Kristoffer Dalby 835b7eb960 policy: autogroup:internet does not generate packet filters ... According to Tailscale SaaS behavior, autogroup:internet is handled by exit node routing via AllowedIPs, not by packet filtering. ACL rules with autogroup:internet as destination should produce no filter rules for any node. Previously, Headscale expanded autogroup:internet to public CIDR ranges and distributed filters to exit nodes (because 0.0.0.0/0 "covers" internet destinations). This was incorrect. Add detection for AutoGroupInternet in filter compilation to skip filter generation for this autogroup. Update test expectations accordingly.		2026-02-05 19:29:16 +01:00
..
reduce.go	policy: fix autogroup:self propagation and optimize cache invalidation (#2807)	2025-10-23 17:57:41 +02:00
reduce_test.go	policy: autogroup:internet does not generate packet filters	2026-02-05 19:29:16 +01:00