Irbe Krumina 9bd158cc09 cmd/containerboot,util/linuxfw: create a SNAT rule for dst/src only once, clean up if needed (#13658) ... The AddSNATRuleForDst rule was adding a new rule each time it was called including: - if a rule already existed - if a rule matching the destination, but with different desired source already existed This was causing issues especially for the in-progress egress HA proxies work, where the rules are now refreshed more frequently, so more redundant rules were being created. This change: - only creates the rule if it doesn't already exist - if a rule for the same dst, but different source is found, delete it - also ensures that egress proxies refresh firewall rules if the node's tailnet IP changes Updates tailscale/tailscale#13406 Signed-off-by: Irbe Krumina <irbe@tailscale.com>		2024-10-03 20:15:00 +01:00
..
addlicense	all: update tools that manage copyright headers	2023-01-27 15:36:29 -08:00
build-webclient	client/web: precompress assets	2023-12-07 20:57:31 -05:00
cloner	cmd/cloner, cmd/viewer, util/codegen: add support for aliases of cloneable types	2024-08-23 15:43:40 -05:00
connector-gen	cmd/connector-gen: add helper tool for wide app connector configurations	2023-12-15 09:29:42 -08:00
containerboot	cmd/containerboot,util/linuxfw: create a SNAT rule for dst/src only once, clean up if needed (#13658)	2024-10-03 20:15:00 +01:00
derper	cli: add tailscale dns query (#13368)	2024-09-24 20:18:45 +00:00
derpprobe	cmd/derpprobe: use a status page from the prober library	2024-08-06 11:27:59 +01:00
dist	release/dist/qnap: add qnap target builder	2024-04-22 17:43:28 -04:00
get-authkey	util/cmpx: delete now that we're using Go 1.22	2024-02-07 18:10:15 -08:00
gitops-pusher	cmd/gitops-pusher: ignore previous etag if local acls match control (#13068)	2024-08-08 13:23:06 -07:00
hello	cmd/hello: link to the Hello KB article (#11022)	2024-02-02 15:48:31 -08:00
k8s-nameserver	cmd/k8s-nameserver: fix AAAA record query response (#12412)	2024-06-10 17:57:22 +01:00
k8s-operator	cmd/k8s-operator: remove auth key once proxy has logged in (#13612)	2024-09-27 17:47:27 +01:00
mkmanifest	cmd/mkmanifest, cmd/tailscale, cmd/tailscaled: remove Windows arm32 resources from OSS	2023-03-01 15:45:12 -07:00
mkpkg	go.mod: upgrade nfpm to v2 (#8786)	2023-08-03 13:00:45 -07:00
mkversion	version/mkversion: open-source version generation logic	2023-02-18 05:21:05 +00:00
nardump	all: update copyright and license headers	2023-01-27 15:36:29 -08:00
natc	cmd/natc: fix nil pointer	2024-09-17 09:48:48 -07:00
netlogfmt	all: use Go 1.22 range-over-int	2024-04-16 15:32:38 -07:00
nginx-auth	tailcfg,all: add and use Node.IsTagged()	2023-03-13 08:44:25 -07:00
pgproxy	tsnet: split user facing and backend logging	2024-05-10 15:29:13 -07:00
printdep	cmd/printdep: print correct toolchain URL	2023-02-11 17:57:36 +00:00
proxy-to-grafana	cmd/proxy-to-grafana: add flag for alternative control server	2024-06-21 12:17:39 +02:00
sniproxy	all: use math/rand/v2 more	2024-06-05 15:24:04 -07:00
speedtest	all: update copyright and license headers	2023-01-27 15:36:29 -08:00
ssh-auth-none-demo	all: replace deprecated ioutil references	2023-08-23 23:53:19 +01:00
stunc	cmd/stunc: support user-specified port (#12469)	2024-06-14 09:46:16 -07:00
stund	cli: add tailscale dns query (#13368)	2024-09-24 20:18:45 +00:00
stunstamp	cmd/stunstamp: add protocol context to timeout logs (#13422)	2024-09-09 18:42:13 -07:00
sync-containers	all: adjust some build tags for plan9	2023-08-24 15:42:35 -07:00
systray	cmd/systray: handle reconnects to IPN bus (#13386)	2024-09-05 10:11:05 -07:00
tailscale	cmd/tailscale/cli: make 'tailscale debug ts2021' try twice	2024-10-01 11:28:59 -05:00
tailscaled	util/usermetrics: make usermetrics non-global	2024-09-25 15:57:00 +02:00
testcontrol	all: use Go 1.22 range-over-int	2024-04-16 15:32:38 -07:00
testwrapper	cmd/testwrapper: apply results of all unit tests to coverage for all packages	2024-02-21 13:08:17 -06:00
tl-longchain	cmd/tl-longchain: tool to re-sign nodes with long rotation signatures	2024-08-21 18:22:22 +01:00
tsconnect	all: use math/rand/v2 more	2024-06-05 15:24:04 -07:00
tsidp	cmd/tsidp: add --dir flag	2024-09-29 16:15:22 -07:00
tsshd	all: update copyright and license headers	2023-01-27 15:36:29 -08:00
tta	cmd/tta: pull out test driver dialing into a type, fix bugs	2024-08-26 15:36:30 -07:00
viewer	cmd/cloner, cmd/viewer, util/codegen: add support for aliases of cloneable types	2024-08-23 15:43:40 -05:00
vnet	tstest/natlab/vnet: add start of IPv6 support	2024-08-24 18:02:38 -07:00
xdpderper	all: add test for package comments, fix, add comments as needed	2024-07-10 09:57:00 -07:00