subtestnames analyzer; fix all existing violations

2026-04-05 15:52:51 -07:00

watchdog.go

control/controlclient,ipn/ipnlocal,wgengine: avoid restarting wireguard when key is learned via tsmp (#19142)

2026-03-30 14:26:08 -04:00

wgengine.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00