Irbe Krumina 7ef2f72135

util/linuxfw: fix IPv6 availability check for nftables (#12009) ...

* util/linuxfw: fix IPv6 NAT availability check for nftables

When running firewall in nftables mode,
there is no need for a separate NAT availability check
(unlike with iptables, there are no hosts that support nftables, but not IPv6 NAT - see tailscale/tailscale#11353).
This change fixes a firewall NAT availability check that was using the no-longer set ipv6NATAvailable field
by removing the field and using a method that, for nftables, just checks that IPv6 is available.

Updates tailscale/tailscale#12008

Signed-off-by: Irbe Krumina <irbe@tailscale.com>

2024-05-14 08:51:53 +01:00

..

linuxfwtest

util/linuxfw: initial implementation of package

2023-02-09 14:20:24 -05:00

detector.go

linuxfw,wgengine/route,ipn: add c2n and nodeattrs to control linux netfilter

2023-12-05 14:22:02 -05:00

fake.go

various: implement stateful firewalling on Linux (#12025)

2024-05-06 16:22:17 -06:00

helpers.go

all: cleanup unused code, part 2 (#10670)

2023-12-21 17:40:03 -08:00

iptables_runner_test.go

util/linuxfw,go.{mod,sum}: don't log errors when deleting non-existant chains and rules (#11852)

2024-04-23 21:08:18 +01:00

iptables_runner.go

util/linuxfw: fix IPv6 availability check for nftables (#12009)

2024-05-14 08:51:53 +01:00

iptables.go

util/linuxfw: move detection logic

2023-10-10 20:29:24 -07:00

linuxfw_unsupported.go

all: cleanup unused code, part 2 (#10670)

2023-12-21 17:40:03 -08:00

linuxfw.go

util/linuxfw: fix IPv6 availability check for nftables (#12009)

2024-05-14 08:51:53 +01:00

nftables_runner_test.go

util/linuxfw: fix IPv6 availability check for nftables (#12009)

2024-05-14 08:51:53 +01:00

nftables_runner.go

util/linuxfw: fix IPv6 availability check for nftables (#12009)

2024-05-14 08:51:53 +01:00

nftables_types.go

util/linuxfw: add new arch build constraints

2023-06-30 18:22:15 -04:00

nftables.go

util/cmpx: delete now that we're using Go 1.22

2024-02-07 18:10:15 -08:00