4 Commits

Author	SHA1	Message	Date
Avery Pennarun	e7ae6a2e06	net/netns, wgengine/router: support Linux machines that don't have 'ip rule'. ... We'll use SO_BINDTODEVICE instead of fancy policy routing. This has some limitations: for example, we will route all traffic through the interface that has the main "default" (0.0.0.0/0) route, so machines that have multiple physical interfaces might have to go through DERP to get to some peers. But machines with multiple physical interfaces are very likely to have policy routing (ip rule) support anyway. So far, the only OS I know of that needs this feature is ChromeOS (crostini). Fixes #245. Signed-off-by: Avery Pennarun <apenwarr@tailscale.com>	2020-05-31 04:31:01 -04:00
Brad Fitzpatrick	765695eaa2	net/netns: also don't err on tailscaled -fake as a regular user ... That's one of my dev workflows.	2020-05-29 22:40:26 -07:00
Brad Fitzpatrick	1407540b52	net/netns: don't return an error if we're not root and running the tailscale binary ... tailscale netcheck was broken otherwise. We can fix this a better way later; I'm just fixing a regression in some way because I'm trying to work on netcheck at the moment.	2020-05-29 21:58:31 -07:00
David Anderson	5114df415e	net/netns: set the bypass socket mark on linux. ... This allows tailscaled's own traffic to bypass Tailscale-managed routes, so that things like tailscale-provided default routes don't break tailscaled itself. Progress on #144. Signed-off-by: David Anderson <danderson@tailscale.com>	2020-05-29 15:16:58 -07:00