You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/cmd
Irbe Krumina 9bd158cc09
cmd/containerboot,util/linuxfw: create a SNAT rule for dst/src only once, clean up if needed (#13658)
The AddSNATRuleForDst rule was adding a new rule each time it was called including:
- if a rule already existed
- if a rule matching the destination, but with different desired source already existed

This was causing issues especially for the in-progress egress HA proxies work,
where the rules are now refreshed more frequently, so more redundant rules
were being created.

This change:
- only creates the rule if it doesn't already exist
- if a rule for the same dst, but different source is found, delete it
- also ensures that egress proxies refresh firewall rules
if the node's tailnet IP changes

Updates tailscale/tailscale#13406

Signed-off-by: Irbe Krumina <irbe@tailscale.com>
3 weeks ago
..
addlicense all: update tools that manage copyright headers 2 years ago
build-webclient client/web: precompress assets 11 months ago
cloner cmd/cloner, cmd/viewer, util/codegen: add support for aliases of cloneable types 2 months ago
connector-gen cmd/connector-gen: add helper tool for wide app connector configurations 10 months ago
containerboot cmd/containerboot,util/linuxfw: create a SNAT rule for dst/src only once, clean up if needed (#13658) 3 weeks ago
derper cli: add `tailscale dns query` (#13368) 1 month ago
derpprobe cmd/derpprobe: use a status page from the prober library 3 months ago
dist release/dist/qnap: add qnap target builder 6 months ago
get-authkey util/cmpx: delete now that we're using Go 1.22 9 months ago
gitops-pusher cmd/gitops-pusher: ignore previous etag if local acls match control (#13068) 3 months ago
hello cmd/hello: link to the Hello KB article (#11022) 9 months ago
k8s-nameserver cmd/k8s-nameserver: fix AAAA record query response (#12412) 5 months ago
k8s-operator cmd/k8s-operator: remove auth key once proxy has logged in (#13612) 4 weeks ago
mkmanifest cmd/mkmanifest, cmd/tailscale, cmd/tailscaled: remove Windows arm32 resources from OSS 2 years ago
mkpkg go.mod: upgrade nfpm to v2 (#8786) 1 year ago
mkversion version/mkversion: open-source version generation logic 2 years ago
nardump all: update copyright and license headers 2 years ago
natc cmd/natc: fix nil pointer 1 month ago
netlogfmt all: use Go 1.22 range-over-int 6 months ago
nginx-auth tailcfg,all: add and use Node.IsTagged() 2 years ago
pgproxy tsnet: split user facing and backend logging 6 months ago
printdep cmd/printdep: print correct toolchain URL 2 years ago
proxy-to-grafana cmd/proxy-to-grafana: add flag for alternative control server 4 months ago
sniproxy all: use math/rand/v2 more 5 months ago
speedtest all: update copyright and license headers 2 years ago
ssh-auth-none-demo all: replace deprecated ioutil references 1 year ago
stunc cmd/stunc: support user-specified port (#12469) 4 months ago
stund cli: add `tailscale dns query` (#13368) 1 month ago
stunstamp cmd/stunstamp: add protocol context to timeout logs (#13422) 1 month ago
sync-containers all: adjust some build tags for plan9 1 year ago
systray cmd/systray: handle reconnects to IPN bus (#13386) 2 months ago
tailscale cmd/tailscale/cli: make 'tailscale debug ts2021' try twice 3 weeks ago
tailscaled util/usermetrics: make usermetrics non-global 4 weeks ago
testcontrol all: use Go 1.22 range-over-int 6 months ago
testwrapper cmd/testwrapper: apply results of all unit tests to coverage for all packages 8 months ago
tl-longchain cmd/tl-longchain: tool to re-sign nodes with long rotation signatures 2 months ago
tsconnect all: use math/rand/v2 more 5 months ago
tsidp cmd/tsidp: add --dir flag 4 weeks ago
tsshd all: update copyright and license headers 2 years ago
tta cmd/tta: pull out test driver dialing into a type, fix bugs 2 months ago
viewer cmd/cloner, cmd/viewer, util/codegen: add support for aliases of cloneable types 2 months ago
vnet tstest/natlab/vnet: add start of IPv6 support 2 months ago
xdpderper all: add test for package comments, fix, add comments as needed 4 months ago