aboutsummaryrefslogtreecommitdiffstatshomepage
path: root/tunnel (follow)
Commit message (Collapse)AuthorAgeFilesLines
* global: backout AddrFromSlice signature changeJason A. Donenfeld2021-11-112-2/+2
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* tunnel: check for WeakHostSend/Forwarding in pitfallsJason A. Donenfeld2021-11-083-0/+180
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* tunnel: add routes even when no corresponding addressJason A. Donenfeld2021-11-061-16/+3
| | | | | | | Apparently this works now, but it didn't used to. Reported-by: Christoph Loesch <wireguard-mail@chil.at> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* winipcfg: handle zones and make things use itJason A. Donenfeld2021-11-061-2/+14
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* global: switch to netipJason A. Donenfeld2021-11-068-202/+157
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* services: use more reliable method of detecting boot-upJason A. Donenfeld2021-10-262-22/+23
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* tunnel: cleanup IPs when masks don't matchJason A. Donenfeld2021-10-261-9/+6
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* tunnel: convert ips to string for hash tableJason A. Donenfeld2021-10-261-14/+12
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* tunnel: defer startup until tcp configuration is setJason A. Donenfeld2021-10-262-7/+31
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* tunnel: add retry loop to certain interface config failuresJason A. Donenfeld2021-10-212-11/+32
| | | | | | | I wish there was another way here, but we have too little control over Windows' boot sequence. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* manager: warn about dnscache and old virtio driverJason A. Donenfeld2021-10-201-25/+0
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* global: remove wireguard-go/Wintun implementationJason A. Donenfeld2021-10-167-621/+55
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* tunnel: remove old reboot required logicJason A. Donenfeld2021-10-161-4/+0
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* global: remove old-style build tagsJason A. Donenfeld2021-10-126-6/+0
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* global: use unsafe.Slice instead of unsafeSliceJason A. Donenfeld2021-10-111-28/+5
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* driver: use new APIJason A. Donenfeld2021-10-051-13/+2
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* winipcfg: fix typo in DNS LLMNR flagJason A. Donenfeld2021-09-231-1/+1
| | | | | Reported-by: Brad Fitzpatrick <bradfitz@tailscale.com> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* tunnel: help people fix their DNS Cache serviceJason A. Donenfeld2021-09-191-0/+25
| | | | | | | | Too many people follow silly Internet guides and disable this, making it impossible for us to then set activestore-style DNS servers for the interface. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* tunnel: pretty print route failures betterJason A. Donenfeld2021-09-162-2/+7
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* tunnel: return if unable to configureJason A. Donenfeld2021-09-151-0/+2
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* tunnel: reinitialize configuration after PnP flaps driver on <10Jason A. Donenfeld2021-09-142-4/+20
| | | | | | | | | | On older Windows, PnP will unload the driver and reload it. This makes multiple tunnels impossible, as we knew. But this also happens when various adapter settings change, like ICS, which is maybe a bigger issue. Solve this by reloading the configuration after these flaps. Reported-by: Harland Coles <harland.coles@energy-x.com> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* global: prefer WireGuardNT over wireguard-go/WintunJason A. Donenfeld2021-09-121-7/+1
| | | | | | Also remove Wintun driver on startup. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* tunnel: set address after routes so that loopback worksJason A. Donenfeld2021-09-091-11/+10
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* winipcfg: disable DAD so that IP becomes useful soonerJason A. Donenfeld2021-09-091-0/+5
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* tunnel: disable dhcp probesJason A. Donenfeld2021-09-091-0/+2
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* tunnel: disable dad and router discovery on v4 tooJason A. Donenfeld2021-09-091-12/+5
| | | | | | Oddly enough, these mean something for IPv4. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* locales: sync with crowdinJason A. Donenfeld2021-09-071-4/+4
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* winipcfg: update documentationSimon Rozman2021-08-131-1/+1
| | | | Signed-off-by: Simon Rozman <simon@rozman.si>
* tunnel: execute *down commands for wgntJason A. Donenfeld2021-08-101-3/+6
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* tunnel: provide better logging for when iphlpapi failsJason A. Donenfeld2021-08-102-4/+11
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* embeddable-dll-service: use wgnt alwaysJason A. Donenfeld2021-08-091-1/+7
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* driver: break encapsulation and pass timestamp to ringloggerJason A. Donenfeld2021-08-081-1/+7
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* tunnel: increase tun creation retry boot timer to 10 minutesJason A. Donenfeld2021-08-081-2/+2
| | | | | | | | | Some failures, such as EPT_S_NOT_REGISTERED, apparently can take 5 minutes, so extend this to 10 minutes to be sure. Link: https://lists.zx2c4.com/pipermail/wireguard/2021-August/006908.html Reported-by: Joshua Sjoding <joshua.sjoding@scjalliance.com> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* winipcfg: SetInterfaceDnsSettings is now documented on MSDNJason A. Donenfeld2021-08-084-33/+36
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* winipcfg: do not set MTU in registry after setting it in iphlpapiJason A. Donenfeld2021-08-042-21/+2
| | | | | | | | This reverts commit 3f07aa3f0fcd1153687bfb442c0c5b674216d595. Fixed for wgnt 0.3. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* winipcfg: set MTU in registry after setting it in iphlpapiJason A. Donenfeld2021-08-031-1/+18
| | | | | | | Otherwise wireguard-nt is unable to be notified of it. This is a pretty nasty hack that we should revert ASAP. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* driver: introduce new module for talking with kernel driverJason A. Donenfeld2021-08-026-88/+305
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* winipcfg: swap endianness of port for rawsockaddrinetJason A. Donenfeld2021-07-291-2/+2
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* tunnel: support turning off automatic routing tableJason A. Donenfeld2021-06-181-4/+6
| | | | | | | This supports the familiar "Table = off" syntax as on Linux, and then interprets other valid values as simply "on". Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* global: go fmt for 1.17 build tagsJason A. Donenfeld2021-06-186-0/+6
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* winipcfg: add ConvertInterfaceIndexToLUIDKay Diam2021-03-073-0/+21
| | | | | | | | | | | | | | | | | This change can be used to easily get an access to any interface by name, e.g. iface, err := net.InterfaceByName(name) if err ! nil { return err } luid, err := winipcfg.LUIDFromIndex(uint32(iface.Index)) if err != nil { return err } Signed-off-by: Kay Diam <kay.diam@gmail.com> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* tunnel: fix sorting cascade in address configJason A. Donenfeld2021-02-221-4/+13
| | | | | Reported-by: Tbolp <tbolp@qq.com> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* tunnel: new bind object handlingJason A. Donenfeld2021-02-223-17/+15
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* tunnel: retry wintun creation a few times at early bootJason A. Donenfeld2021-02-161-1/+12
| | | | | | | | | This is to prevent races that we still don't understand with Windows Update when Windows Sandbox is enabled. Pretty gnarly. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* tunnel: simplify panic printingJason A. Donenfeld2021-02-161-12/+0
| | | | | | Now that we're intercepting println, we don't need this. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* winipcfg: move to undocumented DNS functionJason A. Donenfeld2021-02-028-194/+212
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* global: bump copyright dateJason A. Donenfeld2021-02-0131-31/+31
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* tunnel: update to simpler logging interfaceJason A. Donenfeld2021-02-011-5/+2
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* mod: bumpJason A. Donenfeld2021-01-241-4/+2
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* winipcfg: cleanup netsh error reportingJason A. Donenfeld2020-11-271-7/+6
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>