fix: find non stun nodes for websocket fallback

kylecarbs · kylecarbs · commit a2f48f07a8a7 · 2023-03-21T16:35:19.000Z
If the first node was a STUN node, it would naturally fail to dial.

A user found this and reported it!
diff --git a/derp/derphttp/derphttp_client.go b/derp/derphttp/derphttp_client.go
@@ -347,12 +347,23 @@ func (c *Client) connect(ctx context.Context, caller string) (client *derp.Clien
 	case c.useWebsockets():
 		var urlStr string
 		var tlsConfig *tls.Config
+		var node *tailcfg.DERPNode
+		for _, n := range reg.Nodes {
+			if n.STUNOnly {
+				continue
+			}
+			node = n
+			break
+		}
+		if node == nil {
+			return nil, 0, errors.New("no non-STUN-only nodes in region")
+		}
 		if c.url != nil {
 			urlStr = c.url.String()
 			tlsConfig = c.tlsConfig(nil)
 		} else {
-			urlStr = c.urlString(reg.Nodes[0])
-			tlsConfig = c.tlsConfig(reg.Nodes[0])
+			urlStr = c.urlString(node)
+			tlsConfig = c.tlsConfig(node)
 		}
 		c.logf("%s: connecting websocket to %v", caller, urlStr)
 		conn, err := dialWebsocketFunc(ctx, urlStr, tlsConfig, c.Header)
