Commit graph

58 commits

Author SHA1 Message Date
kayos@tcp.direct
e878e4820a
Fixes+Chores: avoid de-referencing nil ptrs + lint
- Avoid referencing conditions we know are false/true

 - Avoid using name of imported package as variable

 - Avoid broken (see list item 1) if else statement in `ipservice.go` by refactoring to switch statement

 - When assigning a pointer value to a variable along with an error, check that error before referencing that pointer. Thus avoiding de-referencing a nil and causing a panic.
  *** This item is the most important ***

 - Standard gofmt package sorting + linting; This includes fixing comment starts for go doc

 - Explicit non-handling of unhandled errors where appropriate (assigning errs to _ to reduce linter screaming)

 - Export ErrExpired in `netcache` package so that we can properly reference it using `errors.Is` instead of using `strings.Contains` against an `error.Error()` value
2022-12-06 20:11:20 -08:00
dcarns
42ffa2be32
Merge pull request #1672 from tt2468/bugfix_v0.16.1_ingress-egress-error
Fix netclient breaking when both ingress and egress modes are enabled
2022-11-04 10:00:39 -04:00
tt2468
b38061480e
Add missing line ending in ingress postUp command
Adds a missing line ending in the postUp masquerade command. This missing line is sneaky, and only seems to pose an issue when both ingress and egress modes are enabled.
2022-10-18 22:56:42 -07:00
Matthew R. Kasun
e65d1cf600 maintain server listen port on failover/ingress deletion 2022-10-17 11:04:17 -04:00
Matthew R. Kasun
fa2ad00de9 add check to create egress as well 2022-10-05 13:49:15 -04:00
Matthew R. Kasun
643714799e ipv6 ingress not supported on server 2022-10-05 13:30:27 -04:00
Alex Feiszli
c46ddeddc7
Merge pull request #1607 from gravitl/bugfix_v0.16.1_ingress-egress
Bugfix v0.16.1 ingress egress
2022-10-03 09:06:25 -04:00
afeiszli
c8672818fe adding resets and single peer update on metrics disconnect detections 2022-09-29 14:49:44 -04:00
0xdcarns
f2606dd3cb addressed PR comments 2022-09-29 09:49:06 -04:00
0xdcarns
eb75a6829c added wipe failover cases and ceased node update on metrics update 2022-09-28 16:17:49 -04:00
0xdcarns
b95f3eb846 initial PoC completed 2022-09-28 14:59:21 -04:00
0xdcarns
75fc15ac4c commented out logic 2022-09-28 13:05:41 -04:00
afeiszli
78bacce528 add ability to reset failover 2022-09-27 14:42:14 -04:00
afeiszli
54258bcbac add ability to set failover nodes 2022-09-27 14:04:28 -04:00
Matthew R. Kasun
24f78b172e eliminate extra ; when creating ingress followed by egress 2022-09-26 14:05:51 -04:00
afeiszli
1723f57035 fixing flags and config 2022-09-20 11:50:15 -04:00
Matthew R. Kasun
f47d89ef62 remove unnecessary nft rule 2022-09-13 13:56:47 -04:00
Matthew R. Kasun
e4761ef21b add check in nft rules for dual stack internet gateway 2022-09-12 15:11:19 -04:00
Matthew R Kasun
d8bcf33701
Merge branch 'develop' into feature_v0.15.1_normalize_networks 2022-09-07 06:57:14 -04:00
Matthew R. Kasun
e2b50d9a0f ipv6 rules - case 2022-09-06 10:37:49 -04:00
Matthew R. Kasun
e364423beb return error 2022-09-06 07:03:21 -04:00
Matthew R. Kasun
6b42cbe120 normalize cidr on network/egress gateway creation 2022-09-03 08:55:49 -04:00
Matthew R. Kasun
24cbaaa50b fix case for iptables rules 2022-09-03 08:41:38 -04:00
Matthew R. Kasun
dd7945bb5c fix postup/postdown for dualstack 2022-09-02 16:33:48 -04:00
Matthew R. Kasun
9ac0bdc41d fix ingress rules 2022-09-02 11:31:17 -04:00
Matthew R. Kasun
ecc9ef5aac clean up nft rules 2022-09-02 11:01:19 -04:00
Matthew R. Kasun
16959f395a ipv6 nat 2022-09-02 09:25:17 -04:00
Matthew R. Kasun
ea3a1933e1 add ip6table rules for gateways 2022-09-01 08:10:49 -04:00
Matthew R. Kasun
0d00e8289f fix nft rules for internet gateway 2022-08-25 14:55:03 -04:00
Matthew R. Kasun
ed7e263fb1 fix parsing postup/postdown 2022-08-25 09:38:36 -04:00
Matthew R. Kasun
b7ea52c3b2 fix ; spacing on postup/postdown 2022-08-25 08:35:48 -04:00
Matthew R. Kasun
5240da222a freebsd saving post up/post down command to conf file 2022-08-25 06:59:12 -04:00
Matthew R. Kasun
f536f0465c check firewall type on gateway creation 2022-08-19 15:32:25 -04:00
Matthew R Kasun
d7384b6a81
Merge pull request #1462 from gravitl/refactor_v0.14.7_unnecessary_code
remove func NetworkNodesUpdatePullChanges
2022-08-18 15:51:01 -04:00
Matthew R. Kasun
3a1dd8dc1e remove func NetworkNodesUpdatePullChanges 2022-08-18 04:49:35 -04:00
Matthew R. Kasun
e3c1189008 flush tables vice delete rules for nft 2022-08-18 04:20:23 -04:00
cameronts
e190bff807 Fix failing test. 2022-08-07 20:28:10 -07:00
cameronts
a6660bb377 Pull firewall command building to separate functions for easier maintenance/reuse. Change DeleteIngressGateway's approach to preserving the egress gateway (if present). 2022-08-07 19:22:54 -07:00
cameronts
aeca559a8a Update code handling of firewall commands and add more logging. 2022-08-06 15:00:20 -07:00
cameronts
9f92b20a15 Added chain creation for nftables. 2022-08-05 05:07:00 -07:00
cameronts
7c2fce3a55 Change to expandable switch-based firewall detection. 2022-08-03 12:18:04 -07:00
cameronts
eab23b7022 Modified ingress deletion handling to preserve egress gateway if present. Removed ingress from FreeBSD as not supported. 2022-08-03 11:36:16 -07:00
cameronts
e6d7c95669 Add netclient detection of nftables. 2022-08-02 15:01:45 -07:00
cameronts
1b01914c52 Added logging for nftables handling. 2022-08-01 15:52:49 -07:00
cameronts
81c896b22a Add nftables support. 2022-08-01 11:12:25 -07:00
Mathias Neerup
0b4aca18db Make NatEnabled string instead of boolean + add tests 2022-07-20 13:01:28 +02:00
Mathias Neerup
f9666c0a66 Add option to select if source NATing should be enabled or not 2022-07-19 16:28:44 +02:00
Scott Ullrich
360a13312a
Update gateway.go
* Add support for FreeBSD egress
* Make Post up and down commands a bit more readable
2022-05-08 13:37:22 -04:00
afeiszli
3bd4be258f fix gateway error 2022-03-07 14:48:56 -05:00
Schemen
dbe5336a8e Add accept iptables rule for out interface 2022-03-03 11:58:17 +01:00