Jelajahi Sumber

pkg/mesh/mesh.go: iptables rules in encapsulation

Because of new naming conventions for locations, the CIDRs were not
being set within locations.
This lead to no iptables rules added for nodes in the same location.
leonnicolas 5 tahun lalu
induk
melakukan
52d8d13047
1 mengubah file dengan 4 tambahan dan 1 penghapusan
  1. 4 1
      pkg/mesh/mesh.go

+ 4 - 1
pkg/mesh/mesh.go

@@ -490,7 +490,10 @@ func (m *Mesh) applyTopology() {
 	if m.enc.Strategy() != encapsulation.Never && m.local {
 		var cidrs []*net.IPNet
 		for _, s := range t.segments {
-			if s.location == nodes[m.hostname].Location {
+			// If the location prefix is not logicalLocation, but nodeLocation,
+			// we don't need to set any extra rules for encapsulation anyways
+			// because traffic will go over WireGuard.
+			if s.location == logicalLocationPrefix+nodes[m.hostname].Location {
 				for i := range s.privateIPs {
 					cidrs = append(cidrs, oneAddressCIDR(s.privateIPs[i]))
 				}