You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/wgengine
Tom DNetto f6da2220d3 wgengine: set fwmark masks in netfilter & ip rules
This change masks the bitspace used when setting and querying the fwmark on packets. This allows
tailscaled to play nicer with other networking software on the host, assuming the other networking
software is also using fwmarks & a different mask.

IPTables / mark module has always supported masks, so this is safe on the netfilter front.

However, busybox only gained support for parsing + setting masks in 1.33.0, so we make sure we
arent such a version before we add the "/<mask>" syntax to an ip rule command.

Signed-off-by: Tom DNetto <tom@tailscale.com>
2 years ago
..
bench all: convert more code to use net/netip directly 2 years ago
filter all: migrate more code code to net/netip directly 2 years ago
magicsock wgengine/magicsock: don't use BPF receive when SO_MARK doesn't work. 2 years ago
monitor go.mod: bump wireguard/windows, which moves to using net/netip 2 years ago
netstack wgengine/netstack: only accept connection after dialing (#5503) 2 years ago
router wgengine: set fwmark masks in netfilter & ip rules 2 years ago
wgcfg wgengine/wgcfg: only write peer headers if necessary (#5449) 2 years ago
wgint go.mod, wgengine/wgint: bump wireguard-go 2 years ago
wglog all: use syncs.AtomicValue 2 years ago
winnet all: gofmt all 2 years ago
mem_ios.go go.mod: upgrade wireguard-windows, de-fork wireguard-go 3 years ago
pendopen.go wgengine: remove all peer status from open timeout diagnostics 2 years ago
userspace.go wgengine: fix race on endpoints in getStatus 2 years ago
userspace_ext_test.go go.mod: upgrade wireguard-windows, de-fork wireguard-go 3 years ago
userspace_test.go all: convert more code to use net/netip directly 2 years ago
watchdog.go wgengine: print in-flight operations on watchdog trigger (#5447) 2 years ago
watchdog_js.go wasm: drop pprof dependency 2 years ago
watchdog_test.go wgengine: remove all peer status from open timeout diagnostics 2 years ago
wgengine.go all: convert more code to use net/netip directly 2 years ago