mirror of
https://github.com/cloudflare/cloudflared.git
synced 2025-05-25 01:46:35 +00:00
92e0f5fcf9
For macOS, we want to set the DF bit for the UDP packets used by the QUIC connection; to achieve this, you need to explicitly set the network to either "udp4" or "udp6". When determining which network type to pick we need to use the edge IP address chosen to align with what the local IP family interface we will use. This means we want cloudflared to bind to local interfaces for a random port, so we provide a zero IP and 0 port number (ex. 0.0.0.0:0). However, instead of providing the zero IP, we can leave the value as nil and let the kernel decide which interface and pick a random port as defined by the target edge IP family. This was previously broken for IPv6-only edge connectivity on macOS and all other operating systems should be unaffected because the network type was left as default "udp" which will rely on the provided local or remote IP for selection. Closes TUN-8688
27 lines
989 B
Go
27 lines
989 B
Go
// Copyright 2019 The Go Authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style
|
|
// license that can be found in the LICENSE file.
|
|
|
|
package nettest
|
|
|
|
import "syscall"
|
|
|
|
func supportsRawSocket() bool {
|
|
// From http://msdn.microsoft.com/en-us/library/windows/desktop/ms740548.aspx:
|
|
// Note: To use a socket of type SOCK_RAW requires administrative privileges.
|
|
// Users running Winsock applications that use raw sockets must be a member of
|
|
// the Administrators group on the local computer, otherwise raw socket calls
|
|
// will fail with an error code of WSAEACCES. On Windows Vista and later, access
|
|
// for raw sockets is enforced at socket creation. In earlier versions of Windows,
|
|
// access for raw sockets is enforced during other socket operations.
|
|
for _, af := range []int{syscall.AF_INET, syscall.AF_INET6} {
|
|
s, err := syscall.Socket(af, syscall.SOCK_RAW, 0)
|
|
if err != nil {
|
|
continue
|
|
}
|
|
syscall.Closesocket(s)
|
|
return true
|
|
}
|
|
return false
|
|
}
|