You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/util/linuxfw
Irbe Krumina 7ef2f72135
util/linuxfw: fix IPv6 availability check for nftables (#12009)
* util/linuxfw: fix IPv6 NAT availability check for nftables

When running firewall in nftables mode,
there is no need for a separate NAT availability check
(unlike with iptables, there are no hosts that support nftables, but not IPv6 NAT - see tailscale/tailscale#11353).
This change fixes a firewall NAT availability check that was using the no-longer set ipv6NATAvailable field
by removing the field and using a method that, for nftables, just checks that IPv6 is available.

Updates tailscale/tailscale#12008

Signed-off-by: Irbe Krumina <irbe@tailscale.com>
6 months ago
..
linuxfwtest util/linuxfw: initial implementation of package 2 years ago
detector.go linuxfw,wgengine/route,ipn: add c2n and nodeattrs to control linux netfilter 12 months ago
fake.go various: implement stateful firewalling on Linux (#12025) 7 months ago
helpers.go all: cleanup unused code, part 2 (#10670) 11 months ago
iptables.go util/linuxfw: move detection logic 1 year ago
iptables_runner.go util/linuxfw: fix IPv6 availability check for nftables (#12009) 6 months ago
iptables_runner_test.go util/linuxfw,go.{mod,sum}: don't log errors when deleting non-existant chains and rules (#11852) 7 months ago
linuxfw.go util/linuxfw: fix IPv6 availability check for nftables (#12009) 6 months ago
linuxfw_unsupported.go all: cleanup unused code, part 2 (#10670) 11 months ago
nftables.go util/cmpx: delete now that we're using Go 1.22 10 months ago
nftables_runner.go util/linuxfw: fix IPv6 availability check for nftables (#12009) 6 months ago
nftables_runner_test.go util/linuxfw: fix IPv6 availability check for nftables (#12009) 6 months ago
nftables_types.go util/linuxfw: add new arch build constraints 1 year ago