diff options
| author | Mike O'Driscoll <mikeo@tailscale.com> | 2026-03-04 14:09:19 -0500 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2026-03-04 14:09:19 -0500 |
| commit | 2c9ffdd188bd53ce43c8389f42594b2a8be6c390 (patch) | |
| tree | 97e8478743e7eb5b83068959880de3c56225a15a /tsnet | |
| parent | 26ef46bf8196f5ab36e94aeeda458dcf65868fcf (diff) | |
| download | tailscale-2c9ffdd188bd53ce43c8389f42594b2a8be6c390.tar.xz tailscale-2c9ffdd188bd53ce43c8389f42594b2a8be6c390.zip | |
cmd/tailscale,ipn,net/netutil: remove rp_filter strict mode warnings (#18863)
PR #18860 adds firewall rules in the mangle table to save outbound packet
marks to conntrack and restore them on reply packets before the routing
decision. When reply packets have their marks restored, the kernel uses
the correct routing table (based on the mark) and the packets pass the
rp_filter check.
This makes the risk check and reverse path filtering warnings unnecessary.
Updates #3310
Fixes tailscale/corp#37846
Signed-off-by: Mike O'Driscoll <mikeo@tailscale.com>
Diffstat (limited to 'tsnet')
| -rw-r--r-- | tsnet/depaware.txt | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/tsnet/depaware.txt b/tsnet/depaware.txt index 8c81aa4d7..b61545d24 100644 --- a/tsnet/depaware.txt +++ b/tsnet/depaware.txt @@ -228,7 +228,7 @@ tailscale.com/tsnet dependencies: (generated by github.com/tailscale/depaware) tailscale.com/feature/syspolicy from tailscale.com/logpolicy tailscale.com/feature/useproxy from tailscale.com/feature/condregister/useproxy tailscale.com/health from tailscale.com/control/controlclient+ - tailscale.com/health/healthmsg from tailscale.com/ipn/ipnlocal+ + tailscale.com/health/healthmsg from tailscale.com/ipn/ipnlocal tailscale.com/hostinfo from tailscale.com/client/web+ tailscale.com/internal/client/tailscale from tailscale.com/tsnet+ tailscale.com/ipn from tailscale.com/client/local+ |