rsp2k/headscale
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
headscale/hscontrol/policy/v2
History
Kristoffer Dalby 8baa14ef4a policy: use CGNAT/ULA ranges for wildcard resolution 
Change Asterix.Resolve() to use Tailscale's CGNAT range (100.64.0.0/10)
and ULA range (fd7a:115c:a1e0::/48) instead of all IPs (0.0.0.0/0 and
::/0).
This better matches Tailscale's security model where wildcard (*) means
"any node in the tailnet" rather than literally "any IP address on the
internet".
Updates #3036

Updates #3036
2026-02-05 19:29:16 +01:00
..
filter.go policy/v2: add Caller() to log statements in compileACLWithAutogroupSelf 2026-02-03 16:53:15 +01:00
filter_test.go policy: use CGNAT/ULA ranges for wildcard resolution 2026-02-05 19:29:16 +01:00
policy.go policy/v2: add IsTagged() guards to prevent panics on tagged nodes 2026-02-03 16:53:15 +01:00
policy_test.go policy/v2: add test for issue #2990 same-user tagged device 2026-02-03 16:53:15 +01:00
tailscale_compat_test.go policy: use CGNAT/ULA ranges for wildcard resolution 2026-02-05 19:29:16 +01:00
types.go policy: use CGNAT/ULA ranges for wildcard resolution 2026-02-05 19:29:16 +01:00
types_test.go policy: use CGNAT/ULA ranges for wildcard resolution 2026-02-05 19:29:16 +01:00
utils.go modernize: run gopls modernize to bring up to 1.25 (#2920) 2025-12-01 19:40:25 +01:00
utils_test.go integration: replace time.Sleep with assert.EventuallyWithT (#2680) 2025-07-10 23:38:55 +02:00