Naman Sood 6301a6ce4b

util/linuxfw,wgengine/router: allow incoming CGNAT range traffic with nodeattr ...

Clients with the newly added node attribute
`"disable-linux-cgnat-drop-rule"` will not automatically drop inbound
traffic on non-Tailscale network interfaces with the source IP in the
CGNAT IP range. This is an initial proof-of-concept for enabling
connectivity with off-Tailnet CGNAT endpoints.

Fixes tailscale/corp#36270.

Signed-off-by: Naman Sood <mail@nsood.in>

2026-04-14 16:45:06 -04:00

..

osrouter

util/linuxfw,wgengine/router: allow incoming CGNAT range traffic with nodeattr

2026-04-14 16:45:06 -04:00

callback.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

consolidating_router_test.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

consolidating_router.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

router_fake.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

router_test.go

util/linuxfw,wgengine/router: allow incoming CGNAT range traffic with nodeattr

2026-04-14 16:45:06 -04:00

router.go

util/linuxfw,wgengine/router: allow incoming CGNAT range traffic with nodeattr

2026-04-14 16:45:06 -04:00