Struct ControlRunner 

pub struct ControlRunner { /* private fields */ }

Actor responsible for maintaining the connection to control.

This actor is responsible for proxying the map response stream onto the message bus.

Implementations

impl ControlRunner

pub fn ipv4( &self, ctx: &mut Context<Self, DelegatedReply<Option<Ipv4Addr>>>, ) -> DelegatedReply<Option<Ipv4Addr>>

Fetch the IPv4 address for this tailscale device.

pub fn ipv6( &self, ctx: &mut Context<Self, DelegatedReply<Option<Ipv6Addr>>>, ) -> DelegatedReply<Option<Ipv6Addr>>

Fetch the IPv6 address for this tailscale device.

pub fn self_node( &self, ctx: &mut Context<Self, DelegatedReply<Option<Node>>>, ) -> DelegatedReply<Option<Node>>

Fetch the self node for this tailscale device.

pub fn current_ssh_policy(&self) -> Option<SshPolicy>

Fetch the current Tailscale SSH policy, if control has pushed one.

Returns None when control has not sent an SSH policy (the SSH server treats this as deny-all — fail-closed). Unlike self_node this does not block waiting for a value: an absent policy is a legitimate, immediate answer.

pub fn current_tka_status(&self) -> Option<TkaStatus>

Fetch the current Tailnet Lock status, if control has pushed one.

Returns None when control has sent no TKAInfo (tailnet lock not in use / no change seen).

pub fn cert_domains(&self) -> Vec<String>

The cert-eligible DNS names from control’s netmap DNS config (Go nm.DNS.CertDomains).

Returns an empty Vec when control has sent no DNS config, or one carrying no cert domains (an empty list is a legitimate, immediate answer — like current_ssh_policy, this does not block waiting for a value).

pub fn dns_config(&self) -> Option<DnsConfig>

The full DNS config from control’s netmap (Go netmap.NetworkMap.DNS), or None when control has sent no DNS config yet. An immediate answer (does not block); the facade surfaces this for Device::dns_config (the daemon’s tnet dns status).

pub fn netcheck(&self) -> NetcheckReport

The latest network-conditions report (preferred DERP region + per-region latencies). An immediate answer (does not block); empty before the first DERP-latency measurement. The facade surfaces this for Device::netcheck (the daemon’s tnet netcheck).

pub fn fetch_id_token( &self, ctx: &mut Context<Self, DelegatedReply<Result<String, IdTokenError>>>, audience: String, ) -> DelegatedReply<Result<String, IdTokenError>>

Request an OIDC ID token from control scoped to audience (workload-identity federation).

Opens a fresh Noise channel and POSTs /machine/id-token; returns the signed JWT or an IdTokenError. Runs on a spawned task (delegated reply) so the actor mailbox isn’t blocked for the round-trip.

pub fn logout( &self, ctx: &mut Context<Self, DelegatedReply<Result<(), LogoutError>>>, ) -> DelegatedReply<Result<(), LogoutError>>

Log this node out of the tailnet: deregister it by expiring its current node key.

Mirrors fetch_id_token: clones the control config + node keys into a spawned task (delegated reply, so the round-trip doesn’t block the mailbox) and re-POSTs /machine/register with a past expiry over a fresh Noise channel. This is a control-plane state change only — it does NOT stop this actor or tear down the datapath (the caller follows up with the normal runtime shutdown), and it does not touch the on-disk node key, so re-registering with the same key is the re-login path.

Trait Implementations

impl Actor for ControlRunner

type Args = Params

Arguments to initialize the actor.

type Error = ControlRunnerError

Actor error type.

async fn on_start( params: Params, slf: ActorRef<Self>, ) -> Result<Self, Self::Error>

Called when the actor starts, before it processes any messages.

fn name() -> &'static str

The name of the actor, which can be useful for logging or debugging.

fn on_message( &mut self, msg: Box<dyn DynMessage<Self>>, actor_ref: ActorRef<Self>, tx: Option<Sender<Result<Box<dyn Any + Send>, SendError<Box<dyn Any + Send>, Box<dyn Any + Send>>>>>, stop: &mut bool, ) -> impl Future<Output = Result<(), Box<dyn ReplyError>>> + Send

Called when the actor receives a message to be processed.

fn on_panic( &mut self, actor_ref: WeakActorRef<Self>, err: PanicError, ) -> impl Future<Output = Result<ControlFlow<ActorStopReason>, Self::Error>> + Send

Called when the actor encounters a panic or an error during “tell” message handling.

fn on_link_died( &mut self, actor_ref: WeakActorRef<Self>, id: ActorId, reason: ActorStopReason, ) -> impl Future<Output = Result<ControlFlow<ActorStopReason>, Self::Error>> + Send

Called when a linked actor dies.

fn on_stop( &mut self, actor_ref: WeakActorRef<Self>, reason: ActorStopReason, ) -> impl Future<Output = Result<(), Self::Error>> + Send

Called before the actor stops.

fn next( &mut self, actor_ref: WeakActorRef<Self>, mailbox_rx: &mut MailboxReceiver<Self>, ) -> impl Future<Output = Option<Signal<Self>>> + Send

Awaits the next signal typically from the mailbox.

impl Message<CertDomains> for ControlRunner

type Reply = Vec<String>

The reply sent back to the message caller.

async fn handle( &mut self, msg: CertDomains, _ctx: &mut Context<Self, Self::Reply>, ) -> Self::Reply

Handler for this message.

impl Message<CurrentSshPolicy> for ControlRunner

type Reply = Option<SshPolicy>

The reply sent back to the message caller.

async fn handle( &mut self, msg: CurrentSshPolicy, _ctx: &mut Context<Self, Self::Reply>, ) -> Self::Reply

Handler for this message.

impl Message<CurrentTkaStatus> for ControlRunner

type Reply = Option<TkaStatus>

The reply sent back to the message caller.

async fn handle( &mut self, msg: CurrentTkaStatus, _ctx: &mut Context<Self, Self::Reply>, ) -> Self::Reply

Handler for this message.

impl Message<DnsConfig> for ControlRunner

type Reply = Option<DnsConfig>

The reply sent back to the message caller.

async fn handle( &mut self, msg: DnsConfig, _ctx: &mut Context<Self, Self::Reply>, ) -> Self::Reply

Handler for this message.

impl Message<FetchIdToken> for ControlRunner

type Reply = DelegatedReply<Result<String, IdTokenError>>

The reply sent back to the message caller.

async fn handle( &mut self, msg: FetchIdToken, ctx: &mut Context<Self, Self::Reply>, ) -> Self::Reply

Handler for this message.

impl Message<Ipv4> for ControlRunner

type Reply = DelegatedReply<Option<Ipv4Addr>>

The reply sent back to the message caller.

async fn handle( &mut self, msg: Ipv4, ctx: &mut Context<Self, Self::Reply>, ) -> Self::Reply

Handler for this message.

impl Message<Ipv6> for ControlRunner

type Reply = DelegatedReply<Option<Ipv6Addr>>

The reply sent back to the message caller.

async fn handle( &mut self, msg: Ipv6, ctx: &mut Context<Self, Self::Reply>, ) -> Self::Reply

Handler for this message.

impl Message<Logout> for ControlRunner

type Reply = DelegatedReply<Result<(), LogoutError>>

The reply sent back to the message caller.

async fn handle( &mut self, msg: Logout, ctx: &mut Context<Self, Self::Reply>, ) -> Self::Reply

Handler for this message.

impl Message<Netcheck> for ControlRunner

type Reply = NetcheckReport

The reply sent back to the message caller.

async fn handle( &mut self, msg: Netcheck, _ctx: &mut Context<Self, Self::Reply>, ) -> Self::Reply

Handler for this message.

impl Message<SelfNode> for ControlRunner

type Reply = DelegatedReply<Option<Node>>

The reply sent back to the message caller.

async fn handle( &mut self, msg: SelfNode, ctx: &mut Context<Self, Self::Reply>, ) -> Self::Reply

Handler for this message.

impl Message<StreamMessage<Arc<StateUpdate>, (), ()>> for ControlRunner

type Reply = ()

The reply sent back to the message caller.

async fn handle( &mut self, msg: StreamMessage<Arc<StateUpdate>, (), ()>, ctx: &mut Context<Self, Self::Reply>, )

Handler for this message.