diff options
| author | KevinLiang10 <37811973+KevinLiang10@users.noreply.github.com> | 2026-03-26 12:36:31 -0400 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2026-03-26 12:36:31 -0400 |
| commit | 45f989f52a769bb51e37bf91d3c4ca64593f52e6 (patch) | |
| tree | aac1db9ff1c47549a34fd57d83a34f5b9ddb53e6 /control/controlhttp/controlhttpserver | |
| parent | b4519e97c3003774c5ae77d46adc4ab0be6a2c71 (diff) | |
| download | tailscale-45f989f52a769bb51e37bf91d3c4ca64593f52e6.tar.xz tailscale-45f989f52a769bb51e37bf91d3c4ca64593f52e6.zip | |
ipn/ipnlocal: warn incompatibility between no-snat-routes and exitnode (#19023)
* ipn/ipnlocal: warn incompatibility between no-snat-routes and exitnode
This commit adds a warning to health check when the --snat-subnet-routes=false flag for subnet router is
set alone side --advertise-exit-node=true. These two would conflict with each other and result internet-bound
traffic from peers using this exit node no masqueraded to the node's source IP and fail to route return
packets back. The described combination is not valid until we figure out a way to separate exitnode masquerade rule and skip it for subnet routes.
Updates #18725
Signed-off-by: KevinLiang10 <37811973+KevinLiang10@users.noreply.github.com>
* use date instead of for now to clarify effectivness
Signed-off-by: KevinLiang10 <37811973+KevinLiang10@users.noreply.github.com>
---------
Signed-off-by: KevinLiang10 <37811973+KevinLiang10@users.noreply.github.com>
Diffstat (limited to 'control/controlhttp/controlhttpserver')
0 files changed, 0 insertions, 0 deletions