Kristoffer Dalby 044f3fc0ec policy/policyutil: exclude exit routes from ReduceFilterRules ...

Exit nodes handle traffic via AllowedIPs/routing, not packet filter
rules. Skip exit routes (0.0.0.0/0, ::/0) when checking RoutableIPs
overlap in ReduceFilterRules, matching Tailscale SaaS behavior where
exit nodes do not receive filter rules for destinations that only
overlap via exit routes.

Updates #2180

2026-03-25 15:17:23 +00:00

..

reduce_test.go

policy/policyutil: exclude exit routes from ReduceFilterRules

2026-03-25 15:17:23 +00:00

reduce.go

policy/policyutil: exclude exit routes from ReduceFilterRules

2026-03-25 15:17:23 +00:00