tailscale/util/linuxfw
Irbe Krumina 90c4067010
util/linuxfw: add container-friendly IPv6 NAT check (#11353)
Remove IPv6 NAT check when routing is being set up
using nftables.
This is unnecessary as support for nftables was
added after support for IPv6.
https://tldp.org/HOWTO/Linux+IPv6-HOWTO/ch18s04.html
https://wiki.nftables.org/wiki-nftables/index.php/Building_and_installing_nftables_from_sources

Additionally, run an extra check for IPv6 NAT support
when the routing is set up with iptables.
This is because the earlier checks rely on
being able to use modprobe and on /proc/net/ip6_tables_names
being populated on start - these conditions are usually not
true in container environments.

Updates tailscale/tailscale#11344

Signed-off-by: Irbe Krumina <irbe@tailscale.com>
2024-03-06 21:53:51 +00:00
..
linuxfwtest util/linuxfw: initial implementation of package 2023-02-09 14:20:24 -05:00
detector.go linuxfw,wgengine/route,ipn: add c2n and nodeattrs to control linux netfilter 2023-12-05 14:22:02 -05:00
fake.go util/linuxfw: move fake runner into pkg 2023-10-11 11:48:43 -07:00
helpers.go all: cleanup unused code, part 2 (#10670) 2023-12-21 17:40:03 -08:00
iptables.go util/linuxfw: move detection logic 2023-10-10 20:29:24 -07:00
iptables_runner.go util/linuxfw: add container-friendly IPv6 NAT check (#11353) 2024-03-06 21:53:51 +00:00
iptables_runner_test.go util/linuxfw: move fake runner into pkg 2023-10-11 11:48:43 -07:00
linuxfw.go util/linuxfw: add container-friendly IPv6 NAT check (#11353) 2024-03-06 21:53:51 +00:00
linuxfw_unsupported.go all: cleanup unused code, part 2 (#10670) 2023-12-21 17:40:03 -08:00
nftables.go util/cmpx: delete now that we're using Go 1.22 2024-02-07 18:10:15 -08:00
nftables_runner.go util/linuxfw: add container-friendly IPv6 NAT check (#11353) 2024-03-06 21:53:51 +00:00
nftables_runner_test.go util/linuxfw: add missing error checks in tests 2023-10-28 09:44:53 -07:00
nftables_types.go util/linuxfw: add new arch build constraints 2023-06-30 18:22:15 -04:00