You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/util/linuxfw
Irbe Krumina 2c16fcaa06
util/linuxfw,wgengine/router: add new netfilter rules for HA ingresses (#15896)
Add new rules to update DNAT rules for Kubernetes operator's
HA ingress where it's expected that rules will be added/removed
frequently (so we don't want to keep old rules around or rewrite
existing rules unnecessarily):
- allow deleting DNAT rules using metadata lookup
- allow inserting DNAT rules if they don't already
exist (using metadata lookup)

Updates tailscale/tailscale#15895

Signed-off-by: Irbe Krumina <irbe@tailscale.com>
Co-authored-by: chaosinthecrd <tom@tmlabs.co.uk>
7 months ago
..
linuxfwtest util/linuxfw: initial implementation of package 3 years ago
detector.go util/linuxfw: fall back to nftables when iptables not found 1 year ago
fake.go cmd/containerboot,cmd/k8s-operator: enable IPv6 for fqdn egress proxies (#12577) 1 year ago
fake_netfilter.go util/linuxfw,wgengine/router: add new netfilter rules for HA ingresses (#15896) 7 months ago
helpers.go util/slicesx: add FirstElementEqual and LastElementEqual 1 year ago
iptables.go util/linuxfw: fall back to nftables when iptables not found 1 year ago
iptables_for_svcs.go util/linuxfw,wgengine/router: add new netfilter rules for HA ingresses (#15896) 7 months ago
iptables_for_svcs_test.go util/linuxfw,wgengine/router: add new netfilter rules for HA ingresses (#15896) 7 months ago
iptables_runner.go cmd/containerboot,util/linuxfw: create a SNAT rule for dst/src only once, clean up if needed (#13658) 1 year ago
iptables_runner_test.go cmd/containerboot,util/linuxfw: create a SNAT rule for dst/src only once, clean up if needed (#13658) 1 year ago
linuxfw.go all: add test for package comments, fix, add comments as needed 1 year ago
linuxfw_unsupported.go all: cleanup unused code, part 2 (#10670) 2 years ago
nftables.go all: use Go 1.21's binary.NativeEndian 11 months ago
nftables_for_svcs.go util/linuxfw,wgengine/router: add new netfilter rules for HA ingresses (#15896) 7 months ago
nftables_for_svcs_test.go util/linuxfw,wgengine/router: add new netfilter rules for HA ingresses (#15896) 7 months ago
nftables_runner.go util/linuxfw,wgengine/router: add new netfilter rules for HA ingresses (#15896) 7 months ago
nftables_runner_test.go util/linuxfw: fix delete snat rule (#15763) 7 months ago
nftables_types.go util/linuxfw: add new arch build constraints 2 years ago