tailscale/wgengine
Maisem Ali fbfee6a8c0 cmd/containerboot: use linuxfw.NetfilterRunner
This migrates containerboot to reuse the NetfilterRunner used
by tailscaled instead of manipulating iptables rule itself.
This has the added advantage of now working with nftables and
we can potentially drop the `iptables` command from the container
image in the future.

Updates #9310

Co-authored-by: Irbe Krumina <irbe@tailscale.com>
Signed-off-by: Maisem Ali <maisem@tailscale.com>
2023-10-11 12:23:52 -07:00
..
bench tailcfg, all: use []netip.AddrPort instead of []string for Endpoints 2023-10-01 18:23:02 -07:00
capture various: add golangci-lint, fix issues (#7905) 2023-04-17 18:38:24 -04:00
filter cmd/cloner,*: revert: optimize nillable slice cloner 2023-09-29 18:18:18 -07:00
magicsock wgengine/magicsock: add probed MTU metrics 2023-10-09 01:57:12 -07:00
netlog wgengine/netlog: fix nil pointer dereference in logtail (#8598) 2023-07-13 08:54:29 -07:00
netstack wgengine/netstack: refactor address construction and conversion 2023-09-28 16:17:16 -07:00
router cmd/containerboot: use linuxfw.NetfilterRunner 2023-10-11 12:23:52 -07:00
wgcfg cmd/cloner,*: revert: optimize nillable slice cloner 2023-09-29 18:18:18 -07:00
wgint all: update copyright and license headers 2023-01-27 15:36:29 -08:00
wglog all: update copyright and license headers 2023-01-27 15:36:29 -08:00
winnet all: update copyright and license headers 2023-01-27 15:36:29 -08:00
mem_ios.go all: update copyright and license headers 2023-01-27 15:36:29 -08:00
pendopen.go types/netmap, all: use read-only tailcfg.NodeView in NetworkMap 2023-08-18 20:04:35 -07:00
userspace.go net/dns: retry forwarder requests over TCP 2023-09-25 16:42:07 -04:00
userspace_ext_test.go tsd: add package with System type to unify subsystem init, discovery 2023-05-04 14:21:59 -07:00
userspace_test.go control,tailcfg,wgengine/magicsock: add nodeAttr to enable/disable peer MTU 2023-09-21 04:17:12 -07:00
watchdog.go wgengine, proxymap: split out port mapping from Engine to new type 2023-09-17 20:06:43 +01:00
watchdog_js.go all: update copyright and license headers 2023-01-27 15:36:29 -08:00
watchdog_test.go all: update copyright and license headers 2023-01-27 15:36:29 -08:00
wgengine.go wgengine, proxymap: split out port mapping from Engine to new type 2023-09-17 20:06:43 +01:00