mirror of
https://github.com/tailscale/tailscale.git
synced 2024-11-25 11:05:45 +00:00
9bd158cc09
The AddSNATRuleForDst rule was adding a new rule each time it was called including: - if a rule already existed - if a rule matching the destination, but with different desired source already existed This was causing issues especially for the in-progress egress HA proxies work, where the rules are now refreshed more frequently, so more redundant rules were being created. This change: - only creates the rule if it doesn't already exist - if a rule for the same dst, but different source is found, delete it - also ensures that egress proxies refresh firewall rules if the node's tailnet IP changes Updates tailscale/tailscale#13406 Signed-off-by: Irbe Krumina <irbe@tailscale.com> |
||
|---|---|---|
| .. | ||
| linuxfwtest | ||
| detector.go | ||
| fake.go | ||
| helpers.go | ||
| iptables_for_svcs_test.go | ||
| iptables_for_svcs.go | ||
| iptables_runner_test.go | ||
| iptables_runner.go | ||
| iptables.go | ||
| linuxfw_unsupported.go | ||
| linuxfw.go | ||
| nftables_for_svcs_test.go | ||
| nftables_for_svcs.go | ||
| nftables_runner_test.go | ||
| nftables_runner.go | ||
| nftables_types.go | ||
| nftables.go | ||