package matcher import ( "net/netip" "github.com/juanfont/headscale/hscontrol/util" "go4.org/netipx" "tailscale.com/tailcfg" ) type Match struct { srcs *netipx.IPSet dests *netipx.IPSet } func MatchFromFilterRule(rule tailcfg.FilterRule) Match { dests := []string{} for _, dest := range rule.DstPorts { dests = append(dests, dest.IP) } return MatchFromStrings(rule.SrcIPs, dests) } func MatchFromStrings(sources, destinations []string) Match { srcs := new(netipx.IPSetBuilder) dests := new(netipx.IPSetBuilder) for _, srcIP := range sources { set, _ := util.ParseIPSet(srcIP, nil) srcs.AddSet(set) } for _, dest := range destinations { set, _ := util.ParseIPSet(dest, nil) dests.AddSet(set) } srcsSet, _ := srcs.IPSet() destsSet, _ := dests.IPSet() match := Match{ srcs: srcsSet, dests: destsSet, } return match } func (m *Match) SrcsContainsIPs(ips ...netip.Addr) bool { for _, ip := range ips { if m.srcs.Contains(ip) { return true } } return false } func (m *Match) DestsContainsIP(ips ...netip.Addr) bool { for _, ip := range ips { if m.dests.Contains(ip) { return true } } return false } func (m *Match) SrcsOverlapsPrefixes(prefixes ...netip.Prefix) bool { for _, prefix := range prefixes { if m.srcs.ContainsPrefix(prefix) { return true } } return false } func (m *Match) DestsOverlapsPrefixes(prefixes ...netip.Prefix) bool { for _, prefix := range prefixes { if m.dests.ContainsPrefix(prefix) { return true } } return false }