You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/net
Maisem Ali 3ae7140690 net/tstun: handle exit nodes in NAT configs
In the case where the exit node requires SNAT, we would SNAT all traffic not just the
traffic meant to go through the exit node. This was a result of the default route being
added to the routing table which would match basically everything.

In this case, we need to account for all peers in the routing table not just the ones
that require NAT.

Fix and add a test.

Updates tailscale/corp#8020

Signed-off-by: Maisem Ali <maisem@tailscale.com>
2 years ago
..
art net/art: skip tests on CI for now 2 years ago
connstats net/connstats: exclude traffic with internal Tailscale service (#7904) 2 years ago
dns all: avoid repeated default interface lookups 2 years ago
dnscache all: avoid repeated default interface lookups 2 years ago
dnsfallback all: avoid repeated default interface lookups 2 years ago
flowtrack all: update copyright and license headers 2 years ago
interfaces all: move network monitoring from wgengine/monitor to net/netmon 2 years ago
memnet net/memnet: rename from net/nettest 2 years ago
netaddr all: update copyright and license headers 2 years ago
netcheck net/ping,netcheck: add v6 pinging capabilities to pinger (#7971) 2 years ago
neterror net/neterror, wgengine/magicsock: use UDP GSO and GRO on Linux (#7791) 2 years ago
netknob all: update copyright and license headers 2 years ago
netmon all: move network monitoring from wgengine/monitor to net/netmon 2 years ago
netns all: avoid repeated default interface lookups 2 years ago
netstat net/{netns,netstat}: use new x/sys/cpu.IsBigEndian 2 years ago
netutil all: replace /kb/ links with /s/ equivalents 2 years ago
packet net/packet: add NAT support for DCCP and GRE 2 years ago
ping net/ping,netcheck: add v6 pinging capabilities to pinger (#7971) 2 years ago
portmapper all: avoid repeated default interface lookups 2 years ago
proxymux all: update copyright and license headers 2 years ago
routetable net/routetable: include unknown flags in the routetable doctor output 2 years ago
socks5 net/socks5: add password auth support 2 years ago
sockstats all: avoid repeated default interface lookups 2 years ago
speedtest all: update copyright and license headers 2 years ago
stun wgengine/magicsock, types/nettype, etc: finish ReadFromUDPAddrPort netip migration 2 years ago
tlsdial health, net/tlsdial: add healthcheck for self-signed cert 2 years ago
tsaddr all: replace /kb/ links with /s/ equivalents 2 years ago
tsdial all: avoid repeated default interface lookups 2 years ago
tshttpproxy net/tshttpproxy: don't proxy through ourselves 2 years ago
tstun net/tstun: handle exit nodes in NAT configs 2 years ago
wsconn all: update copyright and license headers 2 years ago