tailscale/net
Avery Pennarun e7ae6a2e06 net/netns, wgengine/router: support Linux machines that don't have 'ip rule'.
We'll use SO_BINDTODEVICE instead of fancy policy routing. This has
some limitations: for example, we will route all traffic through the
interface that has the main "default" (0.0.0.0/0) route, so machines
that have multiple physical interfaces might have to go through DERP to
get to some peers. But machines with multiple physical interfaces are
very likely to have policy routing (ip rule) support anyway.

So far, the only OS I know of that needs this feature is ChromeOS
(crostini). Fixes #245.

Signed-off-by: Avery Pennarun <apenwarr@tailscale.com>
2020-05-31 04:31:01 -04:00
..
dnscache net/dnscache: remove unnecessary lint warning. 2020-04-30 20:31:44 -07:00
interfaces Make netcheck handle v6-only interfaces better, faster. 2020-05-28 10:04:20 -07:00
netcheck net/netcheck: fix HTTPS fallback bug from earlier today 2020-05-29 22:33:08 -07:00
netns net/netns, wgengine/router: support Linux machines that don't have 'ip rule'. 2020-05-31 04:31:01 -04:00
nettest scripts: add a license header checker. 2020-03-17 21:34:44 -07:00
stun stun, netcheck: move under net 2020-05-25 09:18:24 -07:00
tlsdial net/tlsdial: update package doc to say it's now somewhat useless 2020-04-27 08:17:18 -07:00