tailscale/util/linuxfw
Naman Sood 6301a6ce4b
util/linuxfw,wgengine/router: allow incoming CGNAT range traffic with nodeattr
Clients with the newly added node attribute
`"disable-linux-cgnat-drop-rule"` will not automatically drop inbound
traffic on non-Tailscale network interfaces with the source IP in the
CGNAT IP range. This is an initial proof-of-concept for enabling
connectivity with off-Tailnet CGNAT endpoints.

Fixes tailscale/corp#36270.

Signed-off-by: Naman Sood <mail@nsood.in>
2026-04-14 16:45:06 -04:00
..
linuxfwtest all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
detector.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
fake_netfilter.go util/linuxfw,wgengine/router: allow incoming CGNAT range traffic with nodeattr 2026-04-14 16:45:06 -04:00
fake.go util/linuxfw: fix nil pointer panic in connmark rules without IPv6 (#18946) 2026-03-10 15:19:15 -04:00
helpers.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
iptables_disabled.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
iptables_for_svcs_test.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
iptables_for_svcs.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
iptables_runner_test.go util/linuxfw,wgengine/router: allow incoming CGNAT range traffic with nodeattr 2026-04-14 16:45:06 -04:00
iptables_runner.go util/linuxfw,wgengine/router: allow incoming CGNAT range traffic with nodeattr 2026-04-14 16:45:06 -04:00
iptables.go all: use Go 1.26 things, run most gofix modernizers 2026-03-06 13:32:03 -08:00
linuxfw.go util/linuxfw,wgengine/router: allow incoming CGNAT range traffic with nodeattr 2026-04-14 16:45:06 -04:00
nftables_for_svcs_test.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
nftables_for_svcs.go all: use Go 1.26 things, run most gofix modernizers 2026-03-06 13:32:03 -08:00
nftables_runner_test.go util/linuxfw,wgengine/router: allow incoming CGNAT range traffic with nodeattr 2026-04-14 16:45:06 -04:00
nftables_runner.go util/linuxfw,wgengine/router: allow incoming CGNAT range traffic with nodeattr 2026-04-14 16:45:06 -04:00
nftables_types.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
nftables.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00