834ac27779
Add comprehensive test file for validating Headscale's ACL engine behavior for subnet routes and exit nodes against documented Tailscale SaaS behavior. Tests cover: - Category A: Subnet route basics (wildcard includes routes, tag-based ACL excludes routes) - Category B: Exit node behavior (exit routes not in SrcIPs) - Category F: Filter placement rules (filters on destination nodes) - Category G: Protocol and port restrictions - Category R: Route coverage rules - Category O: Overlapping routes - Category H: Edge cases (wildcard formats, CGNAT handling) - Category T: Tag resolution (tags resolve to node IPs only) - Category I: IPv6 specific behavior The tests document expected Tailscale SaaS behavior with TODOs marking areas where Headscale currently differs. This provides a baseline for compatibility improvements. |
||
|---|---|---|
| .. | ||
| matcher | ||
| policyutil | ||
| v2 | ||
| pm.go | ||
| policy.go | ||
| policy_autoapprove_test.go | ||
| policy_route_approval_test.go | ||
| policy_test.go | ||
| route_approval_test.go | ||