You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/net
Maisem Ali 3ae7140690 net/tstun: handle exit nodes in NAT configs
In the case where the exit node requires SNAT, we would SNAT all traffic not just the
traffic meant to go through the exit node. This was a result of the default route being
added to the routing table which would match basically everything.

In this case, we need to account for all peers in the routing table not just the ones
that require NAT.

Fix and add a test.

Updates tailscale/corp#8020

Signed-off-by: Maisem Ali <maisem@tailscale.com>
1 year ago
..
art net/art: skip tests on CI for now 1 year ago
connstats net/connstats: exclude traffic with internal Tailscale service (#7904) 1 year ago
dns all: avoid repeated default interface lookups 1 year ago
dnscache all: avoid repeated default interface lookups 1 year ago
dnsfallback all: avoid repeated default interface lookups 1 year ago
flowtrack all: update copyright and license headers 1 year ago
interfaces all: move network monitoring from wgengine/monitor to net/netmon 1 year ago
memnet net/memnet: rename from net/nettest 1 year ago
netaddr all: update copyright and license headers 1 year ago
netcheck net/ping,netcheck: add v6 pinging capabilities to pinger (#7971) 1 year ago
neterror net/neterror, wgengine/magicsock: use UDP GSO and GRO on Linux (#7791) 1 year ago
netknob all: update copyright and license headers 1 year ago
netmon all: move network monitoring from wgengine/monitor to net/netmon 1 year ago
netns all: avoid repeated default interface lookups 1 year ago
netstat net/{netns,netstat}: use new x/sys/cpu.IsBigEndian 1 year ago
netutil all: replace /kb/ links with /s/ equivalents 1 year ago
packet net/packet: add NAT support for DCCP and GRE 1 year ago
ping net/ping,netcheck: add v6 pinging capabilities to pinger (#7971) 1 year ago
portmapper all: avoid repeated default interface lookups 1 year ago
proxymux all: update copyright and license headers 1 year ago
routetable net/routetable: include unknown flags in the routetable doctor output 1 year ago
socks5 net/socks5: add password auth support 1 year ago
sockstats all: avoid repeated default interface lookups 1 year ago
speedtest all: update copyright and license headers 1 year ago
stun wgengine/magicsock, types/nettype, etc: finish ReadFromUDPAddrPort netip migration 1 year ago
tlsdial health, net/tlsdial: add healthcheck for self-signed cert 1 year ago
tsaddr all: replace /kb/ links with /s/ equivalents 1 year ago
tsdial all: avoid repeated default interface lookups 1 year ago
tshttpproxy net/tshttpproxy: don't proxy through ourselves 1 year ago
tstun net/tstun: handle exit nodes in NAT configs 1 year ago
wsconn all: update copyright and license headers 1 year ago