Skip to content

netns,wgengine: add OpenBSD support to netns via an rtable#18784

Merged
bradfitz merged 1 commit intotailscale:mainfrom
jcs:netns-openbsd-rtable
Feb 25, 2026
Merged

netns,wgengine: add OpenBSD support to netns via an rtable#18784
bradfitz merged 1 commit intotailscale:mainfrom
jcs:netns-openbsd-rtable

Conversation

@jcs
Copy link
Copy Markdown
Contributor

@jcs jcs commented Feb 22, 2026

When an exit node has been set and a new default route is added, create a new rtable in the default rdomain and add the current default route via its physical interface. When control() is requesting a connection not go through the exit-node default route, we can use the SO_RTABLE socket option to force it through the new rtable we created.

Updates #17321

When an exit node has been set and a new default route is added,
create a new rtable in the default rdomain and add the current
default route via its physical interface.  When control() is
requesting a connection not go through the exit-node default route,
we can use the SO_RTABLE socket option to force it through the new
rtable we created.

Updates tailscale#17321

Signed-off-by: joshua stein <[email protected]>
@jcs jcs force-pushed the netns-openbsd-rtable branch from 1799b59 to e3f46a9 Compare February 23, 2026 16:09
Copy link
Copy Markdown
Member

@bradfitz bradfitz left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm no OpenBSD expert, but looks plausible! And looks like it doesn't affect any other platforms at least, so LGTM.

@bradfitz bradfitz merged commit 518d241 into tailscale:main Feb 25, 2026
108 of 111 checks passed
@paigeadelethompson
Copy link
Copy Markdown

do you by any chance know if tailscale already supports fib / tunnelfib, also with rdomain there's also tunnelrdomain for tunnel interfaces if it could support that too that would really be nice

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants