Irbe Krumina 92ca770b8d

util/linuxfw: fix MSS clamping in nftables mode (#11588) ...

MSS clamping for nftables was mostly not ran due to to an earlier rule in the FORWARD chain issuing accept verdict.
This commit places the clamping rule into a chain of its own to ensure that it gets ran.

Updates tailscale/tailscale#11002

Signed-off-by: Irbe Krumina <irbe@tailscale.com>

2024-04-02 19:31:33 +01:00

..

linuxfwtest

util/linuxfw: initial implementation of package

2023-02-09 14:20:24 -05:00

detector.go

linuxfw,wgengine/route,ipn: add c2n and nodeattrs to control linux netfilter

2023-12-05 14:22:02 -05:00

fake.go

util/linuxfw,wgengine/router: skip IPv6 firewall configuration in partial iptables mode (#11546)

2024-03-29 05:23:03 +00:00

helpers.go

all: cleanup unused code, part 2 (#10670)

2023-12-21 17:40:03 -08:00

iptables_runner_test.go

util/linuxfw: move fake runner into pkg

2023-10-11 11:48:43 -07:00

iptables_runner.go

util/linuxfw,wgengine/router: skip IPv6 firewall configuration in partial iptables mode (#11546)

2024-03-29 05:23:03 +00:00

iptables.go

util/linuxfw: move detection logic

2023-10-10 20:29:24 -07:00

linuxfw_unsupported.go

all: cleanup unused code, part 2 (#10670)

2023-12-21 17:40:03 -08:00

linuxfw.go

util/linuxfw,wgengine/router: enable IPv6 configuration when netfilter is disabled

2024-03-21 16:10:47 -07:00

nftables_runner_test.go

util/linuxfw: add missing error checks in tests

2023-10-28 09:44:53 -07:00

nftables_runner.go

util/linuxfw: fix MSS clamping in nftables mode (#11588)

2024-04-02 19:31:33 +01:00

nftables_types.go

util/linuxfw: add new arch build constraints

2023-06-30 18:22:15 -04:00

nftables.go

util/cmpx: delete now that we're using Go 1.22

2024-02-07 18:10:15 -08:00