tailscale / tailscale/caddy-tailscale

Add trusted proxies support

Open
#69 2 comments 1 reaction 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Go
Stars
978
Forks
96
PR merge metrics
No merged PRs in 30d

Description

The range of proxy servers from which requests should be trusted (trusted_proxies) can be extended with plugins to maintain a dynamic list of IP ranges. It would be nice if we could use Tailscale tags for this.

eg something like this

trusted_proxies tailscale tag:servers

which would trust requests from machines with the servers tag.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the repository's Caddy integration and the trusted_proxies option described in the linked Caddyfile documentation. Investigate how Tailscale tags identify machines and how a dynamic IP-range list could be exposed through the proposed trusted_proxies tailscale tag:servers syntax. Done means requests from machines carrying the specified tag are trusted.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
networking
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.