tailscale/util/linuxfw
Irbe Krumina 7ef2f72135
util/linuxfw: fix IPv6 availability check for nftables (#12009)
* util/linuxfw: fix IPv6 NAT availability check for nftables

When running firewall in nftables mode,
there is no need for a separate NAT availability check
(unlike with iptables, there are no hosts that support nftables, but not IPv6 NAT - see tailscale/tailscale#11353).
This change fixes a firewall NAT availability check that was using the no-longer set ipv6NATAvailable field
by removing the field and using a method that, for nftables, just checks that IPv6 is available.

Updates tailscale/tailscale#12008

Signed-off-by: Irbe Krumina <irbe@tailscale.com>
2024-05-14 08:51:53 +01:00
..
linuxfwtest util/linuxfw: initial implementation of package 2023-02-09 14:20:24 -05:00
detector.go linuxfw,wgengine/route,ipn: add c2n and nodeattrs to control linux netfilter 2023-12-05 14:22:02 -05:00
fake.go various: implement stateful firewalling on Linux (#12025) 2024-05-06 16:22:17 -06:00
helpers.go all: cleanup unused code, part 2 (#10670) 2023-12-21 17:40:03 -08:00
iptables_runner_test.go util/linuxfw,go.{mod,sum}: don't log errors when deleting non-existant chains and rules (#11852) 2024-04-23 21:08:18 +01:00
iptables_runner.go util/linuxfw: fix IPv6 availability check for nftables (#12009) 2024-05-14 08:51:53 +01:00
iptables.go util/linuxfw: move detection logic 2023-10-10 20:29:24 -07:00
linuxfw_unsupported.go all: cleanup unused code, part 2 (#10670) 2023-12-21 17:40:03 -08:00
linuxfw.go util/linuxfw: fix IPv6 availability check for nftables (#12009) 2024-05-14 08:51:53 +01:00
nftables_runner_test.go util/linuxfw: fix IPv6 availability check for nftables (#12009) 2024-05-14 08:51:53 +01:00
nftables_runner.go util/linuxfw: fix IPv6 availability check for nftables (#12009) 2024-05-14 08:51:53 +01:00
nftables_types.go util/linuxfw: add new arch build constraints 2023-06-30 18:22:15 -04:00
nftables.go util/cmpx: delete now that we're using Go 1.22 2024-02-07 18:10:15 -08:00