You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/util
Maisem Ali c3a8e63100 util/linuxfw: add additional nftable detection logic
We were previously using the netlink API to see if there are chains/rules that
already exist. This works fine in environments where there is either full
nftable support or no support at all. However, we have identified certain
environments which have partial nftable support and the only feasible way of
detecting such an environment is to try to create some of the chains that we
need.

This adds a check to create a dummy postrouting chain which is immediately
deleted. The goal of the check is to ensure we are able to use nftables and
that it won't error out later. This check is only done in the path where we
detected that the system has no preexisting nftable rules.

Updates #5621
Updates #8555
Updates #8762

Signed-off-by: Maisem Ali <maisem@tailscale.com>
8 months ago
..
cibuild all: update copyright and license headers 1 year ago
clientmetric util/clientmetric: allow client metric values to be provided by a function 1 year ago
cloudenv all: update copyright and license headers 1 year ago
cmpver util/cmpver: only consider ascii numerals (#9741) 8 months ago
cmpx all: update exp/slices and fix call sites 10 months ago
codegen util/codegen: support embedded fields 1 year ago
cstruct all: update copyright and license headers 1 year ago
deephash util/deephash: add IncludeFields, ExcludeFields HasherForType Options 9 months ago
dirwalk all: use tstest.Replace more 1 year ago
dnsname cmd/tailscale: extend hostname validation (#7678) 1 year ago
goroutines util/goroutines: let ScrubbedGoroutineDump get only current stack 12 months ago
groupmember all: update copyright and license headers 1 year ago
hashx all: update copyright and license headers 1 year ago
httphdr util/httphdr: add new package for parsing HTTP headers (#9797) 8 months ago
httpm util/httpm, all: add a test to make sure httpm is used consistently 8 months ago
jsonutil all: update copyright and license headers 1 year ago
limiter util/lru, util/limiter: add debug helper to dump state as HTML 9 months ago
lineread all: update copyright and license headers 1 year ago
linuxfw util/linuxfw: add additional nftable detection logic 8 months ago
lru util/lru: update c.head when deleting the most recently used entry 9 months ago
mak various: add golangci-lint, fix issues (#7905) 1 year ago
multierr all: use Go 1.21 slices, maps instead of x/exp/{slices,maps} 10 months ago
must all: update copyright and license headers 1 year ago
nocasemaps util/nocasemaps: import nocasemaps from corp 8 months ago
osdiag util/osdiag: add query for Windows page file configuration and status 10 months ago
osshare all: update copyright and license headers 1 year ago
pidowner all: update copyright and license headers 1 year ago
precompress all: update copyright and license headers 1 year ago
quarantine all: update copyright and license headers 1 year ago
race util/race: add test to confirm we don't leak goroutines 8 months ago
racebuild all: update copyright and license headers 1 year ago
rands util/rands: add package with HexString func 9 months ago
ringbuffer util/ringbuffer: move generic ringbuffer from corp repo 1 year ago
set util/set: add some useful utility functions for Set (#9535) 8 months ago
singleflight all: update copyright and license headers 1 year ago
slicesx util/slicesx: add EqualSameNil, like slices.Equal but same nilness 8 months ago
syspolicy ipn/ipnlocal: change serial number policy to be PreferenceOption 8 months ago
sysresources util/sysresources, magicsock: scale DERP buffer based on system memory 1 year ago
systemd all: update copyright and license headers 1 year ago
testenv util/testenv: add new package to hold InTest 10 months ago
truncate util: add truncate package (#7490) 1 year ago
uniq all: update copyright and license headers 1 year ago
vizerror util/vizerror: add As function to get wrapped Error 1 year ago
winutil winutil: refactor methods to get values from registry to also return (#9536) 8 months ago