tailscale/net
Maisem Ali 3ae7140690 net/tstun: handle exit nodes in NAT configs
In the case where the exit node requires SNAT, we would SNAT all traffic not just the
traffic meant to go through the exit node. This was a result of the default route being
added to the routing table which would match basically everything.

In this case, we need to account for all peers in the routing table not just the ones
that require NAT.

Fix and add a test.

Updates tailscale/corp#8020

Signed-off-by: Maisem Ali <maisem@tailscale.com>
2023-05-02 13:03:30 -07:00
..
art net/art: skip tests on CI for now 2023-04-14 10:24:38 -07:00
connstats net/connstats: exclude traffic with internal Tailscale service (#7904) 2023-04-17 14:24:29 -07:00
dns all: avoid repeated default interface lookups 2023-04-20 15:46:01 -07:00
dnscache all: avoid repeated default interface lookups 2023-04-20 15:46:01 -07:00
dnsfallback all: avoid repeated default interface lookups 2023-04-20 15:46:01 -07:00
flowtrack all: update copyright and license headers 2023-01-27 15:36:29 -08:00
interfaces all: move network monitoring from wgengine/monitor to net/netmon 2023-04-20 10:15:59 -07:00
memnet net/memnet: rename from net/nettest 2023-01-30 13:03:32 -08:00
netaddr all: update copyright and license headers 2023-01-27 15:36:29 -08:00
netcheck net/ping,netcheck: add v6 pinging capabilities to pinger (#7971) 2023-04-26 15:59:37 -07:00
neterror net/neterror, wgengine/magicsock: use UDP GSO and GRO on Linux (#7791) 2023-04-04 16:32:16 -07:00
netknob all: update copyright and license headers 2023-01-27 15:36:29 -08:00
netmon all: move network monitoring from wgengine/monitor to net/netmon 2023-04-20 10:15:59 -07:00
netns all: avoid repeated default interface lookups 2023-04-20 15:46:01 -07:00
netstat net/{netns,netstat}: use new x/sys/cpu.IsBigEndian 2023-02-02 07:41:49 -08:00
netutil all: replace /kb/ links with /s/ equivalents 2023-03-13 14:21:15 -07:00
packet net/packet: add NAT support for DCCP and GRE 2023-04-24 15:30:50 -07:00
ping net/ping,netcheck: add v6 pinging capabilities to pinger (#7971) 2023-04-26 15:59:37 -07:00
portmapper all: avoid repeated default interface lookups 2023-04-20 15:46:01 -07:00
proxymux all: update copyright and license headers 2023-01-27 15:36:29 -08:00
routetable net/routetable: include unknown flags in the routetable doctor output 2023-02-10 15:54:31 -08:00
socks5 net/socks5: add password auth support 2023-03-05 14:08:34 -08:00
sockstats all: avoid repeated default interface lookups 2023-04-20 15:46:01 -07:00
speedtest all: update copyright and license headers 2023-01-27 15:36:29 -08:00
stun wgengine/magicsock, types/nettype, etc: finish ReadFromUDPAddrPort netip migration 2023-04-15 13:40:15 -07:00
tlsdial health, net/tlsdial: add healthcheck for self-signed cert 2023-02-01 23:17:41 -05:00
tsaddr all: replace /kb/ links with /s/ equivalents 2023-03-13 14:21:15 -07:00
tsdial all: avoid repeated default interface lookups 2023-04-20 15:46:01 -07:00
tshttpproxy net/tshttpproxy: don't proxy through ourselves 2023-03-29 17:09:45 -04:00
tstun net/tstun: handle exit nodes in NAT configs 2023-05-02 13:03:30 -07:00
wsconn all: update copyright and license headers 2023-01-27 15:36:29 -08:00