netns

Documentation

Overview

Package netns contains the common code for using the Go net package in a logical "network namespace" to avoid routing loops where Tailscale-created packets would otherwise loop back through Tailscale routes.

Despite the name netns, the exact mechanism used differs by operating system, and perhaps even by version of the OS.

The netns package also handles connecting via SOCKS proxies when configured by the environment.

Index

• func IsSOCKSDialer(d Dialer) bool
• func Listener(logf logger.Logf) *net.ListenConfig
• func SetEnabled(on bool)
• type Dialer
  • func FromDialer(logf logger.Logf, d *net.Dialer) Dialer
  • func NewDialer(logf logger.Logf) Dialer

Functions

func IsSOCKSDialer

func IsSOCKSDialer(d Dialer) bool

IsSOCKSDialer reports whether d is SOCKS-proxying dialer as returned by NewDialer or FromDialer.

func Listener

func Listener(logf logger.Logf) *net.ListenConfig

Listener returns a new net.Listener with its Control hook func initialized as necessary to run in logical network namespace that doesn't route back into Tailscale.

func SetEnabled

func SetEnabled(on bool)

SetEnabled enables or disables netns for the process. It defaults to being enabled.

Types

type Dialer

type Dialer interface {
	Dial(network, address string) (net.Conn, error)
	DialContext(ctx context.Context, network, address string) (net.Conn, error)
}

Dialer is the interface for a dialer that can dial with or without a context. It's the type implemented both by net.Dialer and the Go SOCKS dialer.

func FromDialer

func FromDialer(logf logger.Logf, d *net.Dialer) Dialer

FromDialer returns sets d.Control as necessary to run in a logical network namespace that doesn't route back into Tailscale. It also handles using a SOCKS if configured in the environment with ALL_PROXY.

func NewDialer

func NewDialer(logf logger.Logf) Dialer

NewDialer returns a new Dialer using a net.Dialer with its Control hook func initialized as necessary to run in a logical network namespace that doesn't route back into Tailscale. It also handles using a SOCKS if configured in the environment with ALL_PROXY.