// ACL-C05 // // ACL: accept: src=['*'] dst=['tag:server:22', 'tag:prod:5432', 'tag:client:80', 'tag:router:*', 'tag:exit:*', 'autogroup:member:443', 'autogroup:self:*'] // // Expected: Rules on 8 of 8 nodes { "test_id": "ACL-C05", "input": { "full_policy": { "groups": { "group:admins": [ "kratail2tid@passkey" ], "group:developers": [ "kristoffer@dalby.cc", "kratail2tid@passkey" ], "group:monitors": [ "monitorpasskeykradalby@passkey" ], "group:empty": [] }, "tagOwners": { "tag:server": [ "kratail2tid@passkey" ], "tag:prod": [ "kratail2tid@passkey" ], "tag:client": [ "kratail2tid@passkey" ], "tag:router": [ "kratail2tid@passkey" ], "tag:exit": [ "kratail2tid@passkey" ] }, "hosts": { "webserver": "100.108.74.26", "prodbox": "100.103.8.15", "internal": "10.0.0.0/8", "subnet24": "192.168.1.0/24" }, "autoApprovers": { "routes": { "10.33.0.0/16": [ "tag:router" ], "0.0.0.0/0": [ "tag:exit" ], "::/0": [ "tag:exit" ] } }, "acls": [ { "action": "accept", "src": [ "*" ], "dst": [ "tag:server:22", "tag:prod:5432", "tag:client:80", "tag:router:*", "tag:exit:*", "autogroup:member:443", "autogroup:self:*" ] } ] } }, "captures": { "exit-node": { "packet_filter_rules": [ { "SrcIPs": [ "10.33.0.0/16", "100.115.94.0-100.127.255.255", "100.64.0.0-100.115.91.255", "fd7a:115c:a1e0::/48" ], "DstPorts": [ { "IP": "100.85.66.106", "Ports": { "First": 0, "Last": 65535 } }, { "IP": "fd7a:115c:a1e0::7c37:426a", "Ports": { "First": 0, "Last": 65535 } } ] } ] }, "subnet-router": { "packet_filter_rules": [ { "SrcIPs": [ "10.33.0.0/16", "100.115.94.0-100.127.255.255", "100.64.0.0-100.115.91.255", "fd7a:115c:a1e0::/48" ], "DstPorts": [ { "IP": "100.92.142.61", "Ports": { "First": 0, "Last": 65535 } }, { "IP": "fd7a:115c:a1e0::3e37:8e3d", "Ports": { "First": 0, "Last": 65535 } } ] } ] }, "tagged-client": { "packet_filter_rules": [ { "SrcIPs": [ "10.33.0.0/16", "100.115.94.0-100.127.255.255", "100.64.0.0-100.115.91.255", "fd7a:115c:a1e0::/48" ], "DstPorts": [ { "IP": "100.83.200.69", "Ports": { "First": 80, "Last": 80 } }, { "IP": "fd7a:115c:a1e0::c537:c845", "Ports": { "First": 80, "Last": 80 } } ] } ] }, "tagged-prod": { "packet_filter_rules": [ { "SrcIPs": [ "10.33.0.0/16", "100.115.94.0-100.127.255.255", "100.64.0.0-100.115.91.255", "fd7a:115c:a1e0::/48" ], "DstPorts": [ { "IP": "100.103.8.15", "Ports": { "First": 5432, "Last": 5432 } }, { "IP": "fd7a:115c:a1e0::5b37:80f", "Ports": { "First": 5432, "Last": 5432 } } ] } ] }, "tagged-server": { "packet_filter_rules": [ { "SrcIPs": [ "10.33.0.0/16", "100.115.94.0-100.127.255.255", "100.64.0.0-100.115.91.255", "fd7a:115c:a1e0::/48" ], "DstPorts": [ { "IP": "100.108.74.26", "Ports": { "First": 22, "Last": 22 } }, { "IP": "fd7a:115c:a1e0::b901:4a87", "Ports": { "First": 22, "Last": 22 } } ] } ] }, "user-kris": { "packet_filter_rules": [ { "SrcIPs": [ "10.33.0.0/16", "100.115.94.0-100.127.255.255", "100.64.0.0-100.115.91.255", "fd7a:115c:a1e0::/48" ], "DstPorts": [ { "IP": "100.110.121.96", "Ports": { "First": 443, "Last": 443 } }, { "IP": "fd7a:115c:a1e0::1737:7960", "Ports": { "First": 443, "Last": 443 } } ] }, { "SrcIPs": [ "100.110.121.96", "fd7a:115c:a1e0::1737:7960" ], "DstPorts": [ { "IP": "100.110.121.96", "Ports": { "First": 0, "Last": 65535 } }, { "IP": "fd7a:115c:a1e0::1737:7960", "Ports": { "First": 0, "Last": 65535 } } ] } ] }, "user-mon": { "packet_filter_rules": [ { "SrcIPs": [ "10.33.0.0/16", "100.115.94.0-100.127.255.255", "100.64.0.0-100.115.91.255", "fd7a:115c:a1e0::/48" ], "DstPorts": [ { "IP": "100.103.90.82", "Ports": { "First": 443, "Last": 443 } }, { "IP": "fd7a:115c:a1e0::9e37:5a52", "Ports": { "First": 443, "Last": 443 } } ] }, { "SrcIPs": [ "100.103.90.82", "fd7a:115c:a1e0::9e37:5a52" ], "DstPorts": [ { "IP": "100.103.90.82", "Ports": { "First": 0, "Last": 65535 } }, { "IP": "fd7a:115c:a1e0::9e37:5a52", "Ports": { "First": 0, "Last": 65535 } } ] } ] }, "user1": { "packet_filter_rules": [ { "SrcIPs": [ "10.33.0.0/16", "100.115.94.0-100.127.255.255", "100.64.0.0-100.115.91.255", "fd7a:115c:a1e0::/48" ], "DstPorts": [ { "IP": "100.90.199.68", "Ports": { "First": 443, "Last": 443 } }, { "IP": "fd7a:115c:a1e0::2d01:c747", "Ports": { "First": 443, "Last": 443 } } ] }, { "SrcIPs": [ "100.90.199.68", "fd7a:115c:a1e0::2d01:c747" ], "DstPorts": [ { "IP": "100.90.199.68", "Ports": { "First": 0, "Last": 65535 } }, { "IP": "fd7a:115c:a1e0::2d01:c747", "Ports": { "First": 0, "Last": 65535 } } ] } ] } } }