starred/headscale
1
0
Fork 0
mirror of https://github.com/juanfont/headscale.git synced 2026-01-12 04:10:32 +01:00
Code Issues 98 Packages Projects Releases 10 Wiki Activity

IPv6 exit node ACL not working #445

New Issue
Closed
opened 2025-12-29 01:29:28 +01:00 by adam · 5 comments
adam commented 2025-12-29 01:29:28 +01:00
Owner
Copy Link

Originally created by @fuomag9 on GitHub (Mar 22, 2023).

Bug description

Is ipv6 exit node with ACL possible? As the ACL below makes ipv4 work but ipv6 does not, and I see this in the logs, which does not seem correct:

Mar 21 20:41:49 headscale headscale[7944]: 2023-03-21T20:41:49+01:00 WRN No IPs found with the alias all6

On discord it was suggested to use [::]/0 but that did not work as well and outputted the same log

To Reproduce

Create an exit node and use the following ACL

{
  "groups": {
    "group:admin": ["fuomag9"]
  },
"Hosts": {
        "all6":  "::/0",
    },
  "acls": [
   { "action": "accept", "src": ["group:admin"], "dst": ["group:admin:*"] },
   {"action": "accept", "src": ["group:admin"], "dst": ["0.0.0.0/0:*"]},
   {"action": "accept", "src": ["group:admin"], "dst": ["all6:*"]}
  ]
}

Context info

  • 0.21.0
  • 1.38.1
  • MacOS 13.2.1 (22D68) tailscale, RHEL 9.1 headscale
  • Linux proxmox 6.1.15-1-pve
Originally created by @fuomag9 on GitHub (Mar 22, 2023). <!-- Headscale is a multinational community across the globe. Our common language is English. Please consider raising the bug report in this language. --> **Bug description** Is ipv6 exit node with ACL possible? As the ACL below makes ipv4 work but ipv6 does not, and I see this in the logs, which does not seem correct: `Mar 21 20:41:49 headscale headscale[7944]: 2023-03-21T20:41:49+01:00 WRN No IPs found with the alias all6` On discord it was suggested to use `[::]/0` but that did not work as well and outputted the same log **To Reproduce** Create an exit node and use the following ACL ``` { "groups": { "group:admin": ["fuomag9"] }, "Hosts": { "all6": "::/0", }, "acls": [ { "action": "accept", "src": ["group:admin"], "dst": ["group:admin:*"] }, {"action": "accept", "src": ["group:admin"], "dst": ["0.0.0.0/0:*"]}, {"action": "accept", "src": ["group:admin"], "dst": ["all6:*"]} ] } ``` **Context info** - 0.21.0 - 1.38.1 - MacOS 13.2.1 (22D68) tailscale, RHEL 9.1 headscale - Linux proxmox 6.1.15-1-pve
adam added the stalebug labels 2025-12-29 01:29:28 +01:00
adam closed this issue 2025-12-29 01:29:28 +01:00
adam commented 2025-12-29 01:29:29 +01:00
Author
Owner
Copy Link

@github-actions[bot] commented on GitHub (Sep 26, 2023):

This issue is stale because it has been open for 180 days with no activity.

@github-actions[bot] commented on GitHub (Sep 26, 2023): This issue is stale because it has been open for 180 days with no activity.
adam commented 2025-12-29 01:29:29 +01:00
Author
Owner
Copy Link

@almereyda commented on GitHub (Sep 28, 2023):

It will be useful to reconsider this use case, now that the #1473 has passed.

@almereyda commented on GitHub (Sep 28, 2023): It will be useful to reconsider this use case, now that the #1473 has passed.
adam commented 2025-12-29 01:29:30 +01:00
Author
Owner
Copy Link

@turbotorsten commented on GitHub (Nov 6, 2023):

"dst": ["::/0:*"],

works for me to enable IPv6

@turbotorsten commented on GitHub (Nov 6, 2023): `"dst": ["::/0:*"],` works for me to enable IPv6
adam commented 2025-12-29 01:29:31 +01:00
Author
Owner
Copy Link

@github-actions[bot] commented on GitHub (Feb 5, 2024):

This issue is stale because it has been open for 90 days with no activity.

@github-actions[bot] commented on GitHub (Feb 5, 2024): This issue is stale because it has been open for 90 days with no activity.
adam commented 2025-12-29 01:29:31 +01:00
Author
Owner
Copy Link

@github-actions[bot] commented on GitHub (Feb 13, 2024):

This issue was closed because it has been inactive for 14 days since being marked as stale.

@github-actions[bot] commented on GitHub (Feb 13, 2024): This issue was closed because it has been inactive for 14 days since being marked as stale.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
CLI
DERP
DNS
Nix
OIDC
SSH
bug
database
documentation
duplicate
enhancement
faq
good first issue
grants
help wanted
might-come
needs design doc
needs investigation
no-stale-bot
out of scope
performance
policy 📝
pull-request
Mirrored from GitHub Pull Request
 question
regression
routes
stale
tags
tailscale-feature-gap
well described ❤️
wontfix
No Label bug stale
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
adam
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/headscale#445
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?