tailscale/wgengine/router
Andrew Lytvynov c9179bc261
various: disable stateful filtering by default (#12197)
After some analysis, stateful filtering is only necessary in tailnets
that use `autogroup:danger-all` in `src` in ACLs. And in those cases
users explicitly specify that hosts outside of the tailnet should be
able to reach their nodes. To fix local DNS breakage in containers, we
disable stateful filtering by default.

Updates #12108

Signed-off-by: Andrew Lytvynov <awly@tailscale.com>
2024-05-20 11:44:29 -07:00
..
callback.go wgengine/router: implement UpdateMagicsockPort for CallbackRouter (#10494) 2023-12-07 10:45:14 -05:00
consolidating_router_test.go wgengine/router: consolidate routes before reconfiguring router for mobile clients 2024-04-23 20:15:56 -05:00
consolidating_router.go wgengine/router: consolidate routes before reconfiguring router for mobile clients 2024-04-23 20:15:56 -05:00
ifconfig_windows_test.go all: use Go 1.22 range-over-int 2024-04-16 15:32:38 -07:00
ifconfig_windows.go net/{interfaces,netmon}, all: merge net/interfaces package into net/netmon 2024-04-28 07:34:52 -07:00
router_darwin.go health, all: remove health.Global, finish plumbing health.Tracker 2024-04-26 12:03:11 -07:00
router_default.go health, all: remove health.Global, finish plumbing health.Tracker 2024-04-26 12:03:11 -07:00
router_fake.go util/linuxfw, wgengine: allow ingress to magicsock UDP port on Linux (#10370) 2023-12-05 18:12:02 -05:00
router_freebsd.go health, all: remove health.Global, finish plumbing health.Tracker 2024-04-26 12:03:11 -07:00
router_linux_test.go wgengine/router: print Docker warning when stateful filtering is enabled 2024-05-09 12:26:11 -06:00
router_linux.go various: disable stateful filtering by default (#12197) 2024-05-20 11:44:29 -07:00
router_openbsd.go health, all: remove health.Global, finish plumbing health.Tracker 2024-04-26 12:03:11 -07:00
router_test.go various: implement stateful firewalling on Linux (#12025) 2024-05-06 16:22:17 -06:00
router_userspace_bsd.go health, all: remove health.Global, finish plumbing health.Tracker 2024-04-26 12:03:11 -07:00
router_windows_test.go wgengine/router: look up absolute path to netsh.exe on Windows 2024-01-10 20:20:19 -05:00
router_windows.go health, all: remove health.Global, finish plumbing health.Tracker 2024-04-26 12:03:11 -07:00
router.go various: implement stateful firewalling on Linux (#12025) 2024-05-06 16:22:17 -06:00
runner.go all: update copyright and license headers 2023-01-27 15:36:29 -08:00