From 894b37b4f3e6845f9e28c64fb2dca8348c4de25b Mon Sep 17 00:00:00 2001
From: gVisor bot <gvisor-bot@google.com>
Date: Tue, 4 Oct 2022 22:16:03 +0800
Subject: [PATCH] chore: add description

---
 tunnel/tunnel.go | 1 +
 1 file changed, 1 insertion(+)

diff --git a/tunnel/tunnel.go b/tunnel/tunnel.go
index aec6da01..92615900 100644
--- a/tunnel/tunnel.go
+++ b/tunnel/tunnel.go
@@ -416,6 +416,7 @@ func match(metadata *C.Metadata) (C.Proxy, C.Rule, error) {
 				continue
 			}
 
+			// only unwrap one group, multi-layer nesting will be invalid
 			if adapter.Type() == C.Pass || (adapter.Unwrap(metadata) != nil && adapter.Unwrap(metadata).Type() == C.Pass) {
 				log.Debugln("%s match Pass rule", adapter.Name())
 				continue