Kristoffer Dalby 8baa14ef4a policy: use CGNAT/ULA ranges for wildcard resolution ... Change Asterix.Resolve() to use Tailscale's CGNAT range (100.64.0.0/10) and ULA range (fd7a:115c:a1e0::/48) instead of all IPs (0.0.0.0/0 and ::/0). This better matches Tailscale's security model where wildcard (*) means "any node in the tailnet" rather than literally "any IP address on the internet". Updates #3036 Updates #3036		2026-02-05 19:29:16 +01:00
..
matcher	matcher: Add func for comparing Dests and TheInternet	2025-11-02 13:19:59 +01:00
policyutil	policy: add ICMP protocols to default and export constants	2026-02-05 19:29:16 +01:00
v2	policy: use CGNAT/ULA ranges for wildcard resolution	2026-02-05 19:29:16 +01:00
pm.go	tags: process tags on registration, simplify policy (#2931)	2025-12-08 18:51:07 +01:00
policy.go	policy: fix autogroup:self propagation and optimize cache invalidation (#2807)	2025-10-23 17:57:41 +02:00
policy_autoapprove_test.go	make tags first class node owner (#2885)	2025-12-02 12:01:25 +01:00
policy_route_approval_test.go	make tags first class node owner (#2885)	2025-12-02 12:01:25 +01:00
policy_test.go	policy: update tests for SSH validation rules	2026-01-21 17:01:30 +00:00
route_approval_test.go	policy: add test to confirm group cant approve tag	2025-12-17 09:32:05 +01:00