Maisem Ali 4d6a8224d5 util/linuxfw: fall back to nftables when iptables not found ...

When the desired netfilter mode was unset, we would always try
to use the `iptables` binary. In such cases if iptables was not found,
tailscaled would just crash as seen in #13440. To work around this, in those
cases check if the `iptables` binary even exists and if it doesn't fall back
to the nftables implementation.

Verified that it works on stock Ubuntu 24.04.

Updates #5621
Updates #8555
Updates #8762
Fixes #13440

Signed-off-by: Maisem Ali <maisem@tailscale.com>

2024-09-11 14:36:17 -07:00

..

linuxfwtest

util/linuxfw: initial implementation of package

2023-02-09 14:20:24 -05:00

detector.go

util/linuxfw: fall back to nftables when iptables not found

2024-09-11 14:36:17 -07:00

fake.go

cmd/containerboot,cmd/k8s-operator: enable IPv6 for fqdn egress proxies (#12577)

2024-07-05 12:21:48 +01:00

helpers.go

all: cleanup unused code, part 2 (#10670)

2023-12-21 17:40:03 -08:00

iptables_runner_test.go

util/linuxfw,go.{mod,sum}: don't log errors when deleting non-existant chains and rules (#11852)

2024-04-23 21:08:18 +01:00

iptables_runner.go

util/linuxfw: don't try cleaning iptables on gokrazy

2024-05-29 21:02:45 -07:00

iptables.go

util/linuxfw: fall back to nftables when iptables not found

2024-09-11 14:36:17 -07:00

linuxfw_unsupported.go

all: cleanup unused code, part 2 (#10670)

2023-12-21 17:40:03 -08:00

linuxfw.go

all: add test for package comments, fix, add comments as needed

2024-07-10 09:57:00 -07:00

nftables_runner_test.go

util/linuxfw: fix IPv6 availability check for nftables (#12009)

2024-05-14 08:51:53 +01:00

nftables_runner.go

util/linuxfw: return nil interface not concrete type

2024-08-03 09:53:46 -07:00

nftables_types.go

util/linuxfw: add new arch build constraints

2023-06-30 18:22:15 -04:00

nftables.go

util/cmpx: delete now that we're using Go 1.22

2024-02-07 18:10:15 -08:00