novox/mesh-controller
3
0
Fork 0
Code Issues Pull Requests 3 Releases Wiki Activity

The hub relays the mesh passing through it (hq issue 196) #209

Merged
mesh-admin merged 1 commits from jschoubben/the-hub-relays-the-mesh AGit into main 2026-10-02 09:17:18 +00:00
Conversation 0 Commits 1 Files Changed 2
+43
jschoubben commented 2026-10-02 09:17:10 +00:00
Owner
Copy Link
Copy Source

The forward chain had no rule for traffic entering and leaving on the tunnel, so a packet relayed by the hub between two machines behind it was judged by the hub's own published ports (matched on original destination port). Two home machines reached a third on 17 of 55 ports, exactly the hub's own. Adds one rule: iifname tunnel oifname tunnel accept. The destination filters it; the hub's own ports and containers are unaffected (input chain, bridges). Test: the rule is in the forward chain only, absent with no tunnel; fails without the fix. The rendered set passes nft -c. go test ./... passes.

The forward chain had no rule for traffic entering and leaving on the tunnel, so a packet relayed by the hub between two machines behind it was judged by the hub's own published ports (matched on original destination port). Two home machines reached a third on 17 of 55 ports, exactly the hub's own. Adds one rule: iifname tunnel oifname tunnel accept. The destination filters it; the hub's own ports and containers are unaffected (input chain, bridges). Test: the rule is in the forward chain only, absent with no tunnel; fails without the fix. The rendered set passes nft -c. go test ./... passes.
jschoubben added 1 commit 2026-10-02 09:17:10 +00:00
The hub relays the mesh passing through it e8e707e013 
The forward chain judged a packet relayed from one machine of the mesh
to another by this machine's own published ports, so two machines behind
the hub reached each other only on ports the hub published for itself
(novox/hq issue 196). In and out on the tunnel is now accepted, and the
machine it is for filters it.
mesh-admin merged commit c9204591bf into main 2026-10-02 09:17:18 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Assignees
Clear assignees
jschoubben miel.truyen
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: novox/mesh-controller#209