834ac27779
Add comprehensive test file for validating Headscale's ACL engine behavior for subnet routes and exit nodes against documented Tailscale SaaS behavior. Tests cover: - Category A: Subnet route basics (wildcard includes routes, tag-based ACL excludes routes) - Category B: Exit node behavior (exit routes not in SrcIPs) - Category F: Filter placement rules (filters on destination nodes) - Category G: Protocol and port restrictions - Category R: Route coverage rules - Category O: Overlapping routes - Category H: Edge cases (wildcard formats, CGNAT handling) - Category T: Tag resolution (tags resolve to node IPs only) - Category I: IPv6 specific behavior The tests document expected Tailscale SaaS behavior with TODOs marking areas where Headscale currently differs. This provides a baseline for compatibility improvements. |
||
|---|---|---|
| .. | ||
| filter.go | ||
| filter_test.go | ||
| policy.go | ||
| policy_test.go | ||
| tailscale_compat_test.go | ||
| tailscale_routes_compat_test.go | ||
| types.go | ||
| types_test.go | ||
| utils.go | ||
| utils_test.go | ||