wireguard-monolithic-historical/src, branch master

version: bump snapshot

2019-12-19T00:12:35Z

compat: ipv6_dst_lookup_flow was backported to 5.3 and 5.4

2019-12-19T00:00:39Z

wg-quick: linux: use already configured addresses instead of in-memory

2019-12-17T13:18:09Z

The ADDRESSES array might not have addresses added during PreUp. But moreover, nft(8) and iptables(8) don't like ip addresses in the form somev6prefix::someipv4suffix, such as fd00::1.2.3.4, while ip(8) can handle it. So by adding these first and then asking for them back, we always get normalized addresses suitable for nft(8) and iptables(8). Reported-by: Silvan Nagl

tools: adjust wg.8 syntax for consistency in COMMANDS section

2019-12-13T15:22:19Z

Signed-off-by: Kai Haberzettl

wg-quick: linux: try both iptables(8) and nft(8) on teardown

2019-12-12T16:24:04Z

Daniel argues that technically a package manager could install nft(8) after previously having started wg-quick(8) using iptables(8). Suggested-by: Daniel Kahn Gillmor

version: bump snapshot

2019-12-12T11:24:51Z

main: remove unused include

2019-12-12T11:24:05Z

Remove including that we don't need. Signed-off-by: YueHaibing

wg-quick: linux: support older nft(8)

2019-12-12T11:24:05Z

Older nft(8), such as that on Ubuntu, does not accept the - parameter to the -f argument and doesn't accept symbolic priority names. So instead use the canonical numeric priority forms and use <(echo) instead of -.

global: fix up spelling

2019-12-12T11:24:05Z

Signed-off-by: Josh Soref

wg-quick: linux: add support for nft and prefer it

2019-12-12T11:24:05Z

If nft(8) is installed, use it. These rules should be identical to the iptables-restore(8) ones, with the advantage that cleanup is easy because we use custom table names.