diff options
| author | Naman Sood <mail@nsood.in> | 2026-04-14 16:45:06 -0400 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2026-04-14 16:45:06 -0400 |
| commit | 6301a6ce4b7b98fcf76d673b2ed74d156d4fc48a (patch) | |
| tree | ce7f4a2435af06de2e13fe3890454e750379bf14 /control/controlhttp/controlhttpserver | |
| parent | 583405826945af224506aadda1e4a4656faf82d5 (diff) | |
| download | tailscale-6301a6ce4b7b98fcf76d673b2ed74d156d4fc48a.tar.xz tailscale-6301a6ce4b7b98fcf76d673b2ed74d156d4fc48a.zip | |
util/linuxfw,wgengine/router: allow incoming CGNAT range traffic with nodeattr
Clients with the newly added node attribute
`"disable-linux-cgnat-drop-rule"` will not automatically drop inbound
traffic on non-Tailscale network interfaces with the source IP in the
CGNAT IP range. This is an initial proof-of-concept for enabling
connectivity with off-Tailnet CGNAT endpoints.
Fixes tailscale/corp#36270.
Signed-off-by: Naman Sood <mail@nsood.in>
Diffstat (limited to 'control/controlhttp/controlhttpserver')
0 files changed, 0 insertions, 0 deletions