Skip to content

[fix] windows reload should check via#1166

Open
sohunjug wants to merge 3 commits intoslackhq:masterfrom
sohunjug:master
Open

[fix] windows reload should check via#1166
sohunjug wants to merge 3 commits intoslackhq:masterfrom
sohunjug:master

Conversation

@sohunjug
Copy link

When using this library for secondary development as a dependency, or when invoking a reload through sshd, if you modify unsafe_route corresponding to via, please delete the old information.

@salesforce-cla
Copy link

Thanks for the contribution! Before we can merge this, we need @sohunjug to sign the Salesforce Inc. Contributor License Agreement.

@wadey
Copy link
Member

wadey commented Jun 17, 2024

Line 26 a at the top of this method says:

// Via is ignored since that is only consumed within nebula itself

So is that comment incorrect?

@sohunjug
Copy link
Author

Line 26 a at the top of this method says:

// Via is ignored since that is only consumed within nebula itself

So is that comment incorrect?

windows

route print

when i want change unsafe_route: via, reload will create multi routes with different via

@wadey wadey added the NeedsDecision Feedback is required from experts, contributors, and/or the community before a change can be made. label Jun 24, 2024
@nbrownus nbrownus closed this Oct 2, 2025
@nbrownus nbrownus reopened this Oct 2, 2025
@nbrownus
Copy link
Collaborator

nbrownus commented Oct 2, 2025

Digging into the situation here, Windows is treated differently than the other operating systems and I'm not sure there is a good reason for it. The destination for the route is recorded as the Via instead of the nebula tun device which leads to duplicated routes when the Via for an unsafe_route changes and nebula is reloaded.

The ideal fix here would be have windows install the route destination as the nebula tun device instead, which would match the other OSs behavior in silently erroring on installing a duplicate route, unless Windows is happy to add the duplicate route, in which case I would prefer we add a specific check for Windows only on equating Via.

In the end I suspect this is largely a vanity issue since nebula still needs to internally determine the unsafe router for a packet outside its own vpn networks.

@nbrownus nbrownus added this to the v1.10.0 milestone Oct 2, 2025
@nbrownus nbrownus modified the milestones: v1.10.0, backlog Nov 17, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

cla:signed NeedsDecision Feedback is required from experts, contributors, and/or the community before a change can be made.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants