rsp2k/headscale
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

types: NodeView CanAccess uses internal

Browse source 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
This commit is contained in:
Kristoffer Dalby 2025-11-01 14:27:13 +01:00 • committed by Kristoffer Dalby
parent d7a43a7cf1
commit bd9cf42b96
1 changed files with 2 additions and 18 deletions
Download patch file Download diff file Expand all files Collapse all files

20
hscontrol/types/node.go
View file

@ -698,27 +698,11 @@ func (v NodeView) InIPSet(set *netipx.IPSet) bool {
} }
func (v NodeView) CanAccess(matchers []matcher.Match, node2 NodeView) bool { func (v NodeView) CanAccess(matchers []matcher.Match, node2 NodeView) bool {
if !v.Valid() || !node2.Valid() { if !v.Valid() {
return false return false
} }
src := v.IPs()
allowedIPs := node2.IPs()
for _, matcher := range matchers { return v.ж.CanAccess(matchers, node2.AsStruct())
if !matcher.SrcsContainsIPs(src...) {
continue
}
if matcher.DestsContainsIP(allowedIPs...) {
return true
}
if matcher.DestsOverlapsPrefixes(node2.SubnetRoutes()...) {
return true
}
}
return false
} }
func (v NodeView) CanAccessRoute(matchers []matcher.Match, route netip.Prefix) bool { func (v NodeView) CanAccessRoute(matchers []matcher.Match, route netip.Prefix) bool {