tailscale/wgengine
Irbe Krumina 5fb721d4ad
util/linuxfw,wgengine/router: skip IPv6 firewall configuration in partial iptables mode (#11546)
We have hosts that support IPv6, but not IPv6 firewall configuration
in iptables mode.
We also have hosts that have some support for IPv6 firewall
configuration in iptables mode, but do not have iptables filter table.
We should:
- configure ip rules for all hosts that support IPv6
- only configure firewall rules in iptables mode if the host
has iptables filter table.

Updates tailscale/tailscale#11540

Signed-off-by: Irbe Krumina <irbe@tailscale.com>
2024-03-29 05:23:03 +00:00
..
bench
capture
filter
magicsock tailcfg, ipn/ipnlocal, wgengine/magicsock: add only-tcp-443 node attr 2024-03-25 08:48:25 -07:00
netlog all: use zstdframe where sensible (#11491) 2024-03-21 12:20:38 -07:00
netstack wgengine/netstack: fix bug with duplicate SYN packets in client limit 2024-03-11 08:05:00 -04:00
router util/linuxfw,wgengine/router: skip IPv6 firewall configuration in partial iptables mode (#11546) 2024-03-29 05:23:03 +00:00
wgcfg all: remove LenIter, use Go 1.22 range-over-int instead 2024-02-25 12:29:45 -08:00
wgint wgengine{,/wgint}: add wgint.Peer wrapper type, add to wgengine.Engine 2024-02-28 09:50:18 -08:00
wglog wgengine/wglog: add TS_DEBUG_RAW_WGLOG envknob for raw wg logs 2024-02-24 14:59:48 -08:00
winnet
mem_ios.go
pendopen.go wgengine: make pendOpen time later, after dup check 2024-02-26 19:09:12 -08:00
userspace.go wgengine: plumb the PeerByKey from wgengine to magicsock 2024-02-28 19:36:34 -08:00
userspace_ext_test.go wgengine: fix logger data race in tests 2024-03-19 18:51:25 -04:00
userspace_test.go
watchdog.go wgengine{,/wgint}: add wgint.Peer wrapper type, add to wgengine.Engine 2024-02-28 09:50:18 -08:00
watchdog_js.go
watchdog_test.go
wgengine.go wgengine{,/wgint}: add wgint.Peer wrapper type, add to wgengine.Engine 2024-02-28 09:50:18 -08:00