Andrew Dunham 3a41c0c585 ipn/ipnlocal: add PROXY protocol support to Funnel/Serve ...

This adds the --proxy-protocol flag to 'tailscale serve' and
'tailscale funnel', which tells the Tailscale client to prepend a PROXY
protocol[1] header when making connections to the proxied-to backend.

I've verified that this works with our existing funnel servers without
additional work, since they pass along source address information via
PeerAPI already.

Updates #7747

[1]: https://www.haproxy.org/download/1.8/doc/proxy-protocol.txt

Change-Id: I647c24d319375c1b33e995555a541b7615d2d203
Signed-off-by: Andrew Dunham <andrew@du.nham.ca>

2025-11-16 21:00:49 -05:00

..

deploy

cmd/k8s-operator: support workload identity federation

2025-11-07 14:24:24 +00:00

e2e

cmd/k8s-operator: simplify scope of e2e tests (#17076)

2025-09-10 13:02:59 +01:00

generate

cmd/k8s-operator: support workload identity federation

2025-11-07 14:24:24 +00:00

api-server-proxy-pg_test.go

all-kube: create Tailscale Service for HA kube-apiserver ProxyGroup (#16572)

2025-07-21 11:03:21 +01:00

api-server-proxy-pg.go

cmd/k8s-operator: remove Services feature flag detection

2025-11-07 14:23:53 +00:00

api-server-proxy.go

cmd/{k8s-operator,k8s-proxy},kube: use consistent type for auth mode config (#16626)

2025-07-22 14:46:38 +01:00

connector_test.go

cmd/k8s-operator: allow specifying replicas for connectors (#16721)

2025-09-02 13:10:03 +01:00

connector.go

cmd/k8s-operator: allow specifying replicas for connectors (#16721)

2025-09-02 13:10:03 +01:00

depaware.txt

ipn/ipnlocal: add PROXY protocol support to Funnel/Serve

2025-11-16 21:00:49 -05:00

dnsrecords_test.go

k8s-operator: add IPv6 support for DNS records (#16691)

2025-09-25 11:26:43 -04:00

dnsrecords.go

k8s-operator: add IPv6 support for DNS records (#16691)

2025-09-25 11:26:43 -04:00

egress-eps_test.go

all-kube: create Tailscale Service for HA kube-apiserver ProxyGroup (#16572)

2025-07-21 11:03:21 +01:00

egress-eps.go

cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't terminate while cluster traffic is still routed to them (#14436)

2025-01-29 07:35:50 +00:00

egress-pod-readiness_test.go

cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308)

2025-03-19 12:49:31 +00:00

egress-pod-readiness.go

util/backoff: rename logtail/backoff package to util/backoff

2025-09-28 11:55:07 -07:00

egress-services_test.go

cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't terminate while cluster traffic is still routed to them (#14436)

2025-01-29 07:35:50 +00:00

egress-services-readiness_test.go

cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328)

2025-06-27 18:10:04 +01:00

egress-services-readiness.go

cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328)

2025-06-27 18:10:04 +01:00

egress-services.go

cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328)

2025-06-27 18:10:04 +01:00

ingress_test.go

cmd/k8s-operator: allow specifying replicas for connectors (#16721)

2025-09-02 13:10:03 +01:00

ingress-for-pg_test.go

all-kube: create Tailscale Service for HA kube-apiserver ProxyGroup (#16572)

2025-07-21 11:03:21 +01:00

ingress-for-pg.go

cmd/k8s-operator: remove Services feature flag detection

2025-11-07 14:23:53 +00:00

ingress.go

cmd/k8s-operator: allow specifying replicas for connectors (#16721)

2025-09-02 13:10:03 +01:00

logger.go

cmd/k8s-operator: send operator logs to tailscale (#17110)

2025-09-22 13:55:16 +01:00

metrics_resources.go

cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308)

2025-03-19 12:49:31 +00:00

nameserver_test.go

cmd/k8s-operator: allow pod tolerations on nameservers (#17260)

2025-10-17 18:32:30 +01:00

nameserver.go

cmd/k8s-operator: allow pod tolerations on nameservers (#17260)

2025-10-17 18:32:30 +01:00

nodeport-service-ports.go

cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115)

2025-06-27 17:12:14 +01:00

nodeport-services-ports_test.go

cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115)

2025-06-27 17:12:14 +01:00

operator_test.go

cmd/k8s-operator: remove early return in ingress matching (#17841)

2025-11-12 10:46:40 +00:00

operator.go

cmd/k8s-operator: remove early return in ingress matching (#17841)

2025-11-12 10:46:40 +00:00

proxyclass_test.go

cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115)

2025-06-27 17:12:14 +01:00

proxyclass.go

cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115)

2025-06-27 17:12:14 +01:00

proxygroup_specs.go

all-kube: create Tailscale Service for HA kube-apiserver ProxyGroup (#16572)

2025-07-21 11:03:21 +01:00

proxygroup_test.go

cmd/k8s-operator: rename 'l' variables (#17700)

2025-10-29 12:41:44 -04:00

proxygroup.go

cmd/k8s-operator: rename 'l' variables (#17700)

2025-10-29 12:41:44 -04:00

sts_test.go

cmd/k8s-operator: rename 'l' variables (#17700)

2025-10-29 12:41:44 -04:00

sts.go

cmd/tsrecorder: adds sending api level logging to tsrecorder (#16960)

2025-10-08 15:15:12 +01:00

svc-for-pg_test.go

all-kube: create Tailscale Service for HA kube-apiserver ProxyGroup (#16572)

2025-07-21 11:03:21 +01:00

svc-for-pg.go

cmd/k8s-operator: remove Services feature flag detection

2025-11-07 14:23:53 +00:00

svc.go

k8s-operator: reset service status before append (#17120)

2025-09-15 12:37:28 +01:00

testutils_test.go

cmd/k8s-operator: allow specifying replicas for connectors (#16721)

2025-09-02 13:10:03 +01:00

tsclient_test.go

cmd/k8s-operator: support workload identity federation

2025-11-07 14:24:24 +00:00

tsclient.go

cmd/k8s-operator: support workload identity federation

2025-11-07 14:24:24 +00:00

tsrecorder_specs_test.go

cmd/k8s-operator: Set login server on tsrecorder nodes (#16443)

2025-07-03 15:53:35 +01:00

tsrecorder_specs.go

cmd/k8s-operator: Set login server on tsrecorder nodes (#16443)

2025-07-03 15:53:35 +01:00

tsrecorder_test.go

cmd/k8s-operator: rename 'l' variables (#17700)

2025-10-29 12:41:44 -04:00

tsrecorder.go

cmd/k8s-operator: rename 'l' variables (#17700)

2025-10-29 12:41:44 -04:00