tailscale/wgengine
Tom DNetto f6da2220d3 wgengine: set fwmark masks in netfilter & ip rules
This change masks the bitspace used when setting and querying the fwmark on packets. This allows
tailscaled to play nicer with other networking software on the host, assuming the other networking
software is also using fwmarks & a different mask.

IPTables / mark module has always supported masks, so this is safe on the netfilter front.

However, busybox only gained support for parsing + setting masks in 1.33.0, so we make sure we
arent such a version before we add the "/<mask>" syntax to an ip rule command.

Signed-off-by: Tom DNetto <tom@tailscale.com>
2022-09-13 09:52:26 -07:00
..
bench all: convert more code to use net/netip directly 2022-07-25 21:53:49 -07:00
filter all: migrate more code code to net/netip directly 2022-08-02 13:59:57 -07:00
magicsock wgengine/magicsock: don't use BPF receive when SO_MARK doesn't work. 2022-09-12 15:05:44 -07:00
monitor go.mod: bump wireguard/windows, which moves to using net/netip 2022-08-31 08:36:56 -07:00
netstack wgengine/netstack: only accept connection after dialing (#5503) 2022-09-06 16:04:10 -04:00
router wgengine: set fwmark masks in netfilter & ip rules 2022-09-13 09:52:26 -07:00
wgcfg wgengine/wgcfg: only write peer headers if necessary (#5449) 2022-08-29 20:47:52 -04:00
wgint go.mod, wgengine/wgint: bump wireguard-go 2022-09-06 11:34:30 -07:00
wglog all: use syncs.AtomicValue 2022-08-04 11:52:16 -07:00
winnet all: gofmt all 2022-04-29 13:06:04 -07:00
mem_ios.go go.mod: upgrade wireguard-windows, de-fork wireguard-go 2021-05-25 13:18:21 -07:00
pendopen.go wgengine: remove all peer status from open timeout diagnostics 2022-08-29 15:54:33 -07:00
userspace_ext_test.go go.mod: upgrade wireguard-windows, de-fork wireguard-go 2021-05-25 13:18:21 -07:00
userspace_test.go all: convert more code to use net/netip directly 2022-07-25 21:53:49 -07:00
userspace.go wgengine: fix race on endpoints in getStatus 2022-09-01 10:58:04 -07:00
watchdog_js.go wasm: drop pprof dependency 2022-06-07 12:16:16 -07:00
watchdog_test.go wgengine: remove all peer status from open timeout diagnostics 2022-08-29 15:54:33 -07:00
watchdog.go wgengine: print in-flight operations on watchdog trigger (#5447) 2022-08-27 22:06:18 -04:00
wgengine.go all: convert more code to use net/netip directly 2022-07-25 21:53:49 -07:00