Files
tailscale/types
Michael Ben-Ami b5e07cbf53 feature/conn25,types/appctype: delete TemporaryUnsafeBypassFilter from
conn25 node attribute type

This node attribute configuration knob, when enabled, was bypassing two
peercap (tailscale.com/cap/conn25/<app_name>) checks while they were
under development and testing:

- PeerAPI DoH on the connector verifying the peercap includes the app in
  query parameter of the request.
- PeerAPI ConnectorTransitIPRequest verifying the peercap includes the
  app in the request.

With this change, we always perform those checks, and delete bypass
knob.

Updates tailscale/corp#40076
Updates tailscale/corp#48041

Signed-off-by: Michael Ben-Ami <mzb@tailscale.com>
2026-09-15 15:34:05 -04:00
..