mirror of
https://github.com/juanfont/headscale.git
synced 2026-04-11 03:27:20 +02:00
834ac27779
Add comprehensive test file for validating Headscale's ACL engine behavior for subnet routes and exit nodes against documented Tailscale SaaS behavior. Tests cover: - Category A: Subnet route basics (wildcard includes routes, tag-based ACL excludes routes) - Category B: Exit node behavior (exit routes not in SrcIPs) - Category F: Filter placement rules (filters on destination nodes) - Category G: Protocol and port restrictions - Category R: Route coverage rules - Category O: Overlapping routes - Category H: Edge cases (wildcard formats, CGNAT handling) - Category T: Tag resolution (tags resolve to node IPs only) - Category I: IPv6 specific behavior The tests document expected Tailscale SaaS behavior with TODOs marking areas where Headscale currently differs. This provides a baseline for compatibility improvements.