Brad Fitzpatrick b8fb8264a5 wgengine/netstack: avoid delivering incoming packets to both netstack + host ...

The earlier eb06ec172f fixed
the flaky SSH issue (tailscale/corp#1725) by making sure that packets
addressed to Tailscale IPs in hybrid netstack mode weren't delivered
to netstack, but another issue remained:

All traffic handled by netstack was also potentially being handled by
the host networking stack, as the filter hook returned "Accept", which
made it keep processing. This could lead to various random racey chaos
as a function of OS/firewalls/routes/etc.

Instead, once we inject into netstack, stop our caller's packet
processing.

Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>

2021-05-06 06:43:16 -07:00

..

netstack.go

wgengine/netstack: avoid delivering incoming packets to both netstack + host

2021-05-06 06:43:16 -07:00

subnet_router_wrapper.go

cmd/tailscaled, wgengine{,/netstack}: add netstack hybrid mode, add to Windows

2021-04-06 21:37:28 -07:00