1
0
mirror of https://github.com/juanfont/headscale.git synced 2025-11-10 01:20:58 +01:00
juanfont.headscale/hscontrol/types
Kristoffer Dalby 2024219bd1 types: Distinguish subnet and exit node access
When we fixed the issue of node visibility of nodes
that only had access to eachother because of a subnet
route, we gave all nodes access to all exit routes by
accident.

This commit splits exit nodes and subnet routes in the
access.

If a matcher indicates that the node should have access to
any part of the subnet routes, we do not remove it from the
node list.

If a matcher destination is equal to the internet, and the
target node is an exit node, we also do not remove the access.

Fixes #2784
Fixes #2788

Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
2025-11-02 13:19:59 +01:00
..
change mapper: send change instead of full update (#2775) 2025-09-17 14:23:21 +02:00
testdata
api_key.go
common_test.go
common.go fix: return valid AuthUrl in followup request on expired reg id 2025-10-11 05:57:39 +02:00
config_test.go
config.go policy: fix autogroup:self propagation and optimize cache invalidation (#2807) 2025-10-23 17:57:41 +02:00
const.go
node_test.go policy: fix autogroup:self propagation and optimize cache invalidation (#2807) 2025-10-23 17:57:41 +02:00
node.go types: Distinguish subnet and exit node access 2025-11-02 13:19:59 +01:00
policy.go
preauth_key_test.go
preauth_key.go lint and leftover 2025-09-09 09:40:00 +02:00
routes.go
types_clone.go
types_view.go
users_test.go
users.go stability and race conditions in auth and node store (#2781) 2025-10-16 12:17:43 +02:00
version.go cli: use gobuild version handling (#2770) 2025-09-12 11:47:31 +02:00