tree 48d376e5efba41091f2a166dc912b3d14f1e9f0b
parent 1df6417a41eac12f37ec1d66cd1bef18a14b81f1
author Hugo Benichi <hugobenichi@google.com> 1607065680 +0900
committer Commit Bot <commit-bot@chromium.org> 1607998096 +0000

patchpanel: implement traffic tagging for ConnectNamespace

This patch adds fwmark tagging to traffic from network namespaces
configured with the patchpanel ConnectNamespace DBus API. Both the
source tag and the routing tag are added.

The ConnectNamespace implementation has now 3 distinct routing mode:
 - tracking default physical network (previously only available mode),
 - tracking default logical network, physical or VPN,
 - tracking a specific physical network, a-la ARC.

BUG=b:174811524
BUG=b:161508179
BUG=chromium:1156894
TEST=unit tests. $ tast run <DUT_ip> network.TestProxyServer, checked
rules set in iptables -t mangle -L PREROUTING and -L POSTROUTING.

Change-Id: I10d9ea2da6e206f8f2d5270df8680d4351818a97
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform2/+/2574147
Tested-by: Hugo Benichi <hugobenichi@google.com>
Commit-Queue: Hugo Benichi <hugobenichi@google.com>
Reviewed-by: Garrick Evans <garrick@chromium.org>