mirror of
https://github.com/tailscale/tailscale.git
synced 2024-11-29 13:05:46 +00:00
wgengine/router: switch packet marks to avoid conflict with Weave Net.
Signed-off-by: David Anderson <danderson@tailscale.com>
This commit is contained in:
parent
f26b409bd5
commit
d60917c0f1
@ -26,7 +26,7 @@
|
|||||||
//
|
//
|
||||||
// Keep this in sync with tailscaleBypassMark in
|
// Keep this in sync with tailscaleBypassMark in
|
||||||
// wgengine/router/router_linux.go.
|
// wgengine/router/router_linux.go.
|
||||||
const tailscaleBypassMark = 0x20000
|
const tailscaleBypassMark = 0x80000
|
||||||
|
|
||||||
// ipRuleOnce is the sync.Once & cached value for ipRuleAvailable.
|
// ipRuleOnce is the sync.Once & cached value for ipRuleAvailable.
|
||||||
var ipRuleOnce struct {
|
var ipRuleOnce struct {
|
||||||
|
@ -37,13 +37,13 @@
|
|||||||
const (
|
const (
|
||||||
// Packet is from Tailscale and to a subnet route destination, so
|
// Packet is from Tailscale and to a subnet route destination, so
|
||||||
// is allowed to be routed through this machine.
|
// is allowed to be routed through this machine.
|
||||||
tailscaleSubnetRouteMark = "0x10000"
|
tailscaleSubnetRouteMark = "0x40000"
|
||||||
// Packet was originated by tailscaled itself, and must not be
|
// Packet was originated by tailscaled itself, and must not be
|
||||||
// routed over the Tailscale network.
|
// routed over the Tailscale network.
|
||||||
//
|
//
|
||||||
// Keep this in sync with tailscaleBypassMark in
|
// Keep this in sync with tailscaleBypassMark in
|
||||||
// net/netns/netns_linux.go.
|
// net/netns/netns_linux.go.
|
||||||
tailscaleBypassMark = "0x20000"
|
tailscaleBypassMark = "0x80000"
|
||||||
)
|
)
|
||||||
|
|
||||||
// netfilterRunner abstracts helpers to run netfilter commands. It
|
// netfilterRunner abstracts helpers to run netfilter commands. It
|
||||||
|
Loading…
Reference in New Issue
Block a user