Naman Sood 6301a6ce4b

util/linuxfw,wgengine/router: allow incoming CGNAT range traffic with nodeattr ...

Clients with the newly added node attribute
`"disable-linux-cgnat-drop-rule"` will not automatically drop inbound
traffic on non-Tailscale network interfaces with the source IP in the
CGNAT IP range. This is an initial proof-of-concept for enabling
connectivity with off-Tailnet CGNAT endpoints.

Fixes tailscale/corp#36270.

Signed-off-by: Naman Sood <mail@nsood.in>

2026-04-14 16:45:06 -04:00

..

linuxfwtest

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

detector.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

fake_netfilter.go

util/linuxfw,wgengine/router: allow incoming CGNAT range traffic with nodeattr

2026-04-14 16:45:06 -04:00

fake.go

util/linuxfw: fix nil pointer panic in connmark rules without IPv6 (#18946)

2026-03-10 15:19:15 -04:00

helpers.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

iptables_disabled.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

iptables_for_svcs_test.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

iptables_for_svcs.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

iptables_runner_test.go

util/linuxfw,wgengine/router: allow incoming CGNAT range traffic with nodeattr

2026-04-14 16:45:06 -04:00

iptables_runner.go

util/linuxfw,wgengine/router: allow incoming CGNAT range traffic with nodeattr

2026-04-14 16:45:06 -04:00

iptables.go

all: use Go 1.26 things, run most gofix modernizers

2026-03-06 13:32:03 -08:00

linuxfw.go

util/linuxfw,wgengine/router: allow incoming CGNAT range traffic with nodeattr

2026-04-14 16:45:06 -04:00

nftables_for_svcs_test.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

nftables_for_svcs.go

all: use Go 1.26 things, run most gofix modernizers

2026-03-06 13:32:03 -08:00

nftables_runner_test.go

util/linuxfw,wgengine/router: allow incoming CGNAT range traffic with nodeattr

2026-04-14 16:45:06 -04:00

nftables_runner.go

util/linuxfw,wgengine/router: allow incoming CGNAT range traffic with nodeattr

2026-04-14 16:45:06 -04:00

nftables_types.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

nftables.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00