extern/netbird
1
0
Fork 0
mirror of https://github.com/netbirdio/netbird.git synced 2025-06-14 05:47:23 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add env var to force userspace routing if native routing is available

Browse Source
This commit is contained in:
Viktor Liu 2025-01-03 17:59:13 +01:00
parent 0b116b3941
commit eaadb75144
1 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
client/firewall/uspfilter/uspfilter.go
View File

@ -35,6 +35,9 @@ const (
// This is useful when routing/firewall setup is done manually instead of by netbird. // This is useful when routing/firewall setup is done manually instead of by netbird.
// This setting always disables userspace routing and filtering of routed traffic. // This setting always disables userspace routing and filtering of routed traffic.
EnvForceNativeRouter = "NB_FORCE_NATIVE_ROUTER" EnvForceNativeRouter = "NB_FORCE_NATIVE_ROUTER"
// EnvForceUserspaceRouter forces userspace routing even if native routing is available.
EnvForceUserspaceRouter = "NB_FORCE_USERSPACE_ROUTER"
) )
// RuleSet is a set of rules grouped by a string key // RuleSet is a set of rules grouped by a string key
@ -96,7 +99,13 @@ func CreateWithNativeFirewall(iface common.IFaceMapper, nativeFirewall firewall.
mgr.nativeFirewall = nativeFirewall mgr.nativeFirewall = nativeFirewall
if forceUserspaceRouter, _ := strconv.ParseBool(os.Getenv(EnvForceUserspaceRouter)); forceUserspaceRouter {
log.Info("userspace routing is forced")
return mgr, nil
}
forceNativeRouter, _ := strconv.ParseBool(EnvForceNativeRouter) forceNativeRouter, _ := strconv.ParseBool(EnvForceNativeRouter)
// if the OS supports routing natively, or it is explicitly requested, then we don't need to filter/route ourselves // if the OS supports routing natively, or it is explicitly requested, then we don't need to filter/route ourselves
if mgr.nativeFirewall != nil && mgr.nativeFirewall.IsServerRouteSupported() || forceNativeRouter { if mgr.nativeFirewall != nil && mgr.nativeFirewall.IsServerRouteSupported() || forceNativeRouter {
mgr.nativeRouter = true mgr.nativeRouter = true