mirror of
https://github.com/slackhq/nebula.git
synced 2026-11-15 16:36:52 +01:00
Caleb JasikandNate Brown
e20569ce51
newTunFromFd was a stub on darwin, so an embedder handed a utun by the OS had no way to use it. A darwin network extension is given exactly that: NEPacketTunnelProvider creates the device and applies addressing, mtu and routes from its network settings, and a sandboxed extension cannot change them afterwards. Adopting that fd means everything about moving packets is shared with newTun and only the setup differs, so the tun tracks whether the host owns it and leaves the system routing table and interface config alone when it does. Co-authored-by: Nate Brown <nbrown.us@gmail.com>