You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/util/linuxfw
Irbe Krumina 92ca770b8d
util/linuxfw: fix MSS clamping in nftables mode (#11588)
MSS clamping for nftables was mostly not ran due to to an earlier rule in the FORWARD chain issuing accept verdict.
This commit places the clamping rule into a chain of its own to ensure that it gets ran.

Updates tailscale/tailscale#11002

Signed-off-by: Irbe Krumina <irbe@tailscale.com>
8 months ago
..
linuxfwtest util/linuxfw: initial implementation of package 2 years ago
detector.go linuxfw,wgengine/route,ipn: add c2n and nodeattrs to control linux netfilter 1 year ago
fake.go util/linuxfw,wgengine/router: skip IPv6 firewall configuration in partial iptables mode (#11546) 8 months ago
helpers.go all: cleanup unused code, part 2 (#10670) 12 months ago
iptables.go util/linuxfw: move detection logic 1 year ago
iptables_runner.go util/linuxfw,wgengine/router: skip IPv6 firewall configuration in partial iptables mode (#11546) 8 months ago
iptables_runner_test.go util/linuxfw: move fake runner into pkg 1 year ago
linuxfw.go util/linuxfw,wgengine/router: enable IPv6 configuration when netfilter is disabled 8 months ago
linuxfw_unsupported.go all: cleanup unused code, part 2 (#10670) 12 months ago
nftables.go util/cmpx: delete now that we're using Go 1.22 10 months ago
nftables_runner.go util/linuxfw: fix MSS clamping in nftables mode (#11588) 8 months ago
nftables_runner_test.go util/linuxfw: add missing error checks in tests 1 year ago
nftables_types.go util/linuxfw: add new arch build constraints 1 year ago