mirror of
https://github.com/juanfont/headscale.git
synced 2026-07-15 20:40:55 +09:00
Kristoffer Dalby
8efa5ad1fe
Replace the gRPC client with the generated HTTP client across every command: locally over the unix socket without auth (matching the previous local gRPC socket), remotely over TLS with a Bearer API key. Output rendering and integration tests move to the HTTP client types; the transport changes, the assertions do not.
81 lines
2.1 KiB
Go
81 lines
2.1 KiB
Go
package util
|
|
|
|
import (
|
|
"context"
|
|
"net"
|
|
"net/netip"
|
|
"sync"
|
|
|
|
"go4.org/netipx"
|
|
"tailscale.com/net/tsaddr"
|
|
)
|
|
|
|
// SocketDialer dials a local unix-domain socket, letting the HTTP CLI client
|
|
// reach the headscale API over its unix socket.
|
|
func SocketDialer(ctx context.Context, addr string) (net.Conn, error) {
|
|
var d net.Dialer
|
|
|
|
return d.DialContext(ctx, "unix", addr)
|
|
}
|
|
|
|
func PrefixesToString(prefixes []netip.Prefix) []string {
|
|
ret := make([]string, 0, len(prefixes))
|
|
for _, prefix := range prefixes {
|
|
ret = append(ret, prefix.String())
|
|
}
|
|
|
|
return ret
|
|
}
|
|
|
|
func MustStringsToPrefixes(strings []string) []netip.Prefix {
|
|
prefixes, err := StringToIPPrefix(strings)
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
|
|
return prefixes
|
|
}
|
|
|
|
// TheInternet returns the [netipx.IPSet] for the Internet.
|
|
// https://www.youtube.com/watch?v=iDbyYGrswtg
|
|
var TheInternet = sync.OnceValue(func() *netipx.IPSet {
|
|
var internetBuilder netipx.IPSetBuilder
|
|
internetBuilder.AddPrefix(netip.MustParsePrefix("2000::/3"))
|
|
internetBuilder.AddPrefix(tsaddr.AllIPv4())
|
|
|
|
// Delete Private network addresses
|
|
// https://datatracker.ietf.org/doc/html/rfc1918
|
|
internetBuilder.RemovePrefix(netip.MustParsePrefix("fc00::/7"))
|
|
internetBuilder.RemovePrefix(netip.MustParsePrefix("10.0.0.0/8"))
|
|
internetBuilder.RemovePrefix(netip.MustParsePrefix("172.16.0.0/12"))
|
|
internetBuilder.RemovePrefix(netip.MustParsePrefix("192.168.0.0/16"))
|
|
|
|
// Delete Tailscale networks
|
|
internetBuilder.RemovePrefix(tsaddr.TailscaleULARange())
|
|
internetBuilder.RemovePrefix(tsaddr.CGNATRange())
|
|
|
|
// Delete "can't find DHCP networks"
|
|
internetBuilder.RemovePrefix(netip.MustParsePrefix("fe80::/10")) // link-local
|
|
internetBuilder.RemovePrefix(netip.MustParsePrefix("169.254.0.0/16"))
|
|
|
|
theInternetSet, _ := internetBuilder.IPSet()
|
|
|
|
return theInternetSet
|
|
})
|
|
|
|
// IPSetSubsetOf reports whether every prefix of candidate is contained in
|
|
// container. A nil candidate or container returns false.
|
|
func IPSetSubsetOf(candidate, container *netipx.IPSet) bool {
|
|
if candidate == nil || container == nil {
|
|
return false
|
|
}
|
|
|
|
for _, pref := range candidate.Prefixes() {
|
|
if !container.ContainsPrefix(pref) {
|
|
return false
|
|
}
|
|
}
|
|
|
|
return true
|
|
}
|