You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Irbe Krumina 9bd158cc09 cmd/containerboot,util/linuxfw: create a SNAT rule for dst/src only once, clean up if needed (#13658) ... The AddSNATRuleForDst rule was adding a new rule each time it was called including: - if a rule already existed - if a rule matching the destination, but with different desired source already existed This was causing issues especially for the in-progress egress HA proxies work, where the rules are now refreshed more frequently, so more redundant rules were being created. This change: - only creates the rule if it doesn't already exist - if a rule for the same dst, but different source is found, delete it - also ensures that egress proxies refresh firewall rules if the node's tailnet IP changes Updates tailscale/tailscale#13406 Signed-off-by: Irbe Krumina <irbe@tailscale.com>		2 months ago
..
forwarding.go	cmd/containerboot,util/linuxfw: create a SNAT rule for dst/src only once, clean up if needed (#13658)	2 months ago
healthz.go	cmd/containerboot: split main.go (#13517)	2 months ago
kube.go	cmd/containerboot: split main.go (#13517)	2 months ago
kube_test.go	kube,cmd/{k8s-operator,containerboot},envknob,ipn/store/kubestore,*/depaware.txt: rename packages (#13418)	2 months ago
main.go	cmd/containerboot,util/linuxfw: create a SNAT rule for dst/src only once, clean up if needed (#13658)	2 months ago
main_test.go	…
serve.go	cmd/containerboot: split main.go (#13517)	2 months ago
services.go	cmd/containerboot,util/linuxfw: create a SNAT rule for dst/src only once, clean up if needed (#13658)	2 months ago
services_test.go	cmd/containerboot,kube,util/linuxfw: configure kube egress proxies to route to 1+ tailnet targets (#13531)	2 months ago
settings.go	cmd/containerboot,kube,util/linuxfw: configure kube egress proxies to route to 1+ tailnet targets (#13531)	2 months ago
tailscaled.go	cmd/containerboot: split main.go (#13517)	2 months ago
test_tailscale.sh	…
test_tailscaled.sh	…