0fe262f093
ipn: plumb NetfilterMode all the way out to the CLI.
...
Signed-off-by: David Anderson <danderson@tailscale.com>
6 years ago
292606a975
wgengine/router: support multiple levels of netfilter involvement.
...
Signed-off-by: David Anderson <danderson@tailscale.com>
6 years ago
9ccbcda612
wgengine/router: rename config.Settings to config.Config, make pointer.
...
Signed-off-by: David Anderson <danderson@tailscale.com>
6 years ago
bfdc8175b1
wgengine/router: add a setting to disable SNAT for subnet routes.
...
Part of #320 .
Signed-off-by: David Anderson <danderson@tailscale.com>
6 years ago
b01db109f5
wgengine/router: use inet.af/netaddr, not wgcfg.CIDR.
...
Signed-off-by: David Anderson <danderson@tailscale.com>
6 years ago
b8f01eed34
wgengine/router: remove wireguard-go config from settings.
...
Instead, pass in only exactly the relevant configuration pieces
that the OS network stack cares about.
Signed-off-by: David Anderson <danderson@tailscale.com>
6 years ago
8861bb5a19
wgengine/router: alter API to support multiple addrs, and use on linux.
...
FreeBSD and OpenBSD will error out with a complaint if we pass >1 address
right now, but we don't yet so that's okay.
6 years ago
89198b1691
wgengine/router: rewrite netfilter and routing logic.
...
New logic installs precise filters for subnet routes,
plays nice with other users of netfilter, and lays the
groundwork for fixing routing loops via policy routing.
Signed-off-by: David Anderson <danderson@tailscale.com>
6 years ago
755fd9253c
wgengine/router: fix up docstring.
...
Signed-off-by: David Anderson <danderson@tailscale.com>
6 years ago
1ac570def7
wgengine/router: split out from wgengine.
...
The router implementations are logically separate, with their own API.
Signed-off-by: David Anderson <danderson@tailscale.com>
6 years ago
David Anderson