Files
headscale/hscontrol
Kristoffer Dalby 95b1fd636e policy: fix wildcard DstPorts format and proto:icmp handling
Fix two compatibility issues discovered in Tailscale SaaS testing:

1. Wildcard DstPorts format: Headscale was expanding wildcard
   destinations to CGNAT ranges (100.64.0.0/10, fd7a:115c:a1e0::/48)
   while Tailscale uses {IP: "*"} directly. Add detection for
   wildcard (Asterix) alias type in filter compilation to use the
   correct format.

2. proto:icmp handling: The "icmp" protocol name was returning both
   ICMPv4 (1) and ICMPv6 (58), but Tailscale only returns ICMPv4.
   Users should use "ipv6-icmp" or protocol number 58 explicitly
   for IPv6 ICMP.

Update all test expectations accordingly. This significantly reduces
test file line count by replacing duplicated CGNAT range patterns
with single wildcard entries.
2026-02-05 19:29:16 +01:00
..
2025-12-18 10:02:23 +01:00
2025-09-09 09:40:00 +02:00
2026-01-16 14:54:04 +01:00
2025-12-17 12:32:04 +01:00
2025-09-09 09:40:00 +02:00
2025-12-10 15:55:15 +01:00
2025-12-10 15:55:15 +01:00
2025-12-10 15:55:15 +01:00
2025-12-10 15:55:15 +01:00