Documentation
¶
Overview ¶
Package netlog provides a logger that monitors a TUN device and periodically records any traffic into a log stream.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type Device ¶
type Device interface {
SetStatisticsEnabled(bool)
ExtractStatistics() map[netlogtype.Connection]netlogtype.Counts
}
Device is an abstraction over a tunnel device or a magic socket. *tstun.Wrapper implements this interface. *magicsock.Conn implements this interface.
type Logger ¶
type Logger struct {
// contains filtered or unexported fields
}
Logger logs statistics about every connection. At present, it only logs connections within a tailscale network. Exit node traffic is not logged for privacy reasons. The zero value is ready for use.
func (*Logger) ReconfigRoutes ¶
ReconfigRoutes configures the network logger with updated routes. The cfg is used to classify the types of connections captured by the tun Device passed to Startup.
func (*Logger) Shutdown ¶
Shutdown shuts down the network logger. This attempts to flush out all pending log messages. Even if an error is returned, the logger is still shut down.
func (*Logger) Startup ¶
func (nl *Logger) Startup(nodeID tailcfg.StableNodeID, nodeLogID, domainLogID logtail.PrivateID, tun, sock Device) error
Startup starts an asynchronous network logger that monitors statistics for the provided tun and/or sock device.
The tun Device captures packets within the tailscale network, where at least one address is a tailscale IP address. The source is always from the perspective of the current node. If one of the other endpoint is not a tailscale IP address, then it suggests the use of a subnet router or exit node. For example, when using a subnet router, the source address is the tailscale IP address of the current node, and the destination address is an IP address within the subnet range. In contrast, when acting as a subnet router, the source address is an IP address within the subnet range, and the destination is a tailscale IP address that initiated the subnet proxy connection. In this case, the node acting as a subnet router is acting on behalf of some remote endpoint within the subnet range. The tun is used to populate the VirtualTraffic, SubnetTraffic, and ExitTraffic fields in Message.
The sock Device captures packets at the magicsock layer. The source is always a tailscale IP address and the destination is a non-tailscale IP address to contact for that particular tailscale node. The IP protocol and source port are always zero. The sock is used to populated the PhysicalTraffic field in Message.
Source Files