Question about ACL #88

Closed
opened 2025-12-29 01:22:38 +01:00 by adam · 2 comments
Owner

Originally created by @negbie on GitHub (Dec 7, 2021).

As far as I can see, ACL's are handled by the client by getting them from the server, right? What forbids someone to adapt the handling of the ACL's in the Tailscale client so that they are simply ignored?

Originally created by @negbie on GitHub (Dec 7, 2021). As far as I can see, ACL's are handled by the client by getting them from the server, right? What forbids someone to adapt the handling of the ACL's in the Tailscale client so that they are simply ignored?
adam closed this issue 2025-12-29 01:22:39 +01:00
Author
Owner

@juanfont commented on GitHub (Dec 7, 2021):

ACLs are enforced in all the clients. So even if the peer of a node is running a modified client, the unmodified clients will still apply the rules.

Of course, ACLs become useless if you tamper all the clients in your network.

@juanfont commented on GitHub (Dec 7, 2021): ACLs are enforced in all the clients. So even if the peer of a node is running a modified client, the unmodified clients will still apply the rules. Of course, ACLs become useless if you tamper _all_ the clients in your network.
Author
Owner

@negbie commented on GitHub (Dec 7, 2021):

Thank you very much!

@negbie commented on GitHub (Dec 7, 2021): Thank you very much!
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/headscale#88