Tom DNetto f6da2220d3 wgengine: set fwmark masks in netfilter & ip rules ...

This change masks the bitspace used when setting and querying the fwmark on packets. This allows
tailscaled to play nicer with other networking software on the host, assuming the other networking
software is also using fwmarks & a different mask.

IPTables / mark module has always supported masks, so this is safe on the netfilter front.

However, busybox only gained support for parsing + setting masks in 1.33.0, so we make sure we
arent such a version before we add the "/<mask>" syntax to an ip rule command.

Signed-off-by: Tom DNetto <tom@tailscale.com>

2022-09-13 09:52:26 -07:00

..

bench

all: convert more code to use net/netip directly

2022-07-25 21:53:49 -07:00

filter

all: migrate more code code to net/netip directly

2022-08-02 13:59:57 -07:00

magicsock

wgengine/magicsock: don't use BPF receive when SO_MARK doesn't work.

2022-09-12 15:05:44 -07:00

monitor

go.mod: bump wireguard/windows, which moves to using net/netip

2022-08-31 08:36:56 -07:00

netstack

wgengine/netstack: only accept connection after dialing (#5503)

2022-09-06 16:04:10 -04:00

router

wgengine: set fwmark masks in netfilter & ip rules

2022-09-13 09:52:26 -07:00

wgcfg

wgengine/wgcfg: only write peer headers if necessary (#5449)

2022-08-29 20:47:52 -04:00

wgint

go.mod, wgengine/wgint: bump wireguard-go

2022-09-06 11:34:30 -07:00

wglog

all: use syncs.AtomicValue

2022-08-04 11:52:16 -07:00

winnet

all: gofmt all

2022-04-29 13:06:04 -07:00

mem_ios.go

go.mod: upgrade wireguard-windows, de-fork wireguard-go

2021-05-25 13:18:21 -07:00

pendopen.go

wgengine: remove all peer status from open timeout diagnostics

2022-08-29 15:54:33 -07:00

userspace_ext_test.go

go.mod: upgrade wireguard-windows, de-fork wireguard-go

2021-05-25 13:18:21 -07:00

userspace_test.go

all: convert more code to use net/netip directly

2022-07-25 21:53:49 -07:00

userspace.go

wgengine: fix race on endpoints in getStatus

2022-09-01 10:58:04 -07:00

watchdog_js.go

wasm: drop pprof dependency

2022-06-07 12:16:16 -07:00

watchdog_test.go

wgengine: remove all peer status from open timeout diagnostics

2022-08-29 15:54:33 -07:00

watchdog.go

wgengine: print in-flight operations on watchdog trigger (#5447)

2022-08-27 22:06:18 -04:00

wgengine.go

all: convert more code to use net/netip directly

2022-07-25 21:53:49 -07:00