tailscale

mirror of https://github.com/tailscale/tailscale.git synced 2025-01-07 08:07:42 +00:00

History

Avery Pennarun f69003fd46 router_linux: work around terrible bugs in old iptables-compat versions.

Specifically, this sequence:
	iptables -N ts-forward
	iptables -A ts-forward -m mark --mark 0x10000 -j ACCEPT
	iptables -A FORWARD -j ts-forward
doesn't work on Debian-9-using-nftables, but this sequence:
	iptables -N ts-forward
	iptables -A FORWARD -j ts-forward
	iptables -A ts-forward -m mark --mark 0x10000 -j ACCEPT
does work.

I'm sure the reason why is totally fascinating, but it's an old version
of iptables and the bug doesn't seem to exist on modern nftables, so
let's refactor our code to add rules in the always-safe order and
pretend this never happened.

Fixes #401.

Signed-off-by: Avery Pennarun <apenwarr@tailscale.com>

2020-05-28 07:15:06 -04:00

filter

wgengine/filter: implement a destination IP pre-filter.

2020-05-22 17:03:30 +00:00

magicsock

magicsock: work around race condition initializing .Regions[].

2020-05-28 03:42:03 -04:00

monitor

wgengine/monitor: disable monitor on Android

2020-04-24 06:35:31 -07:00

packet

wgengine/packet: add some tests, more docs, minor Go style, performance changes