KKRainbow ed8df2d58f prevent EasyTier-managed IPv6 from being used as underlay connections (#2181) ...

When a node has public IPv6 addresses allocated by EasyTier, those addresses
are installed on the host's network interfaces. The system would then pick
them up as candidate source/destination addresses for underlay connections
(direct peer, UDP hole punch, bind addresses), causing overlay traffic to
loop back into the overlay itself.

Add a central predicate is_ip_easytier_managed_ipv6() and apply it at every
point where IPv6 addresses are selected for underlay use:
- Filter managed IPv6 from DNS-resolved connector addresses, including a
  UDP socket getsockname check to detect whether the OS would route through
  the overlay to reach a destination
- Skip managed IPv6 in bind address selection and STUN candidate filtering
- Strip managed IPv6 from GetIpListResponse RPC so peers never learn them
- Pass pre-resolved addresses to tunnel connectors to avoid re-resolution

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-04-29 12:17:22 +08:00

..

udp_hole_punch

prevent EasyTier-managed IPv6 from being used as underlay connections (#2181)

2026-04-29 12:17:22 +08:00

direct.rs

prevent EasyTier-managed IPv6 from being used as underlay connections (#2181)

2026-04-29 12:17:22 +08:00

dns_connector.rs

chore: update Rust to 2024 edition (#2066)

2026-04-10 00:22:12 +08:00

http_connector.rs

chore: update Rust to 2024 edition (#2066)

2026-04-10 00:22:12 +08:00

manual.rs

chore: update Rust to 2024 edition (#2066)

2026-04-10 00:22:12 +08:00

mod.rs

prevent EasyTier-managed IPv6 from being used as underlay connections (#2181)

2026-04-29 12:17:22 +08:00

tcp_hole_punch.rs

feat: add upnp support (#1449)

2026-04-21 17:19:04 +08:00