You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/wgengine
Irbe Krumina 5fb721d4ad
util/linuxfw,wgengine/router: skip IPv6 firewall configuration in partial iptables mode (#11546)
We have hosts that support IPv6, but not IPv6 firewall configuration
in iptables mode.
We also have hosts that have some support for IPv6 firewall
configuration in iptables mode, but do not have iptables filter table.
We should:
- configure ip rules for all hosts that support IPv6
- only configure firewall rules in iptables mode if the host
has iptables filter table.

Updates tailscale/tailscale#11540

Signed-off-by: Irbe Krumina <irbe@tailscale.com>
8 months ago
..
bench tailcfg, all: use []netip.AddrPort instead of []string for Endpoints 1 year ago
capture
filter wgengine/filter: add protocol-agnostic packet checker (#10446) 1 year ago
magicsock tailcfg, ipn/ipnlocal, wgengine/magicsock: add only-tcp-443 node attr 8 months ago
netlog all: use zstdframe where sensible (#11491) 8 months ago
netstack wgengine/netstack: fix bug with duplicate SYN packets in client limit 9 months ago
router util/linuxfw,wgengine/router: skip IPv6 firewall configuration in partial iptables mode (#11546) 8 months ago
wgcfg all: remove LenIter, use Go 1.22 range-over-int instead 9 months ago
wgint wgengine{,/wgint}: add wgint.Peer wrapper type, add to wgengine.Engine 9 months ago
wglog wgengine/wglog: add TS_DEBUG_RAW_WGLOG envknob for raw wg logs 9 months ago
winnet
mem_ios.go
pendopen.go wgengine: make pendOpen time later, after dup check 9 months ago
userspace.go wgengine: plumb the PeerByKey from wgengine to magicsock 9 months ago
userspace_ext_test.go wgengine: fix logger data race in tests 8 months ago
userspace_test.go
watchdog.go wgengine{,/wgint}: add wgint.Peer wrapper type, add to wgengine.Engine 9 months ago
watchdog_js.go
watchdog_test.go
wgengine.go wgengine{,/wgint}: add wgint.Peer wrapper type, add to wgengine.Engine 9 months ago