You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/util
Irbe Krumina 9bd158cc09
cmd/containerboot,util/linuxfw: create a SNAT rule for dst/src only once, clean up if needed (#13658)
The AddSNATRuleForDst rule was adding a new rule each time it was called including:
- if a rule already existed
- if a rule matching the destination, but with different desired source already existed

This was causing issues especially for the in-progress egress HA proxies work,
where the rules are now refreshed more frequently, so more redundant rules
were being created.

This change:
- only creates the rule if it doesn't already exist
- if a rule for the same dst, but different source is found, delete it
- also ensures that egress proxies refresh firewall rules
if the node's tailnet IP changes

Updates tailscale/tailscale#13406

Signed-off-by: Irbe Krumina <irbe@tailscale.com>
4 weeks ago
..
cache
cibuild
clientmetric
cloudenv
cmpver
codegen cmd/cloner, cmd/viewer, util/codegen: add support for aliases of cloneable types 2 months ago
cstruct
ctxkey
deephash util/deephash: fix test regression on 32-bit 4 months ago
dirwalk
dnsname
execqueue
expvarx
fastuuid
goroutines
groupmember
hashx
httphdr
httpm
jsonutil
limiter all: add test for package comments, fix, add comments as needed 4 months ago
lineread
linuxfw cmd/containerboot,util/linuxfw: create a SNAT rule for dst/src only once, clean up if needed (#13658) 4 weeks ago
lru
mak
multierr
must
nocasemaps
osdiag all: add test for package comments, fix, add comments as needed 4 months ago
osshare all: add test for package comments, fix, add comments as needed 4 months ago
osuser util/osuser: turn wasm check into a const expression 3 months ago
pidowner
pool
precompress
progresstracking
quarantine
race
racebuild
rands wgengine/magicsock: use math/rands/v2 5 months ago
reload
ringbuffer
set
singleflight util/singleflight: add DoChanContext 5 months ago
slicesx util/slicesx: add FirstElementEqual and LastElementEqual 2 months ago
syspolicy control/controlclient,posture,util/syspolicy: use predefined syspolicy keys instead of string literals 2 months ago
sysresources
systemd
testenv
topk
truncate
uniq
usermetric util/usermetrics: make usermetrics non-global 1 month ago
vizerror
winutil util/winutil: add GetRegUserString/SetRegUserString accessors for storage and retrieval of string values in HKEY_CURRENT_USER 2 months ago
zstdframe