Kristoffer Dalby 8baa14ef4a policy: use CGNAT/ULA ranges for wildcard resolution ...

Change Asterix.Resolve() to use Tailscale's CGNAT range (100.64.0.0/10)
and ULA range (fd7a:115c:a1e0::/48) instead of all IPs (0.0.0.0/0 and
::/0).
This better matches Tailscale's security model where wildcard (*) means
"any node in the tailnet" rather than literally "any IP address on the
internet".
Updates #3036

Updates #3036

2026-02-05 19:29:16 +01:00

..

matcher

matcher: Add func for comparing Dests and TheInternet

2025-11-02 13:19:59 +01:00

policyutil

policy: add ICMP protocols to default and export constants

2026-02-05 19:29:16 +01:00

v2

policy: use CGNAT/ULA ranges for wildcard resolution

2026-02-05 19:29:16 +01:00

pm.go

tags: process tags on registration, simplify policy (#2931)

2025-12-08 18:51:07 +01:00

policy_autoapprove_test.go

make tags first class node owner (#2885)

2025-12-02 12:01:25 +01:00

policy_route_approval_test.go

make tags first class node owner (#2885)

2025-12-02 12:01:25 +01:00

policy_test.go

policy: update tests for SSH validation rules

2026-01-21 17:01:30 +00:00

policy.go

policy: fix autogroup:self propagation and optimize cache invalidation (#2807)

2025-10-23 17:57:41 +02:00

route_approval_test.go

policy: add test to confirm group cant approve tag

2025-12-17 09:32:05 +01:00