9 Commits
Author SHA1 Message Date
Pavel 575189ac66 [vnet] Skip AAAA records when IPv6 is disabled on the host (#68666)
* don't advertise IPv6 in VNet when IPv6 is disabled on host

* show ipv6 disabled in VNet diag report

* add platformHostIPv6Disabled stub for unsupported OSes

* fix some nits
2026-08-10 18:12:19 +00:00
PavelandMaja Cieślak b5071fba5a [vnet] Add DNS routing diagnostic check (#66851)
* add dns diagnostic check proto

* add DNSServerSuffix and DNSServerPort constants

* handle dns diagnostic probe queries

* add dns diagnostic check

* enable dns diagnostic check in Connect

* run dns diagnostic check in tsh vnet

* render dns diagnostic check in Connect

* fix some nits

* move ssh diag check after dns check

* handle dns diagnostic probe A queries

* add dns diagnostic check proto for A queries

* refactor dns diagnostic check to also check A records

* refactor Connect to also render dns diagnostic A records

* drop trailing dot from dns diag probe

* add tests for dns diag text rendering

* do not fail dns diag if any nameserver is reachable

* Adjust spacing between DNS diag success/warning rows

* fix some nits

* improve rendering of dns reachability errors

---------

Co-authored-by: Maja Cieślak <maja.cieslak@goteleport.com>
2026-06-17 10:56:34 +00:00
Dan Upton 998f21ef29 lib/vnet: Foundations for embedding VNet in tbot (#66074)
* lib/vnet: add `EmbeddedVNet` type

* lib/vnet/dns: make it possible to use `/etc/resolv.conf` on Linux

* Use FakeHostNetwork in vnet_test.go

* Close host-side TUN

* Link to the `/etc/resolv.conf` man page

* Extend the host network ready timeout for CI

* Stop using global logger unnecessarily

* Fix spelling mistakes in doc comments
2026-05-06 09:00:52 +00:00
Nibras Ohin 168ce07554 feat: Added basic setup for database access support via vnet (#65298)
* feat: added vnet support for database

* feat: handling some edge cases with db key

* minor improvements and tests

* feat: improve database certificate reissuance and enhance error handling in notifications

* splitting out teleport connect changes to separate pr

* refactor for DRY

* feat: added enforcement to get db-user from wire protocol for supported group of dbs

* added tests

* feat: added vnet filter logic to filter on vnet dns hash from status

* chore: removed db username as not supporting it now

* chore: added protocol validation

* chore: updating on pr comments

* chore: streamline fqdn resoluiont for db and better logging on db name conflict

* chore: simplify db resolution logic by handling multiple matches
2026-05-05 17:41:27 +00:00
Nic Klaassen 3a3099e2ec [vnet] feat: write VNet SSH keys to TELEPORT_HOME (#55228) 2025-06-01 05:50:10 +00:00
Nic Klaassen 1ef6c32791 [vnet] feat: accept incoming SSH connections (#55155) 2025-05-31 15:04:23 +00:00
Nic Klaassen b420b4f1cc [vnet] feat: TCP dial to SSH targets (#55087)
* [vnet] feat: TCP dial to SSH targets

* address tim's comments

* fix teleterm UserTLSCert impl

* check that tlsCert.Certificate is not empty
2025-05-31 01:55:19 +00:00
Nic Klaassen 71379050de [vnet] chore: refactor appProvider, unify tests (#55086) 2025-05-23 17:18:05 +00:00
Nic Klaassen 9916519c97 [vnet] feat: DNS resolution for VNet SSH (#54856)
* update protos

* [vnet] feat: DNS resolution for VNet SSH

* fix lint

* add comment and fix typo
2025-05-21 16:22:10 +00:00