tailscale/wgengine
Irbe Krumina 5fb721d4ad
util/linuxfw,wgengine/router: skip IPv6 firewall configuration in partial iptables mode (#11546)
We have hosts that support IPv6, but not IPv6 firewall configuration
in iptables mode.
We also have hosts that have some support for IPv6 firewall
configuration in iptables mode, but do not have iptables filter table.
We should:
- configure ip rules for all hosts that support IPv6
- only configure firewall rules in iptables mode if the host
has iptables filter table.

Updates tailscale/tailscale#11540

Signed-off-by: Irbe Krumina <irbe@tailscale.com>
2024-03-29 05:23:03 +00:00
..
bench tailcfg, all: use []netip.AddrPort instead of []string for Endpoints 2023-10-01 18:23:02 -07:00
capture various: add golangci-lint, fix issues (#7905) 2023-04-17 18:38:24 -04:00
filter wgengine/filter: add protocol-agnostic packet checker (#10446) 2023-12-02 16:30:33 -06:00
magicsock tailcfg, ipn/ipnlocal, wgengine/magicsock: add only-tcp-443 node attr 2024-03-25 08:48:25 -07:00
netlog all: use zstdframe where sensible (#11491) 2024-03-21 12:20:38 -07:00
netstack wgengine/netstack: fix bug with duplicate SYN packets in client limit 2024-03-11 08:05:00 -04:00
router util/linuxfw,wgengine/router: skip IPv6 firewall configuration in partial iptables mode (#11546) 2024-03-29 05:23:03 +00:00
wgcfg all: remove LenIter, use Go 1.22 range-over-int instead 2024-02-25 12:29:45 -08:00
wgint wgengine{,/wgint}: add wgint.Peer wrapper type, add to wgengine.Engine 2024-02-28 09:50:18 -08:00
wglog wgengine/wglog: add TS_DEBUG_RAW_WGLOG envknob for raw wg logs 2024-02-24 14:59:48 -08:00
winnet all: update copyright and license headers 2023-01-27 15:36:29 -08:00
mem_ios.go all: update copyright and license headers 2023-01-27 15:36:29 -08:00
pendopen.go wgengine: make pendOpen time later, after dup check 2024-02-26 19:09:12 -08:00
userspace.go wgengine: plumb the PeerByKey from wgengine to magicsock 2024-02-28 19:36:34 -08:00
userspace_ext_test.go wgengine: fix logger data race in tests 2024-03-19 18:51:25 -04:00
userspace_test.go control,tailcfg,wgengine/magicsock: add nodeAttr to enable/disable peer MTU 2023-09-21 04:17:12 -07:00
watchdog.go wgengine{,/wgint}: add wgint.Peer wrapper type, add to wgengine.Engine 2024-02-28 09:50:18 -08:00
watchdog_js.go all: update copyright and license headers 2023-01-27 15:36:29 -08:00
watchdog_test.go all: update copyright and license headers 2023-01-27 15:36:29 -08:00
wgengine.go wgengine{,/wgint}: add wgint.Peer wrapper type, add to wgengine.Engine 2024-02-28 09:50:18 -08:00