3 Commits

Author	SHA1	Message	Date
Kristoffer Dalby	044f3fc0ec	policy/policyutil: exclude exit routes from ReduceFilterRules ... Exit nodes handle traffic via AllowedIPs/routing, not packet filter rules. Skip exit routes (0.0.0.0/0, ::/0) when checking RoutableIPs overlap in ReduceFilterRules, matching Tailscale SaaS behavior where exit nodes do not receive filter rules for destinations that only overlap via exit routes. Updates #2180	2026-03-25 15:17:23 +00:00
Kristoffer Dalby	ce580f8245	all: fix golangci-lint issues (#3064)	2026-02-06 21:45:32 +01:00
Kristoffer Dalby	2bf1200483	policy: fix autogroup:self propagation and optimize cache invalidation (#2807)	2025-10-23 17:57:41 +02:00