You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/util/linuxfw
Maisem Ali 4d6a8224d5 util/linuxfw: fall back to nftables when iptables not found
When the desired netfilter mode was unset, we would always try
to use the `iptables` binary. In such cases if iptables was not found,
tailscaled would just crash as seen in #13440. To work around this, in those
cases check if the `iptables` binary even exists and if it doesn't fall back
to the nftables implementation.

Verified that it works on stock Ubuntu 24.04.

Updates #5621
Updates #8555
Updates #8762
Fixes #13440

Signed-off-by: Maisem Ali <maisem@tailscale.com>
1 month ago
..
linuxfwtest util/linuxfw: initial implementation of package 2 years ago
detector.go util/linuxfw: fall back to nftables when iptables not found 1 month ago
fake.go cmd/containerboot,cmd/k8s-operator: enable IPv6 for fqdn egress proxies (#12577) 4 months ago
helpers.go all: cleanup unused code, part 2 (#10670) 10 months ago
iptables.go util/linuxfw: fall back to nftables when iptables not found 1 month ago
iptables_runner.go util/linuxfw: don't try cleaning iptables on gokrazy 5 months ago
iptables_runner_test.go util/linuxfw,go.{mod,sum}: don't log errors when deleting non-existant chains and rules (#11852) 6 months ago
linuxfw.go all: add test for package comments, fix, add comments as needed 4 months ago
linuxfw_unsupported.go all: cleanup unused code, part 2 (#10670) 10 months ago
nftables.go util/cmpx: delete now that we're using Go 1.22 9 months ago
nftables_runner.go util/linuxfw: return nil interface not concrete type 3 months ago
nftables_runner_test.go util/linuxfw: fix IPv6 availability check for nftables (#12009) 5 months ago
nftables_types.go util/linuxfw: add new arch build constraints 1 year ago