You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/wgengine
Andrew Lytvynov 728622665f
1.48 cherry-picks for nftables (#8989)
* wgengine/router: fall back and set iptables as default again

Due to the conflict between our nftables implementation and ufw, which is a common utility used
on linux. We now want to take a step back to prevent regression. This will give us more chance to
let users to test our nftables support and heuristic.

Updates: #391
Signed-off-by: KevinLiang10 <kevinliang@tailscale.com>
(cherry picked from commit 93cab56277)

* util/linuxfw: reorganize nftables rules to allow it to work with ufw

This commit tries to mimic the way iptables-nft work with the filewall rules. We
follow the convention of using tables like filter, nat and the conventional
chains, to make our nftables implementation work with ufw.

Updates: #391

Signed-off-by: KevinLiang10 <kevinliang@tailscale.com>
(cherry picked from commit b040094b90)

* tailcfg: update docs on NetInfo.FirewallMode

Updates #391

Change-Id: Ifef196b31dd145f424fb0c0d0bb04565cc22c717
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
(cherry picked from commit 282dad1b62)

---------

Co-authored-by: KevinLiang10 <kevinliang@tailscale.com>
Co-authored-by: Brad Fitzpatrick <bradfitz@tailscale.com>
10 months ago
..
bench all: move network monitoring from wgengine/monitor to net/netmon 1 year ago
capture various: add golangci-lint, fix issues (#7905) 1 year ago
filter tailcfg,ipn/ipnlocal,wgengine: add values to PeerCapabilities 10 months ago
magicsock tailcfg: Add FirewallMode to NetInfo to record wether host using iptables or nftables 10 months ago
netlog wgengine/netlog: fix nil pointer dereference in logtail (#8598) 11 months ago
netstack ipn/ipnlocal,wgengine/netstack: move LocalBackend specifc serving logic to LocalBackend 12 months ago
router 1.48 cherry-picks for nftables (#8989) 10 months ago
wgcfg tailcfg,etc: remove unused tailcfg.Node.KeepAlive field 11 months ago
wgint all: update copyright and license headers 1 year ago
wglog all: update copyright and license headers 1 year ago
winnet all: update copyright and license headers 1 year ago
mem_ios.go all: update copyright and license headers 1 year ago
pendopen.go wgengine: adjust debug logging for WireGuard-only peers 10 months ago
userspace.go wgengine,ipn,cmd/tailscale: add size option to ping (#8739) 10 months ago
userspace_ext_test.go tsd: add package with System type to unify subsystem init, discovery 1 year ago
userspace_test.go all: update copyright and license headers 1 year ago
watchdog.go wgengine,ipn,cmd/tailscale: add size option to ping (#8739) 10 months ago
watchdog_js.go all: update copyright and license headers 1 year ago
watchdog_test.go all: update copyright and license headers 1 year ago
wgengine.go wgengine,ipn,cmd/tailscale: add size option to ping (#8739) 10 months ago