You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Irbe Krumina 2c16fcaa06 util/linuxfw,wgengine/router: add new netfilter rules for HA ingresses (#15896) ... Add new rules to update DNAT rules for Kubernetes operator's HA ingress where it's expected that rules will be added/removed frequently (so we don't want to keep old rules around or rewrite existing rules unnecessarily): - allow deleting DNAT rules using metadata lookup - allow inserting DNAT rules if they don't already exist (using metadata lookup) Updates tailscale/tailscale#15895 Signed-off-by: Irbe Krumina <irbe@tailscale.com> Co-authored-by: chaosinthecrd <tom@tmlabs.co.uk>		11 months ago
..
linuxfwtest	util/linuxfw: initial implementation of package	3 years ago
detector.go	util/linuxfw: fall back to nftables when iptables not found	2 years ago
fake.go	cmd/containerboot,cmd/k8s-operator: enable IPv6 for fqdn egress proxies (#12577)	2 years ago
fake_netfilter.go	util/linuxfw,wgengine/router: add new netfilter rules for HA ingresses (#15896)	11 months ago
helpers.go	util/slicesx: add FirstElementEqual and LastElementEqual	2 years ago
iptables.go	util/linuxfw: fall back to nftables when iptables not found	2 years ago
iptables_for_svcs.go	util/linuxfw,wgengine/router: add new netfilter rules for HA ingresses (#15896)	11 months ago
iptables_for_svcs_test.go	util/linuxfw,wgengine/router: add new netfilter rules for HA ingresses (#15896)	11 months ago
iptables_runner.go	cmd/containerboot,util/linuxfw: create a SNAT rule for dst/src only once, clean up if needed (#13658)	2 years ago
iptables_runner_test.go	cmd/containerboot,util/linuxfw: create a SNAT rule for dst/src only once, clean up if needed (#13658)	2 years ago
linuxfw.go	all: add test for package comments, fix, add comments as needed	2 years ago
linuxfw_unsupported.go	all: cleanup unused code, part 2 (#10670)	2 years ago
nftables.go	all: use Go 1.21's binary.NativeEndian	1 year ago
nftables_for_svcs.go	util/linuxfw,wgengine/router: add new netfilter rules for HA ingresses (#15896)	11 months ago
nftables_for_svcs_test.go	util/linuxfw,wgengine/router: add new netfilter rules for HA ingresses (#15896)	11 months ago
nftables_runner.go	util/linuxfw,wgengine/router: add new netfilter rules for HA ingresses (#15896)	11 months ago
nftables_runner_test.go	util/linuxfw: fix delete snat rule (#15763)	12 months ago
nftables_types.go	util/linuxfw: add new arch build constraints	3 years ago