public/headscale
1
0 Fork 0
mirror of https://github.com/juanfont/headscale.git synced 2026-11-04 04:34:07 +09:00
Code Issues Packages Projects Releases Wiki Activity

policy/v2: record again captures split by a route approval

Browse Source 
tscap read approved_routes before the netmaps, and five captures lost a node.
Contiguous new addresses make SaaS and headscale source forms differ, so those checks are listed.
Also moved by recording now: capver 131 to 142, default-auto-update, self RoutableIPs.
This commit is contained in:
Kristoffer Dalby committed 2026-11-03 15:52:58 +01:00
1 parent 8b41925a1f
commit 4671143b8f
26 files changed
+20404 -11619
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

hscontrol/policy/v2/tailscale_acl_data_compat_test.go
+20
View File
@@ -213,6 +213,26 @@ var aclSkipReasons = map[string]string{
"acl-n01/venusaur/filter": allowAllForm,
"acl-n01/weedle/filter": allowAllForm,
"acl-au06/beedrill/filter": srcAddressForm,
"acl-k03/beedrill/filter": srcAddressForm,
"acl-k03/bulbasaur/filter": srcAddressForm,
"acl-k03/charmander/filter": srcAddressForm,
"acl-k03/ivysaur/filter": srcAddressForm,
"acl-k03/kakuna/filter": srcAddressForm,
"acl-k03/squirtle/filter": srcAddressForm,
"acl-k03/venusaur/filter": srcAddressForm,
"acl-k03/weedle/filter": srcAddressForm,
"acl-mr09/beedrill/filter": srcAddressForm,
"acl-mr20/beedrill/filter": srcAddressForm,
"acl-mu07/beedrill/filter": srcAddressForm,
"acl-mu07/bulbasaur/filter": srcAddressForm,
"acl-mu07/charmander/filter": srcAddressForm,
"acl-mu07/ivysaur/filter": srcAddressForm,
"acl-mu07/kakuna/filter": srcAddressForm,
"acl-mu07/squirtle/filter": srcAddressForm,
"acl-mu07/venusaur/filter": srcAddressForm,
"acl-mu07/weedle/filter": srcAddressForm,
"acl-self-plus-dsts/kakuna/filter": srcAddressForm,
"acl-self-plus-dsts/beedrill/filter": srcAddressForm,
"acl-self-plus-dsts/bulbasaur/filter": "FILTER_ADDRESS_FORM+SELF_DST_REPEAT: sources listed one by one, the autogroup:self destination written once per source alias",
hscontrol/policy/v2/testdata/acl_results/acl-ah01.hujson
Generated Vendored
+1458 -1299
View File
File diff suppressed because it is too large. Load diff
hscontrol/policy/v2/testdata/acl_results/acl-au01.hujson
Generated Vendored
+296 -191
View File
@@ -3,26 +3,58 @@
// acl au01
//
// Nodes with filter rules: 1 of 8
// Captured at: 2026-04-10T15:36:55Z
// tscap version: tscap/dev
// Captured at: 2026-10-30T16:33:17Z
// tool version: tscap/5f80ee6150559e777612549d896d444b50768737
// schema version: 1
{
"schema_version": 1,
"test_id": "acl-au01",
"description": "acl au01",
"category": "acl",
"captured_at": "2026-04-10T15:36:55.393641608Z",
"tool_version": "tscap/dev",
"captured_at": "2026-10-30T16:33:17.306224254Z",
"tool_version": "tscap/5f80ee6150559e777612549d896d444b50768737",
"client_version": "1.102.5-ERR-BuildInfo capver 142",
"tailnet": "odin@example.com",
"input": {
"full_policy": "{\"acls\":[{\"action\":\"accept\",\"dst\":[\"tag:server:22\"],\"src\":[\"thor@example.org\"]}],\"autoApprovers\":{\"routes\":{\"0.0.0.0/0\":[\"tag:exit\"],\"10.33.0.0/16\":[\"tag:router\"],\"::/0\":[\"tag:exit\"]}},\"groups\":{\"group:admins\":[\"odin@example.com\"],\"group:developers\":[\"thor@example.org\",\"odin@example.com\"],\"group:empty\":[],\"group:monitors\":[\"freya@example.com\"]},\"hosts\":{\"internal\":\"10.0.0.0/8\",\"prodbox\":\"100.103.8.15\",\"subnet24\":\"192.168.1.0/24\",\"webserver\":\"100.108.74.26\"},\"tagOwners\":{\"tag:client\":[\"odin@example.com\"],\"tag:exit\":[\"odin@example.com\"],\"tag:pidgey\":[\"odin@example.com\"],\"tag:pidgeotto\":[\"odin@example.com\"],\"tag:group-a\":[\"odin@example.com\"],\"tag:group-b\":[\"odin@example.com\"],\"tag:ha\":[\"odin@example.com\"],\"tag:prod\":[\"odin@example.com\"],\"tag:router\":[\"odin@example.com\"],\"tag:spearow\":[\"odin@example.com\"],\"tag:fearow\":[\"odin@example.com\"],\"tag:server\":[\"odin@example.com\"]}}",
"api_response_code": 200,
"tailnet": {
"dns": {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
"settings": {}
},
"scenario_hujson": " \n{\n\t\"category\": \"acl\",\n\t\"description\": \"acl au01\",\n\t\"id\": \"acl-au01\",\n\t\"policy\": {\"acls\": [{\n\t\t\"action\": \"accept\",\n\t\t\"dst\": [\"tag:server:22\"],\n\t\t\"src\": [\"thor@example.org\"]\n\t}], \"autoApprovers\": {\"routes\": {\n\t\t\"0.0.0.0/0\": [\"tag:exit\"],\n\t\t\"10.33.0.0/16\": [\"tag:router\"],\n\t\t\"::/0\": [\"tag:exit\"]\n\t}}, \"groups\": {\n\t\t\"group:admins\": [\"odin@example.com\"],\n\t\t\"group:developers\": [\"thor@example.org\", \"odin@example.com\"],\n\t\t\"group:empty\": [],\n\t\t\"group:monitors\": [\"freya@example.com\"]\n\t}, \"hosts\": {\n\t\t\"internal\": \"10.0.0.0/8\",\n\t\t\"prodbox\": \"100.103.8.15\",\n\t\t\"subnet24\": \"192.168.1.0/24\",\n\t\t\"webserver\": \"100.108.74.26\"\n\t}, \"tagOwners\": {\n\t\t\"tag:client\": [\"odin@example.com\"],\n\t\t\"tag:exit\": [\"odin@example.com\"],\n\t\t\"tag:pidgey\": [\"odin@example.com\"],\n\t\t\"tag:pidgeotto\": [\"odin@example.com\"],\n\t\t\"tag:group-a\": [\"odin@example.com\"],\n\t\t\"tag:group-b\": [\"odin@example.com\"],\n\t\t\"tag:ha\": [\"odin@example.com\"],\n\t\t\"tag:prod\": [\"odin@example.com\"],\n\t\t\"tag:router\": [\"odin@example.com\"],\n\t\t\"tag:spearow\": [\"odin@example.com\"],\n\t\t\"tag:fearow\": [\"odin@example.com\"],\n\t\t\"tag:server\": [\"odin@example.com\"]\n\t}},\n\t\"tailnet\": {\n\t\t\"dns\": {\"magic_dns\": false, \"nameservers\": [], \"search_paths\": [], \"split_dns\": {}},\n\t\t\"settings\": {}\n\t},\n\t\"topology\": \"../_topologies/acl.hujson\"\n}\n",
"scenario_path": "scenarios/acl/acl-au01.hujson"
"scenario_path": "scenarios/acl/acl-au01.hujson",
"full_policy": {"acls": [{
"action": "accept",
"dst": ["tag:server:22"],
"src": ["thor@example.org"]
}], "autoApprovers": {"routes": {
"0.0.0.0/0": ["tag:exit"],
"10.33.0.0/16": ["tag:router"],
"::/0": ["tag:exit"]
}}, "groups": {
"group:admins": ["odin@example.com"],
"group:developers": ["thor@example.org", "odin@example.com"],
"group:empty": [],
"group:monitors": ["freya@example.com"]
}, "hosts": {
"internal": "10.0.0.0/8",
"prodbox": "100.103.8.15",
"subnet24": "192.168.1.0/24",
"webserver": "100.108.74.26"
}, "tagOwners": {
"tag:client": ["odin@example.com"],
"tag:exit": ["odin@example.com"],
"tag:pidgey": ["odin@example.com"],
"tag:pidgeotto": ["odin@example.com"],
"tag:group-a": ["odin@example.com"],
"tag:group-b": ["odin@example.com"],
"tag:ha": ["odin@example.com"],
"tag:prod": ["odin@example.com"],
"tag:router": ["odin@example.com"],
"tag:spearow": ["odin@example.com"],
"tag:fearow": ["odin@example.com"],
"tag:server": ["odin@example.com"]
}}
},
"topology": {"users": [
{"id": 1, "name": "odin", "email": "odin@example.com"},
@@ -31,99 +63,105 @@
], "nodes": {"beedrill": {
"hostname": "beedrill",
"tags": ["tag:server"],
"ipv4": "100.73.221.128",
"ipv6": "fd7a:115c:a1e0::1f37:dd80",
"ipv4": "100.64.0.16",
"ipv6": "fd7a:115c:a1e0::10",
"routable_ips": [],
"approved_routes": []
}, "bulbasaur": {
"hostname": "bulbasaur",
"tags": [],
"ipv4": "100.117.21.79",
"ipv6": "fd7a:115c:a1e0::b737:154f",
"ipv4": "100.64.0.19",
"ipv6": "fd7a:115c:a1e0::13",
"user": "odin",
"routable_ips": [],
"approved_routes": []
}, "charmander": {
"hostname": "charmander",
"tags": ["tag:exit"],
"ipv4": "100.125.108.36",
"ipv6": "fd7a:115c:a1e0::ef37:6c24",
"ipv4": "100.64.0.4",
"ipv6": "fd7a:115c:a1e0::4",
"routable_ips": ["0.0.0.0/0", "::/0"],
"approved_routes": []
}, "ivysaur": {
"hostname": "ivysaur",
"tags": [],
"ipv4": "100.116.11.121",
"ipv6": "fd7a:115c:a1e0::3d37:b79",
"ipv4": "100.64.0.17",
"ipv6": "fd7a:115c:a1e0::11",
"user": "thor",
"routable_ips": [],
"approved_routes": []
}, "kakuna": {
"hostname": "kakuna",
"tags": ["tag:prod"],
"ipv4": "100.117.54.88",
"ipv6": "fd7a:115c:a1e0::1e37:3658",
"ipv4": "100.64.0.15",
"ipv6": "fd7a:115c:a1e0::f",
"routable_ips": [],
"approved_routes": []
}, "squirtle": {
"hostname": "squirtle",
"tags": ["tag:router"],
"ipv4": "100.123.173.81",
"ipv6": "fd7a:115c:a1e0::5037:ad51",
"ipv4": "100.64.0.13",
"ipv6": "fd7a:115c:a1e0::d",
"routable_ips": ["10.33.0.0/16"],
"approved_routes": []
"approved_routes": ["10.33.0.0/16"]
}, "venusaur": {
"hostname": "venusaur",
"tags": [],
"ipv4": "100.100.227.31",
"ipv6": "fd7a:115c:a1e0::d037:e31f",
"ipv4": "100.64.0.18",
"ipv6": "fd7a:115c:a1e0::12",
"user": "freya",
"routable_ips": [],
"approved_routes": []
}, "weedle": {
"hostname": "weedle",
"tags": ["tag:client"],
"ipv4": "100.103.108.3",
"ipv6": "fd7a:115c:a1e0::4837:6c03",
"ipv4": "100.64.0.14",
"ipv6": "fd7a:115c:a1e0::e",
"routable_ips": [],
"approved_routes": []
}}},
"captures": {"beedrill": {
"packet_filter_rules": [{"SrcIPs": ["100.116.11.121", "fd7a:115c:a1e0::3d37:b79"], "DstPorts": [
{"IP": "100.73.221.128", "Ports": {"First": 22, "Last": 22}},
{"IP": "fd7a:115c:a1e0::1f37:dd80", "Ports": {"First": 22, "Last": 22}}
"packet_filter_rules": [{"SrcIPs": ["100.64.0.17", "fd7a:115c:a1e0::11"], "DstPorts": [
{"IP": "100.64.0.16", "Ports": {"First": 22, "Last": 22}},
{"IP": "fd7a:115c:a1e0::10", "Ports": {"First": 22, "Last": 22}}
]}],
"packet_filter_matches": [{
"IPProto": [6, 17, 1, 58],
"Srcs": ["100.116.11.121/32", "fd7a:115c:a1e0::3d37:b79/128"],
"Srcs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
"SrcCaps": null,
"Dsts": [
{"Net": "100.73.221.128/32", "Ports": {"First": 22, "Last": 22}},
{"Net": "fd7a:115c:a1e0::1f37:dd80/128", "Ports": {"First": 22, "Last": 22}}
{"Net": "100.64.0.16/32", "Ports": {"First": 22, "Last": 22}},
{"Net": "fd7a:115c:a1e0::10/128", "Ports": {"First": 22, "Last": 22}}
],
"Caps": []
}],
"netmap": {
"Cached": false,
"SelfNode": {
"ID": 8890905167092646,
"StableID": "n5ED991iRC21CNTRL",
"ID": 4626512752423704,
"StableID": "nZocBQeM8d11CNTRL",
"Name": "beedrill.tail78f774.ts.net.",
"User": 8890905167092646,
"Key": "nodekey:58f558b964e7d058cd5415e1881c58d7c907ddff7d6f57978942f53d1fc9dd7f",
"DiscoKey": "discokey:ac3e452d48acc7e6ea4a4ab63ebde67f0bb3b4e0f4f6f6d1e792661ece6c5a47",
"Addresses": ["100.73.221.128/32", "fd7a:115c:a1e0::1f37:dd80/128"],
"AllowedIPs": ["100.73.221.128/32", "fd7a:115c:a1e0::1f37:dd80/128"],
"Endpoints": ["77.164.248.136:37764", "10.65.0.27:37764", "172.17.0.1:37764"],
"User": 4626512752423704,
"Key": "nodekey:5802f5522fe8ef863bec6ad0eaf141b386c5c1127e58d8f4ff06b82e892b080f",
"DiscoKey": "discokey:0585365c54ecf7c88e70ef766bd7545b652545ae914ad5a71a67c981f5756a36",
"Addresses": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
"Endpoints": [
"192.0.2.1:43895",
"198.51.100.1:43895",
"198.51.100.2:43895",
"198.51.100.3:43895"
],
"Hostinfo": {"Hostname": "beedrill", "RequestTags": ["tag:server"], "Services": [
{"Proto": "peerapi4", "Port": 55087},
{"Proto": "peerapi6", "Port": 55087},
{"Proto": "peerapi4", "Port": 50358},
{"Proto": "peerapi6", "Port": 50358},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T15:36:59.431345924Z",
"Created": "2026-10-30T16:33:21.062902003Z",
"Tags": ["tag:server"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -138,6 +176,7 @@
"ComputedNameWithHost": "beedrill"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -148,26 +187,31 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:58f558b964e7d058cd5415e1881c58d7c907ddff7d6f57978942f53d1fc9dd7f",
"MachineKey": "mkey:770ef52aa25f0632e9a8708606e4b76cbfb719e337da515935b1c0b57901454e",
"NodeKey": "nodekey:5802f5522fe8ef863bec6ad0eaf141b386c5c1127e58d8f4ff06b82e892b080f",
"MachineKey": "mkey:c2995185f32c773cc86d61390dbff60bdeb66e7ba3ee3b8601677f7b9168e628",
"Peers": [{
"ID": 4442975932716830,
"StableID": "nyiEvjSEhb11CNTRL",
"ID": 7442236722181748,
"StableID": "nuu1QTwb7121CNTRL",
"Name": "ivysaur.tail78f774.ts.net.",
"User": 4538565228176803,
"Key": "nodekey:f5e4c6e703ff333d3b3facae92ed2f94d780f5cdf83c27d458459e983df40b78",
"KeyExpiry": "2026-10-07T15:36:59Z",
"DiscoKey": "discokey:1626b9d445e86dfe842abf9a377f1e6a174591bc0f98c60555bb30b8f02df55e",
"Addresses": ["100.116.11.121/32", "fd7a:115c:a1e0::3d37:b79/128"],
"AllowedIPs": ["100.116.11.121/32", "fd7a:115c:a1e0::3d37:b79/128"],
"Endpoints": ["77.164.248.136:56121", "10.65.0.27:56121", "172.17.0.1:56121"],
"HomeDERP": 14,
"Key": "nodekey:e0de5f65dc603639f856c0c95facf267f3bae7ed81e341c9ed49dd2ebc9b3b7d",
"KeyExpiry": "2027-04-28T16:33:21Z",
"DiscoKey": "discokey:3da19f4134181b482321072ffc29315f41c5507b748ab77057a2cc8f0a3b7e00",
"Addresses": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
"Endpoints": [
"192.0.2.1:53747",
"198.51.100.1:53747",
"198.51.100.2:53747",
"198.51.100.3:53747"
],
"HomeDERP": 14,
"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
{"Proto": "peerapi4", "Port": 35277},
{"Proto": "peerapi6", "Port": 35277}
{"Proto": "peerapi4", "Port": 62496},
{"Proto": "peerapi6", "Port": 62496}
]},
"Created": "2026-04-10T15:36:59.972213156Z",
"Cap": 131,
"Created": "2026-10-30T16:33:21.600943961Z",
"Cap": 142,
"Online": true,
"ComputedName": "ivysaur",
"ComputedNameWithHost": "ivysaur"
@@ -175,17 +219,17 @@
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [{
"IPProto": [6, 17, 1, 58],
"Srcs": ["100.116.11.121/32", "fd7a:115c:a1e0::3d37:b79/128"],
"Srcs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
"SrcCaps": null,
"Dsts": [
{"Net": "100.73.221.128/32", "Ports": {"First": 22, "Last": 22}},
{"Net": "fd7a:115c:a1e0::1f37:dd80/128", "Ports": {"First": 22, "Last": 22}}
{"Net": "100.64.0.16/32", "Ports": {"First": 22, "Last": 22}},
{"Net": "fd7a:115c:a1e0::10/128", "Ports": {"First": 22, "Last": 22}}
],
"Caps": []
}],
"PacketFilterRules": [{"SrcIPs": ["100.116.11.121", "fd7a:115c:a1e0::3d37:b79"], "DstPorts": [
{"IP": "100.73.221.128", "Ports": {"First": 22, "Last": 22}},
{"IP": "fd7a:115c:a1e0::1f37:dd80", "Ports": {"First": 22, "Last": 22}}
"PacketFilterRules": [{"SrcIPs": ["100.64.0.17", "fd7a:115c:a1e0::11"], "DstPorts": [
{"IP": "100.64.0.16", "Ports": {"First": 22, "Last": 22}},
{"IP": "fd7a:115c:a1e0::10", "Ports": {"First": 22, "Last": 22}}
]}],
"SSHPolicy": {"rules": []},
"CollectServices": false,
@@ -1008,36 +1052,43 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {
"4538565228176803": {"ID": 4538565228176803, "LoginName": "thor@example.org", "DisplayName": "thor"},
"8890905167092646": {
"ID": 8890905167092646,
"LoginName": "beedrill.tail78f774.ts.net",
"DisplayName": "beedrill"
}
}
"UserProfiles": {"4538565228176803": {
"ID": 4538565228176803,
"LoginName": "thor@example.org",
"DisplayName": "thor"
}, "4626512752423704": {
"ID": 4626512752423704,
"LoginName": "beedrill.tail78f774.ts.net",
"DisplayName": "beedrill"
}}
}
}, "bulbasaur": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 8200828912910172,
"StableID": "n7SecRsA3721CNTRL",
"ID": 2360129528281702,
"StableID": "n3BmXqbuRK11CNTRL",
"Name": "bulbasaur.tail78f774.ts.net.",
"User": 4156223528223174,
"Key": "nodekey:de7ba7a0e31b792083bf0bab9fccc948874ba92df5e2c83376f02a09b775154e",
"KeyExpiry": "2026-10-07T15:37:01Z",
"DiscoKey": "discokey:73da615352690406819d0a12730d492894fb411db19d9fe5658559376879842b",
"Addresses": ["100.117.21.79/32", "fd7a:115c:a1e0::b737:154f/128"],
"AllowedIPs": ["100.117.21.79/32", "fd7a:115c:a1e0::b737:154f/128"],
"Endpoints": ["77.164.248.136:45000", "10.65.0.27:45000", "172.17.0.1:45000"],
"Key": "nodekey:c4f7e27bbb666d5a659892b752135c59407e3196730506e16aa8f26d5ba97d03",
"KeyExpiry": "2027-04-28T16:33:22Z",
"DiscoKey": "discokey:a90bfcea8e1a44cc9f23babb17925cda065bde534f3740c0a80a0e2a6bccd212",
"Addresses": ["100.64.0.19/32", "fd7a:115c:a1e0::13/128"],
"AllowedIPs": ["100.64.0.19/32", "fd7a:115c:a1e0::13/128"],
"Endpoints": [
"192.0.2.1:57359",
"198.51.100.1:57359",
"198.51.100.2:57359",
"198.51.100.3:57359"
],
"Hostinfo": {"Hostname": "bulbasaur", "Services": [
{"Proto": "peerapi4", "Port": 51644},
{"Proto": "peerapi6", "Port": 51644},
{"Proto": "peerapi4", "Port": 38156},
{"Proto": "peerapi6", "Port": 38156},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T15:37:01.052138271Z",
"Created": "2026-10-30T16:33:22.71875932Z",
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-admin": null,
"https://tailscale.com/cap/is-owner": null,
@@ -1053,6 +1104,7 @@
"ComputedNameWithHost": "bulbasaur"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-admin",
"https://tailscale.com/cap/is-owner",
@@ -1064,8 +1116,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:de7ba7a0e31b792083bf0bab9fccc948874ba92df5e2c83376f02a09b775154e",
"MachineKey": "mkey:4869ad318a1fbaff88bdf3330f0dc82e12ae1ef1f4db405f64cdffce015ea867",
"NodeKey": "nodekey:c4f7e27bbb666d5a659892b752135c59407e3196730506e16aa8f26d5ba97d03",
"MachineKey": "mkey:67c803596156a0ae00671b507df6487bdc744d1fbb891b4bb6150ff24f091549",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -1899,24 +1951,35 @@
}}, "charmander": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 4176781073927180,
"StableID": "nwAinTxfcZ11CNTRL",
"ID": 5735171737809090,
"StableID": "n3sEJiEUnm11CNTRL",
"Name": "charmander.tail78f774.ts.net.",
"User": 4176781073927180,
"Key": "nodekey:26a9906edd7081e86a6a5d1095194483d677fbd581dc5b3f7dc99625ef3d6c23",
"DiscoKey": "discokey:76f90ae46be98b639c598b4e33c27b083107870a9c9c056dca2c5904e527c962",
"Addresses": ["100.125.108.36/32", "fd7a:115c:a1e0::ef37:6c24/128"],
"AllowedIPs": ["100.125.108.36/32", "fd7a:115c:a1e0::ef37:6c24/128"],
"Endpoints": ["77.164.248.136:37215", "10.65.0.27:37215", "172.17.0.1:37215"],
"Hostinfo": {"Hostname": "charmander", "RequestTags": ["tag:exit"], "Services": [
{"Proto": "peerapi4", "Port": 57963},
{"Proto": "peerapi6", "Port": 57963},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T15:36:57.33076515Z",
"User": 5735171737809090,
"Key": "nodekey:da27e3b91c12bae0c48313fca1ff0a5c715f7dbac0efd8b6f762e3e12f7b9469",
"DiscoKey": "discokey:19492bb5b8b2ed02876cac72a9a7e900ce70d7e2df52d6bf0652d2773c7e7266",
"Addresses": ["100.64.0.4/32", "fd7a:115c:a1e0::4/128"],
"AllowedIPs": ["100.64.0.4/32", "fd7a:115c:a1e0::4/128"],
"Endpoints": [
"192.0.2.1:54176",
"198.51.100.1:54176",
"198.51.100.2:54176",
"198.51.100.3:54176"
],
"Hostinfo": {
"Hostname": "charmander",
"RoutableIPs": ["0.0.0.0/0", "::/0"],
"RequestTags": ["tag:exit"],
"Services": [
{"Proto": "peerapi4", "Port": 37067},
{"Proto": "peerapi6", "Port": 37067},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]
},
"Created": "2026-10-30T16:33:18.910836856Z",
"Tags": ["tag:exit"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -1931,6 +1994,7 @@
"ComputedNameWithHost": "charmander"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -1941,8 +2005,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:26a9906edd7081e86a6a5d1095194483d677fbd581dc5b3f7dc99625ef3d6c23",
"MachineKey": "mkey:64e15a2f93f060de512ea7587bfdb43650961a81a2e327709207efb82635a212",
"NodeKey": "nodekey:da27e3b91c12bae0c48313fca1ff0a5c715f7dbac0efd8b6f762e3e12f7b9469",
"MachineKey": "mkey:8ae5e3022ef35f9aff0d9eadf6caa9e6e4e0e7aecc99ba031220abbaadee082e",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -2768,32 +2832,38 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {"4176781073927180": {
"ID": 4176781073927180,
"UserProfiles": {"5735171737809090": {
"ID": 5735171737809090,
"LoginName": "charmander.tail78f774.ts.net",
"DisplayName": "charmander"
}}
}}, "ivysaur": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 4442975932716830,
"StableID": "nyiEvjSEhb11CNTRL",
"ID": 7442236722181748,
"StableID": "nuu1QTwb7121CNTRL",
"Name": "ivysaur.tail78f774.ts.net.",
"User": 4538565228176803,
"Key": "nodekey:f5e4c6e703ff333d3b3facae92ed2f94d780f5cdf83c27d458459e983df40b78",
"KeyExpiry": "2026-10-07T15:36:59Z",
"DiscoKey": "discokey:1626b9d445e86dfe842abf9a377f1e6a174591bc0f98c60555bb30b8f02df55e",
"Addresses": ["100.116.11.121/32", "fd7a:115c:a1e0::3d37:b79/128"],
"AllowedIPs": ["100.116.11.121/32", "fd7a:115c:a1e0::3d37:b79/128"],
"Endpoints": ["77.164.248.136:56121", "10.65.0.27:56121", "172.17.0.1:56121"],
"Key": "nodekey:e0de5f65dc603639f856c0c95facf267f3bae7ed81e341c9ed49dd2ebc9b3b7d",
"KeyExpiry": "2027-04-28T16:33:21Z",
"DiscoKey": "discokey:3da19f4134181b482321072ffc29315f41c5507b748ab77057a2cc8f0a3b7e00",
"Addresses": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
"Endpoints": [
"192.0.2.1:53747",
"198.51.100.1:53747",
"198.51.100.2:53747",
"198.51.100.3:53747"
],
"Hostinfo": {"Hostname": "ivysaur", "Services": [
{"Proto": "peerapi4", "Port": 35277},
{"Proto": "peerapi6", "Port": 35277},
{"Proto": "peerapi4", "Port": 62496},
{"Proto": "peerapi6", "Port": 62496},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T15:36:59.972213156Z",
"Created": "2026-10-30T16:33:21.600943961Z",
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-admin": null,
"https://tailscale.com/cap/ssh": null,
@@ -2808,6 +2878,7 @@
"ComputedNameWithHost": "ivysaur"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-admin",
"https://tailscale.com/cap/ssh",
@@ -2818,25 +2889,30 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:f5e4c6e703ff333d3b3facae92ed2f94d780f5cdf83c27d458459e983df40b78",
"MachineKey": "mkey:d3d29847d3decf8000828cdea895bca716396258ad1d42ee20f0632742a9b420",
"NodeKey": "nodekey:e0de5f65dc603639f856c0c95facf267f3bae7ed81e341c9ed49dd2ebc9b3b7d",
"MachineKey": "mkey:76c06e40999e12e2d4e0200f6f03ff3c27486f500e4526a5f2c15fcae40a075b",
"Peers": [{
"ID": 8890905167092646,
"StableID": "n5ED991iRC21CNTRL",
"ID": 4626512752423704,
"StableID": "nZocBQeM8d11CNTRL",
"Name": "beedrill.tail78f774.ts.net.",
"User": 1260082990019555,
"Key": "nodekey:58f558b964e7d058cd5415e1881c58d7c907ddff7d6f57978942f53d1fc9dd7f",
"DiscoKey": "discokey:ac3e452d48acc7e6ea4a4ab63ebde67f0bb3b4e0f4f6f6d1e792661ece6c5a47",
"Addresses": ["100.73.221.128/32", "fd7a:115c:a1e0::1f37:dd80/128"],
"AllowedIPs": ["100.73.221.128/32", "fd7a:115c:a1e0::1f37:dd80/128"],
"Endpoints": ["77.164.248.136:37764", "10.65.0.27:37764", "172.17.0.1:37764"],
"HomeDERP": 14,
"Key": "nodekey:5802f5522fe8ef863bec6ad0eaf141b386c5c1127e58d8f4ff06b82e892b080f",
"DiscoKey": "discokey:0585365c54ecf7c88e70ef766bd7545b652545ae914ad5a71a67c981f5756a36",
"Addresses": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
"Endpoints": [
"192.0.2.1:43895",
"198.51.100.1:43895",
"198.51.100.2:43895",
"198.51.100.3:43895"
],
"HomeDERP": 14,
"Hostinfo": {"OS": "linux", "Hostname": "beedrill", "Services": [
{"Proto": "peerapi4", "Port": 55087},
{"Proto": "peerapi6", "Port": 55087}
{"Proto": "peerapi4", "Port": 50358},
{"Proto": "peerapi6", "Port": 50358}
]},
"Created": "2026-04-10T15:36:59.431345924Z",
"Cap": 131,
"Created": "2026-10-30T16:33:21.062902003Z",
"Cap": 142,
"Tags": ["tag:server"],
"Online": true,
"ComputedName": "beedrill",
@@ -3666,35 +3742,42 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {
"1260082990019555": {
"ID": 1260082990019555,
"LoginName": "tagged-devices",
"DisplayName": "Tagged Devices"
},
"4538565228176803": {"ID": 4538565228176803, "LoginName": "thor@example.org", "DisplayName": "thor"}
}
"UserProfiles": {"1260082990019555": {
"ID": 1260082990019555,
"LoginName": "tagged-devices",
"DisplayName": "Tagged Devices"
}, "4538565228176803": {
"ID": 4538565228176803,
"LoginName": "thor@example.org",
"DisplayName": "thor"
}}
}}, "kakuna": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 4939064955844832,
"StableID": "nHfe7xruZf11CNTRL",
"ID": 3363586645218186,
"StableID": "n1S3nciNGT11CNTRL",
"Name": "kakuna.tail78f774.ts.net.",
"User": 4939064955844832,
"Key": "nodekey:daaeeb4f38699521a96f553957df1c891e11f1b15aaa04ce6aad45d51eb53657",
"DiscoKey": "discokey:788405661eefb9631c88129fec9e21b60a439e538860e9594d8b4c7a56d0a932",
"Addresses": ["100.117.54.88/32", "fd7a:115c:a1e0::1e37:3658/128"],
"AllowedIPs": ["100.117.54.88/32", "fd7a:115c:a1e0::1e37:3658/128"],
"Endpoints": ["77.164.248.136:41617", "10.65.0.27:41617", "172.17.0.1:41617"],
"User": 3363586645218186,
"Key": "nodekey:38f75eec771b6638f95f0b8ad2fa7f04e4d3465bcc174881879b8dcbf824b303",
"DiscoKey": "discokey:b028819c23e3a98f80e6c37c50a5da05e024a0377dc233a4c68d3b980afa5a5d",
"Addresses": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
"Endpoints": [
"192.0.2.1:46477",
"198.51.100.1:46477",
"198.51.100.2:46477",
"198.51.100.3:46477"
],
"Hostinfo": {"Hostname": "kakuna", "RequestTags": ["tag:prod"], "Services": [
{"Proto": "peerapi4", "Port": 47898},
{"Proto": "peerapi6", "Port": 47898},
{"Proto": "peerapi4", "Port": 51523},
{"Proto": "peerapi6", "Port": 51523},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T15:36:58.898954229Z",
"Created": "2026-10-30T16:33:20.519988508Z",
"Tags": ["tag:prod"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -3709,6 +3792,7 @@
"ComputedNameWithHost": "kakuna"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -3719,8 +3803,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:daaeeb4f38699521a96f553957df1c891e11f1b15aaa04ce6aad45d51eb53657",
"MachineKey": "mkey:5dd751576c9473837efbec7c85a8e4a0ab621c19786116c09fea109a3d5b8629",
"NodeKey": "nodekey:38f75eec771b6638f95f0b8ad2fa7f04e4d3465bcc174881879b8dcbf824b303",
"MachineKey": "mkey:2a0945d2153512f0b1ee0e0deeb9fed71fe89d2de06ef504393bb09f7f7fc309",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -4546,38 +4630,44 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {"4939064955844832": {
"ID": 4939064955844832,
"UserProfiles": {"3363586645218186": {
"ID": 3363586645218186,
"LoginName": "kakuna.tail78f774.ts.net",
"DisplayName": "kakuna"
}}
}}, "squirtle": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 97427259862482,
"StableID": "nbM9LSF8m111CNTRL",
"ID": 7836684304003874,
"StableID": "nTFrUfQFC421CNTRL",
"Name": "squirtle.tail78f774.ts.net.",
"User": 97427259862482,
"Key": "nodekey:a60f772d5314588a09897a69bde493a0db58df6d5d192675c57bed1950bbad50",
"DiscoKey": "discokey:9d72538d83c9093c722abf51e1ab6a4f17cd2cd03ca095c99ab1e9b527584c7f",
"Addresses": ["100.123.173.81/32", "fd7a:115c:a1e0::5037:ad51/128"],
"AllowedIPs": ["100.123.173.81/32", "fd7a:115c:a1e0::5037:ad51/128", "10.33.0.0/16"],
"Endpoints": ["77.164.248.136:59528", "10.65.0.27:59528", "172.17.0.1:59528"],
"User": 7836684304003874,
"Key": "nodekey:b5f12a5c6bc401e9ec7c9f925994cd43dc59b6efd6147f8143c1c7867535ca15",
"DiscoKey": "discokey:38d106a3ede9a482d0496f36055b5d889eee6b97f15536b6d57b11f91db82a4f",
"Addresses": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128", "10.33.0.0/16"],
"Endpoints": [
"192.0.2.1:56798",
"198.51.100.1:56798",
"198.51.100.2:56798",
"198.51.100.3:56798"
],
"Hostinfo": {
"Hostname": "squirtle",
"RoutableIPs": ["10.33.0.0/16"],
"RequestTags": ["tag:router"],
"Services": [
{"Proto": "peerapi4", "Port": 64869},
{"Proto": "peerapi6", "Port": 64869},
{"Proto": "peerapi4", "Port": 43119},
{"Proto": "peerapi6", "Port": 43119},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]
},
"Created": "2026-04-10T15:36:57.826160688Z",
"Created": "2026-10-30T16:33:19.416600706Z",
"Tags": ["tag:router"],
"PrimaryRoutes": ["10.33.0.0/16"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -4592,6 +4682,7 @@
"ComputedNameWithHost": "squirtle"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -4602,8 +4693,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:a60f772d5314588a09897a69bde493a0db58df6d5d192675c57bed1950bbad50",
"MachineKey": "mkey:80e4ad295b5b722cca745340a86d1ad12f575338e6d83b8af31bdec709573537",
"NodeKey": "nodekey:b5f12a5c6bc401e9ec7c9f925994cd43dc59b6efd6147f8143c1c7867535ca15",
"MachineKey": "mkey:108b90fb29587d011b320c0bac7953c9c3f53aa87234da1dfbc605fb4517ff24",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -5429,32 +5520,38 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {"97427259862482": {
"ID": 97427259862482,
"UserProfiles": {"7836684304003874": {
"ID": 7836684304003874,
"LoginName": "squirtle.tail78f774.ts.net",
"DisplayName": "squirtle"
}}
}}, "venusaur": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 7183596158168988,
"StableID": "nPrpRctT6y11CNTRL",
"ID": 1796469143656824,
"StableID": "nf6KWVCd2F11CNTRL",
"Name": "venusaur.tail78f774.ts.net.",
"User": 3982058329734709,
"Key": "nodekey:cb15b1c584a7b4844c8291ecd9b4478485c04505d24ba1f40b7be54ad024e31e",
"KeyExpiry": "2026-10-07T15:37:00Z",
"DiscoKey": "discokey:eb5f8d5dfc910275b3a6a6cfb49d227547cb7395fd619746f47e304937029f6e",
"Addresses": ["100.100.227.31/32", "fd7a:115c:a1e0::d037:e31f/128"],
"AllowedIPs": ["100.100.227.31/32", "fd7a:115c:a1e0::d037:e31f/128"],
"Endpoints": ["77.164.248.136:50305", "10.65.0.27:50305", "172.17.0.1:50305"],
"Key": "nodekey:9a9511a521fce5f46cf3dfbdab9c4b0af4951a983ca07369f4356e392467fc75",
"KeyExpiry": "2027-04-28T16:33:22Z",
"DiscoKey": "discokey:3d387df2def3ee881e999368cc76bc9622275be95a0cbc36eee005e05362ef5a",
"Addresses": ["100.64.0.18/32", "fd7a:115c:a1e0::12/128"],
"AllowedIPs": ["100.64.0.18/32", "fd7a:115c:a1e0::12/128"],
"Endpoints": [
"192.0.2.1:46673",
"198.51.100.1:46673",
"198.51.100.2:46673",
"198.51.100.3:46673"
],
"Hostinfo": {"Hostname": "venusaur", "Services": [
{"Proto": "peerapi4", "Port": 38708},
{"Proto": "peerapi6", "Port": 38708},
{"Proto": "peerapi4", "Port": 42394},
{"Proto": "peerapi6", "Port": 42394},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T15:37:00.506897252Z",
"Created": "2026-10-30T16:33:22.137722684Z",
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-admin": null,
"https://tailscale.com/cap/ssh": null,
@@ -5469,6 +5566,7 @@
"ComputedNameWithHost": "venusaur"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-admin",
"https://tailscale.com/cap/ssh",
@@ -5479,8 +5577,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:cb15b1c584a7b4844c8291ecd9b4478485c04505d24ba1f40b7be54ad024e31e",
"MachineKey": "mkey:a3c5ff1f6aae6299d17e5f94de87ce62c10ddd4daa890df0cd82abbf671bc870",
"NodeKey": "nodekey:9a9511a521fce5f46cf3dfbdab9c4b0af4951a983ca07369f4356e392467fc75",
"MachineKey": "mkey:b226ac8a58bfe0651830ae642fb0ee989a120d4c8dd3370b3c1f29ce4e413844",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -6314,24 +6412,30 @@
}}, "weedle": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 669716267396392,
"StableID": "nXaRD2KKE611CNTRL",
"ID": 7571544061017692,
"StableID": "nhoy8AdA8221CNTRL",
"Name": "weedle.tail78f774.ts.net.",
"User": 669716267396392,
"Key": "nodekey:a361f7d389882a0cf77059d39773e05ec7c77961fefb696e99f7d0d848a76c02",
"DiscoKey": "discokey:b07e217233aef20f0676b1248b126ba6759d4e5e17a0e8efeb3615092b3d9a7a",
"Addresses": ["100.103.108.3/32", "fd7a:115c:a1e0::4837:6c03/128"],
"AllowedIPs": ["100.103.108.3/32", "fd7a:115c:a1e0::4837:6c03/128"],
"Endpoints": ["77.164.248.136:47250", "10.65.0.27:47250", "172.17.0.1:47250"],
"User": 7571544061017692,
"Key": "nodekey:bbcea4b64be758f42f06c373874ebb634e0eafee36058d9cea8b4015e9b94900",
"DiscoKey": "discokey:6295d1b8064962668dfe5690785a546ef0aa5c47ae0088868b02eebcd389400d",
"Addresses": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"Endpoints": [
"192.0.2.1:60617",
"198.51.100.1:60617",
"198.51.100.2:60617",
"198.51.100.3:60617"
],
"Hostinfo": {"Hostname": "weedle", "RequestTags": ["tag:client"], "Services": [
{"Proto": "peerapi4", "Port": 61862},
{"Proto": "peerapi6", "Port": 61862},
{"Proto": "peerapi4", "Port": 63957},
{"Proto": "peerapi6", "Port": 63957},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T15:36:58.370881672Z",
"Created": "2026-10-30T16:33:19.972141913Z",
"Tags": ["tag:client"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -6346,6 +6450,7 @@
"ComputedNameWithHost": "weedle"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -6356,8 +6461,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:a361f7d389882a0cf77059d39773e05ec7c77961fefb696e99f7d0d848a76c02",
"MachineKey": "mkey:2e95a950ec38dbaeb99ff2c1e3b2889944107d695cb098158649eff444694a58",
"NodeKey": "nodekey:bbcea4b64be758f42f06c373874ebb634e0eafee36058d9cea8b4015e9b94900",
"MachineKey": "mkey:d6e99aed4c3005f68b87b38a21ef67ee417074eda428c45b3b89a49369f7fa72",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -7183,8 +7288,8 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {"669716267396392": {
"ID": 669716267396392,
"UserProfiles": {"7571544061017692": {
"ID": 7571544061017692,
"LoginName": "weedle.tail78f774.ts.net",
"DisplayName": "weedle"
}}
hscontrol/policy/v2/testdata/acl_results/acl-au06.hujson
Generated Vendored
+394 -271
View File
File diff suppressed because it is too large. Load diff
hscontrol/policy/v2/testdata/acl_results/acl-c09.hujson
Generated Vendored
+1472 -1339
View File
File diff suppressed because it is too large. Load diff
hscontrol/policy/v2/testdata/acl_results/acl-d08.hujson
Generated Vendored
+292 -198
View File
@@ -3,26 +3,64 @@
// acl d08
//
// Nodes with filter rules: 3 of 8
// Captured at: 2026-04-10T15:50:48Z
// tscap version: tscap/dev
// Captured at: 2026-10-30T16:35:22Z
// tool version: tscap/5f80ee6150559e777612549d896d444b50768737
// schema version: 1
{
"schema_version": 1,
"test_id": "acl-d08",
"description": "acl d08",
"category": "acl",
"captured_at": "2026-04-10T15:50:48.562920339Z",
"tool_version": "tscap/dev",
"captured_at": "2026-10-30T16:35:22.099730559Z",
"tool_version": "tscap/5f80ee6150559e777612549d896d444b50768737",
"client_version": "1.102.5-ERR-BuildInfo capver 142",
"tailnet": "odin@example.com",
"input": {
"full_policy": "{\"acls\":[{\"action\":\"accept\",\"dst\":[\"autogroup:self:*\"],\"src\":[\"*\"]},{\"action\":\"accept\",\"dst\":[\"odin@example.com:*\"],\"src\":[\"odin@example.com\"]}],\"autoApprovers\":{\"routes\":{\"0.0.0.0/0\":[\"tag:exit\"],\"10.33.0.0/16\":[\"tag:router\"],\"::/0\":[\"tag:exit\"]}},\"groups\":{\"group:admins\":[\"odin@example.com\"],\"group:developers\":[\"thor@example.org\",\"odin@example.com\"],\"group:empty\":[],\"group:monitors\":[\"freya@example.com\"]},\"hosts\":{\"internal\":\"10.0.0.0/8\",\"prodbox\":\"100.103.8.15\",\"subnet24\":\"192.168.1.0/24\",\"webserver\":\"100.108.74.26\"},\"tagOwners\":{\"tag:client\":[\"odin@example.com\"],\"tag:exit\":[\"odin@example.com\"],\"tag:pidgey\":[\"odin@example.com\"],\"tag:pidgeotto\":[\"odin@example.com\"],\"tag:group-a\":[\"odin@example.com\"],\"tag:group-b\":[\"odin@example.com\"],\"tag:ha\":[\"odin@example.com\"],\"tag:prod\":[\"odin@example.com\"],\"tag:router\":[\"odin@example.com\"],\"tag:spearow\":[\"odin@example.com\"],\"tag:fearow\":[\"odin@example.com\"],\"tag:server\":[\"odin@example.com\"]}}",
"api_response_code": 200,
"tailnet": {
"dns": {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
"settings": {}
},
"scenario_hujson": " \n{\"category\": \"acl\", \"description\": \"acl d08\", \"id\": \"acl-d08\", \"policy\": {\n\t\"acls\": [{\"action\": \"accept\", \"dst\": [\"autogroup:self:*\"], \"src\": [\"*\"]}, {\n\t\t\"action\": \"accept\",\n\t\t\"dst\": [\"odin@example.com:*\"],\n\t\t\"src\": [\"odin@example.com\"]\n\t}],\n\t\"autoApprovers\": {\"routes\": {\n\t\t\"0.0.0.0/0\": [\"tag:exit\"],\n\t\t\"10.33.0.0/16\": [\"tag:router\"],\n\t\t\"::/0\": [\"tag:exit\"]\n\t}},\n\t\"groups\": {\n\t\t\"group:admins\": [\"odin@example.com\"],\n\t\t\"group:developers\": [\"thor@example.org\", \"odin@example.com\"],\n\t\t\"group:empty\": [],\n\t\t\"group:monitors\": [\"freya@example.com\"]\n\t},\n\t\"hosts\": {\n\t\t\"internal\": \"10.0.0.0/8\",\n\t\t\"prodbox\": \"100.103.8.15\",\n\t\t\"subnet24\": \"192.168.1.0/24\",\n\t\t\"webserver\": \"100.108.74.26\"\n\t},\n\t\"tagOwners\": {\n\t\t\"tag:client\": [\"odin@example.com\"],\n\t\t\"tag:exit\": [\"odin@example.com\"],\n\t\t\"tag:pidgey\": [\"odin@example.com\"],\n\t\t\"tag:pidgeotto\": [\"odin@example.com\"],\n\t\t\"tag:group-a\": [\"odin@example.com\"],\n\t\t\"tag:group-b\": [\"odin@example.com\"],\n\t\t\"tag:ha\": [\"odin@example.com\"],\n\t\t\"tag:prod\": [\"odin@example.com\"],\n\t\t\"tag:router\": [\"odin@example.com\"],\n\t\t\"tag:spearow\": [\"odin@example.com\"],\n\t\t\"tag:fearow\": [\"odin@example.com\"],\n\t\t\"tag:server\": [\"odin@example.com\"]\n\t}\n}, \"tailnet\": {\n\t\"dns\": {\"magic_dns\": false, \"nameservers\": [], \"search_paths\": [], \"split_dns\": {}},\n\t\"settings\": {}\n}, \"topology\": \"../_topologies/acl.hujson\"}\n",
"scenario_path": "scenarios/acl/acl-d08.hujson"
"scenario_path": "scenarios/acl/acl-d08.hujson",
"full_policy": {
"acls": [{"action": "accept", "dst": ["autogroup:self:*"], "src": ["*"]}, {
"action": "accept",
"dst": ["odin@example.com:*"],
"src": ["odin@example.com"]
}],
"autoApprovers": {"routes": {
"0.0.0.0/0": ["tag:exit"],
"10.33.0.0/16": ["tag:router"],
"::/0": ["tag:exit"]
}},
"groups": {
"group:admins": ["odin@example.com"],
"group:developers": ["thor@example.org", "odin@example.com"],
"group:empty": [],
"group:monitors": ["freya@example.com"]
},
"hosts": {
"internal": "10.0.0.0/8",
"prodbox": "100.103.8.15",
"subnet24": "192.168.1.0/24",
"webserver": "100.108.74.26"
},
"tagOwners": {
"tag:client": ["odin@example.com"],
"tag:exit": ["odin@example.com"],
"tag:pidgey": ["odin@example.com"],
"tag:pidgeotto": ["odin@example.com"],
"tag:group-a": ["odin@example.com"],
"tag:group-b": ["odin@example.com"],
"tag:ha": ["odin@example.com"],
"tag:prod": ["odin@example.com"],
"tag:router": ["odin@example.com"],
"tag:spearow": ["odin@example.com"],
"tag:fearow": ["odin@example.com"],
"tag:server": ["odin@example.com"]
}
}
},
"topology": {"users": [
{"id": 1, "name": "odin", "email": "odin@example.com"},
@@ -31,84 +69,90 @@
], "nodes": {"beedrill": {
"hostname": "beedrill",
"tags": ["tag:server"],
"ipv4": "100.68.182.109",
"ipv6": "fd7a:115c:a1e0::a437:b66d",
"ipv4": "100.64.0.16",
"ipv6": "fd7a:115c:a1e0::10",
"routable_ips": [],
"approved_routes": []
}, "bulbasaur": {
"hostname": "bulbasaur",
"tags": [],
"ipv4": "100.118.231.65",
"ipv6": "fd7a:115c:a1e0::6537:e741",
"ipv4": "100.64.0.19",
"ipv6": "fd7a:115c:a1e0::13",
"user": "odin",
"routable_ips": [],
"approved_routes": []
}, "charmander": {
"hostname": "charmander",
"tags": ["tag:exit"],
"ipv4": "100.115.168.119",
"ipv6": "fd7a:115c:a1e0::3d37:a877",
"ipv4": "100.64.0.4",
"ipv6": "fd7a:115c:a1e0::4",
"routable_ips": ["0.0.0.0/0", "::/0"],
"approved_routes": []
}, "ivysaur": {
"hostname": "ivysaur",
"tags": [],
"ipv4": "100.84.188.24",
"ipv6": "fd7a:115c:a1e0::5e37:bc18",
"ipv4": "100.64.0.17",
"ipv6": "fd7a:115c:a1e0::11",
"user": "thor",
"routable_ips": [],
"approved_routes": []
}, "kakuna": {
"hostname": "kakuna",
"tags": ["tag:prod"],
"ipv4": "100.90.208.94",
"ipv6": "fd7a:115c:a1e0::d537:d05e",
"ipv4": "100.64.0.15",
"ipv6": "fd7a:115c:a1e0::f",
"routable_ips": [],
"approved_routes": []
}, "squirtle": {
"hostname": "squirtle",
"tags": ["tag:router"],
"ipv4": "100.73.126.103",
"ipv6": "fd7a:115c:a1e0::8937:7e67",
"ipv4": "100.64.0.13",
"ipv6": "fd7a:115c:a1e0::d",
"routable_ips": ["10.33.0.0/16"],
"approved_routes": []
"approved_routes": ["10.33.0.0/16"]
}, "venusaur": {
"hostname": "venusaur",
"tags": [],
"ipv4": "100.78.65.94",
"ipv6": "fd7a:115c:a1e0::7037:415e",
"ipv4": "100.64.0.18",
"ipv6": "fd7a:115c:a1e0::12",
"user": "freya",
"routable_ips": [],
"approved_routes": []
}, "weedle": {
"hostname": "weedle",
"tags": ["tag:client"],
"ipv4": "100.74.13.11",
"ipv6": "fd7a:115c:a1e0::c037:d0b",
"ipv4": "100.64.0.14",
"ipv6": "fd7a:115c:a1e0::e",
"routable_ips": [],
"approved_routes": []
}}},
"captures": {"beedrill": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 4048514358687365,
"StableID": "nJdgPDcacY11CNTRL",
"ID": 5696249771089994,
"StableID": "nVE4PhpqUm11CNTRL",
"Name": "beedrill.tail78f774.ts.net.",
"User": 4048514358687365,
"Key": "nodekey:ea4d6d9387cab50244ae7c00242904d2a639bd2b7683e2c1f0d2beada484b66c",
"DiscoKey": "discokey:5543fd622c75144449c69d0c488dee131342dffcdbed3928fd772795d78ced74",
"Addresses": ["100.68.182.109/32", "fd7a:115c:a1e0::a437:b66d/128"],
"AllowedIPs": ["100.68.182.109/32", "fd7a:115c:a1e0::a437:b66d/128"],
"Endpoints": ["77.164.248.136:37877", "10.65.0.27:37877", "172.17.0.1:37877"],
"User": 5696249771089994,
"Key": "nodekey:abc228ffa1e4735494739ebde5dd6e59c67163425edd5c58835643520701f511",
"DiscoKey": "discokey:76a6c7ad77e7ad344112a5d48fae8c2808e8a16be91edd1c94b01cdf48846329",
"Addresses": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
"Endpoints": [
"192.0.2.1:52520",
"198.51.100.1:52520",
"198.51.100.2:52520",
"198.51.100.3:52520"
],
"Hostinfo": {"Hostname": "beedrill", "RequestTags": ["tag:server"], "Services": [
{"Proto": "peerapi4", "Port": 59605},
{"Proto": "peerapi6", "Port": 59605},
{"Proto": "peerapi4", "Port": 50358},
{"Proto": "peerapi6", "Port": 50358},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T15:50:52.545552903Z",
"Created": "2026-10-30T16:35:26.013611224Z",
"Tags": ["tag:server"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -123,6 +167,7 @@
"ComputedNameWithHost": "beedrill"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -133,8 +178,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:ea4d6d9387cab50244ae7c00242904d2a639bd2b7683e2c1f0d2beada484b66c",
"MachineKey": "mkey:12f59658ea98cd11df344a1b1cdf340defdcff9602d93854de2206e583fa733b",
"NodeKey": "nodekey:abc228ffa1e4735494739ebde5dd6e59c67163425edd5c58835643520701f511",
"MachineKey": "mkey:477cfb8f9cc06c9ed7350e1ac68e5f54c76fc8d3c2d5ec28ffedf6fd5b9cfc60",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -960,52 +1005,57 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {"4048514358687365": {
"ID": 4048514358687365,
"UserProfiles": {"5696249771089994": {
"ID": 5696249771089994,
"LoginName": "beedrill.tail78f774.ts.net",
"DisplayName": "beedrill"
}}
}}, "bulbasaur": {
"packet_filter_rules": [{"SrcIPs": ["100.118.231.65", "fd7a:115c:a1e0::6537:e741"], "DstPorts": [
{"IP": "100.118.231.65", "Ports": {"First": 0, "Last": 65535}},
{"IP": "fd7a:115c:a1e0::6537:e741", "Ports": {"First": 0, "Last": 65535}},
{"IP": "100.118.231.65", "Ports": {"First": 0, "Last": 65535}},
{"IP": "fd7a:115c:a1e0::6537:e741", "Ports": {"First": 0, "Last": 65535}}
"packet_filter_rules": [{"SrcIPs": ["100.64.0.19", "fd7a:115c:a1e0::13"], "DstPorts": [
{"IP": "100.64.0.19", "Ports": {"First": 0, "Last": 65535}},
{"IP": "fd7a:115c:a1e0::13", "Ports": {"First": 0, "Last": 65535}},
{"IP": "100.64.0.19", "Ports": {"First": 0, "Last": 65535}},
{"IP": "fd7a:115c:a1e0::13", "Ports": {"First": 0, "Last": 65535}}
]}],
"packet_filter_matches": [{
"IPProto": [6, 17, 1, 58],
"Srcs": ["100.118.231.65/32", "fd7a:115c:a1e0::6537:e741/128"],
"Srcs": ["100.64.0.19/32", "fd7a:115c:a1e0::13/128"],
"SrcCaps": null,
"Dsts": [{"Net": "100.118.231.65/32", "Ports": {"First": 0, "Last": 65535}}, {
"Net": "fd7a:115c:a1e0::6537:e741/128",
"Ports": {"First": 0, "Last": 65535}
}, {"Net": "100.118.231.65/32", "Ports": {"First": 0, "Last": 65535}}, {
"Net": "fd7a:115c:a1e0::6537:e741/128",
"Ports": {"First": 0, "Last": 65535}
}],
"Dsts": [
{"Net": "100.64.0.19/32", "Ports": {"First": 0, "Last": 65535}},
{"Net": "fd7a:115c:a1e0::13/128", "Ports": {"First": 0, "Last": 65535}},
{"Net": "100.64.0.19/32", "Ports": {"First": 0, "Last": 65535}},
{"Net": "fd7a:115c:a1e0::13/128", "Ports": {"First": 0, "Last": 65535}}
],
"Caps": []
}],
"netmap": {
"Cached": false,
"SelfNode": {
"ID": 2116778947192257,
"StableID": "n6DgzDChXH11CNTRL",
"ID": 4281040095419714,
"StableID": "n79xVWftRa11CNTRL",
"Name": "bulbasaur.tail78f774.ts.net.",
"User": 4156223528223174,
"Key": "nodekey:3485f47021f2e206638799f3d214b8a8eae7190089964cf14f9b441c65b6e740",
"KeyExpiry": "2026-10-07T15:50:54Z",
"DiscoKey": "discokey:3d747e38fe1cd95f864e628a3e48cd056f88756f77644a9f0e3cf63b9bbd327c",
"Addresses": ["100.118.231.65/32", "fd7a:115c:a1e0::6537:e741/128"],
"AllowedIPs": ["100.118.231.65/32", "fd7a:115c:a1e0::6537:e741/128"],
"Endpoints": ["77.164.248.136:59203", "10.65.0.27:59203", "172.17.0.1:59203"],
"Key": "nodekey:6515541d8d8ff01f42686108b03f480b920f41883e5189b3f71682ea71840043",
"KeyExpiry": "2027-04-28T16:35:27Z",
"DiscoKey": "discokey:b2c7163e2297b9df023683af65fd6b4d55960035d5f5ae55bcc8bc998857e952",
"Addresses": ["100.64.0.19/32", "fd7a:115c:a1e0::13/128"],
"AllowedIPs": ["100.64.0.19/32", "fd7a:115c:a1e0::13/128"],
"Endpoints": [
"192.0.2.1:48000",
"198.51.100.1:48000",
"198.51.100.2:48000",
"198.51.100.3:48000"
],
"Hostinfo": {"Hostname": "bulbasaur", "Services": [
{"Proto": "peerapi4", "Port": 55773},
{"Proto": "peerapi6", "Port": 55773},
{"Proto": "peerapi4", "Port": 38156},
{"Proto": "peerapi6", "Port": 38156},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T15:50:54.167335126Z",
"Created": "2026-10-30T16:35:27.698856794Z",
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-admin": null,
"https://tailscale.com/cap/is-owner": null,
@@ -1021,6 +1071,7 @@
"ComputedNameWithHost": "bulbasaur"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-admin",
"https://tailscale.com/cap/is-owner",
@@ -1032,28 +1083,27 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:3485f47021f2e206638799f3d214b8a8eae7190089964cf14f9b441c65b6e740",
"MachineKey": "mkey:7a5f4581568506a253c4c5f57c28ba357636715a99a78782536d4a5b50f72c3a",
"NodeKey": "nodekey:6515541d8d8ff01f42686108b03f480b920f41883e5189b3f71682ea71840043",
"MachineKey": "mkey:39882823b79adc141b8244caedb5a694404a081323abf95c6e90c45fc9dd5c15",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [{
"IPProto": [6, 17, 1, 58],
"Srcs": ["100.118.231.65/32", "fd7a:115c:a1e0::6537:e741/128"],
"Srcs": ["100.64.0.19/32", "fd7a:115c:a1e0::13/128"],
"SrcCaps": null,
"Dsts": [{"Net": "100.118.231.65/32", "Ports": {"First": 0, "Last": 65535}}, {
"Net": "fd7a:115c:a1e0::6537:e741/128",
"Ports": {"First": 0, "Last": 65535}
}, {"Net": "100.118.231.65/32", "Ports": {"First": 0, "Last": 65535}}, {
"Net": "fd7a:115c:a1e0::6537:e741/128",
"Ports": {"First": 0, "Last": 65535}
}],
"Dsts": [
{"Net": "100.64.0.19/32", "Ports": {"First": 0, "Last": 65535}},
{"Net": "fd7a:115c:a1e0::13/128", "Ports": {"First": 0, "Last": 65535}},
{"Net": "100.64.0.19/32", "Ports": {"First": 0, "Last": 65535}},
{"Net": "fd7a:115c:a1e0::13/128", "Ports": {"First": 0, "Last": 65535}}
],
"Caps": []
}],
"PacketFilterRules": [{"SrcIPs": ["100.118.231.65", "fd7a:115c:a1e0::6537:e741"], "DstPorts": [
{"IP": "100.118.231.65", "Ports": {"First": 0, "Last": 65535}},
{"IP": "fd7a:115c:a1e0::6537:e741", "Ports": {"First": 0, "Last": 65535}},
{"IP": "100.118.231.65", "Ports": {"First": 0, "Last": 65535}},
{"IP": "fd7a:115c:a1e0::6537:e741", "Ports": {"First": 0, "Last": 65535}}
"PacketFilterRules": [{"SrcIPs": ["100.64.0.19", "fd7a:115c:a1e0::13"], "DstPorts": [
{"IP": "100.64.0.19", "Ports": {"First": 0, "Last": 65535}},
{"IP": "fd7a:115c:a1e0::13", "Ports": {"First": 0, "Last": 65535}},
{"IP": "100.64.0.19", "Ports": {"First": 0, "Last": 65535}},
{"IP": "fd7a:115c:a1e0::13", "Ports": {"First": 0, "Last": 65535}}
]}],
"SSHPolicy": {"rules": []},
"CollectServices": false,
@@ -1885,29 +1935,35 @@
}, "charmander": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 1980227139393879,
"StableID": "nxHfL8DrTG11CNTRL",
"ID": 6001706972743771,
"StableID": "nkoUJafBso11CNTRL",
"Name": "charmander.tail78f774.ts.net.",
"User": 1980227139393879,
"Key": "nodekey:6d70a2dfeaa602365ee9ce4d526554dd099a8103810f9698d6988a7c3df3a876",
"DiscoKey": "discokey:88d6e30474e94be4ada20e90b753368ee5cce0c5e18f5db116c0e0d7dccb195b",
"Addresses": ["100.115.168.119/32", "fd7a:115c:a1e0::3d37:a877/128"],
"AllowedIPs": ["100.115.168.119/32", "fd7a:115c:a1e0::3d37:a877/128"],
"Endpoints": ["77.164.248.136:60076", "10.65.0.27:60076", "172.17.0.1:60076"],
"User": 6001706972743771,
"Key": "nodekey:9cea792e4a5cfd44e50bd206fa90604f97147ba97babdde4f8e8a576fe843349",
"DiscoKey": "discokey:cf09ca4543a172e07dbd99924ef38f2a7fb54f90aaafa830b43fc1c76c5ed920",
"Addresses": ["100.64.0.4/32", "fd7a:115c:a1e0::4/128"],
"AllowedIPs": ["100.64.0.4/32", "fd7a:115c:a1e0::4/128"],
"Endpoints": [
"192.0.2.1:45147",
"198.51.100.1:45147",
"198.51.100.2:45147",
"198.51.100.3:45147"
],
"Hostinfo": {
"Hostname": "charmander",
"RoutableIPs": ["0.0.0.0/0", "::/0"],
"RequestTags": ["tag:exit"],
"Services": [
{"Proto": "peerapi4", "Port": 56677},
{"Proto": "peerapi6", "Port": 56677},
{"Proto": "peerapi4", "Port": 37067},
{"Proto": "peerapi6", "Port": 37067},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]
},
"Created": "2026-04-10T15:50:50.39862047Z",
"Created": "2026-10-30T16:35:23.686569414Z",
"Tags": ["tag:exit"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -1922,6 +1978,7 @@
"ComputedNameWithHost": "charmander"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -1932,8 +1989,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:6d70a2dfeaa602365ee9ce4d526554dd099a8103810f9698d6988a7c3df3a876",
"MachineKey": "mkey:284cf2956626f9dd54279cb015878042aa1f8afbb98ad9d4666ad4a84364d84e",
"NodeKey": "nodekey:9cea792e4a5cfd44e50bd206fa90604f97147ba97babdde4f8e8a576fe843349",
"MachineKey": "mkey:270de739107a7fdb2b8995074904609c29e0c548dbaa229f1753a6d2d3c5a51b",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -2759,47 +2816,53 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {"1980227139393879": {
"ID": 1980227139393879,
"UserProfiles": {"6001706972743771": {
"ID": 6001706972743771,
"LoginName": "charmander.tail78f774.ts.net",
"DisplayName": "charmander"
}}
}}, "ivysaur": {
"packet_filter_rules": [{"SrcIPs": ["100.84.188.24", "fd7a:115c:a1e0::5e37:bc18"], "DstPorts": [
{"IP": "100.84.188.24", "Ports": {"First": 0, "Last": 65535}},
{"IP": "fd7a:115c:a1e0::5e37:bc18", "Ports": {"First": 0, "Last": 65535}}
"packet_filter_rules": [{"SrcIPs": ["100.64.0.17", "fd7a:115c:a1e0::11"], "DstPorts": [
{"IP": "100.64.0.17", "Ports": {"First": 0, "Last": 65535}},
{"IP": "fd7a:115c:a1e0::11", "Ports": {"First": 0, "Last": 65535}}
]}],
"packet_filter_matches": [{
"IPProto": [6, 17, 1, 58],
"Srcs": ["100.84.188.24/32", "fd7a:115c:a1e0::5e37:bc18/128"],
"Srcs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
"SrcCaps": null,
"Dsts": [{"Net": "100.84.188.24/32", "Ports": {"First": 0, "Last": 65535}}, {
"Net": "fd7a:115c:a1e0::5e37:bc18/128",
"Ports": {"First": 0, "Last": 65535}
}],
"Dsts": [
{"Net": "100.64.0.17/32", "Ports": {"First": 0, "Last": 65535}},
{"Net": "fd7a:115c:a1e0::11/128", "Ports": {"First": 0, "Last": 65535}}
],
"Caps": []
}],
"netmap": {
"Cached": false,
"SelfNode": {
"ID": 2397722153310275,
"StableID": "nEnJ5X6wiK11CNTRL",
"ID": 3704151245104539,
"StableID": "nSA5GnmcvV11CNTRL",
"Name": "ivysaur.tail78f774.ts.net.",
"User": 4538565228176803,
"Key": "nodekey:66e6cb28507c3b0d0508830b57f5226722359489d63feb3e5c4d7b825e14bc17",
"KeyExpiry": "2026-10-07T15:50:53Z",
"DiscoKey": "discokey:999ec850a26eb55941d5fd6421acedce7e8c83101b9a3e75ba7f753af985b930",
"Addresses": ["100.84.188.24/32", "fd7a:115c:a1e0::5e37:bc18/128"],
"AllowedIPs": ["100.84.188.24/32", "fd7a:115c:a1e0::5e37:bc18/128"],
"Endpoints": ["77.164.248.136:53011", "10.65.0.27:53011", "172.17.0.1:53011"],
"Key": "nodekey:135d89b3f4e82f40e56818e33be8578e1948626b999fbcc61691a91293091f3c",
"KeyExpiry": "2027-04-28T16:35:26Z",
"DiscoKey": "discokey:e757e42fac86b0219cfe8aa37ad94b296122784dfaa5c221cc7d4aebb9af2969",
"Addresses": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
"Endpoints": [
"192.0.2.1:33235",
"198.51.100.1:33235",
"198.51.100.2:33235",
"198.51.100.3:33235"
],
"Hostinfo": {"Hostname": "ivysaur", "Services": [
{"Proto": "peerapi4", "Port": 42652},
{"Proto": "peerapi6", "Port": 42652},
{"Proto": "peerapi4", "Port": 62496},
{"Proto": "peerapi6", "Port": 62496},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T15:50:53.084657922Z",
"Created": "2026-10-30T16:35:26.595553979Z",
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-admin": null,
"https://tailscale.com/cap/ssh": null,
@@ -2814,6 +2877,7 @@
"ComputedNameWithHost": "ivysaur"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-admin",
"https://tailscale.com/cap/ssh",
@@ -2824,23 +2888,23 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:66e6cb28507c3b0d0508830b57f5226722359489d63feb3e5c4d7b825e14bc17",
"MachineKey": "mkey:14fe8ae6913c1f6f4a245439e0f3d3d5de837e598c65206a878b51dc778eb018",
"NodeKey": "nodekey:135d89b3f4e82f40e56818e33be8578e1948626b999fbcc61691a91293091f3c",
"MachineKey": "mkey:c0dcf4beaddc2f4d5aeb00d9263a9784abd2af00dabb9c20b523ff1a9fc5da68",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [{
"IPProto": [6, 17, 1, 58],
"Srcs": ["100.84.188.24/32", "fd7a:115c:a1e0::5e37:bc18/128"],
"Srcs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
"SrcCaps": null,
"Dsts": [{"Net": "100.84.188.24/32", "Ports": {"First": 0, "Last": 65535}}, {
"Net": "fd7a:115c:a1e0::5e37:bc18/128",
"Ports": {"First": 0, "Last": 65535}
}],
"Dsts": [
{"Net": "100.64.0.17/32", "Ports": {"First": 0, "Last": 65535}},
{"Net": "fd7a:115c:a1e0::11/128", "Ports": {"First": 0, "Last": 65535}}
],
"Caps": []
}],
"PacketFilterRules": [{"SrcIPs": ["100.84.188.24", "fd7a:115c:a1e0::5e37:bc18"], "DstPorts": [
{"IP": "100.84.188.24", "Ports": {"First": 0, "Last": 65535}},
{"IP": "fd7a:115c:a1e0::5e37:bc18", "Ports": {"First": 0, "Last": 65535}}
"PacketFilterRules": [{"SrcIPs": ["100.64.0.17", "fd7a:115c:a1e0::11"], "DstPorts": [
{"IP": "100.64.0.17", "Ports": {"First": 0, "Last": 65535}},
{"IP": "fd7a:115c:a1e0::11", "Ports": {"First": 0, "Last": 65535}}
]}],
"SSHPolicy": {"rules": []},
"CollectServices": false,
@@ -3663,31 +3727,39 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {
"4538565228176803": {"ID": 4538565228176803, "LoginName": "thor@example.org", "DisplayName": "thor"}
}
"UserProfiles": {"4538565228176803": {
"ID": 4538565228176803,
"LoginName": "thor@example.org",
"DisplayName": "thor"
}}
}
}, "kakuna": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 95258267813808,
"StableID": "nHqwvqG9k111CNTRL",
"ID": 8861619092721427,
"StableID": "nvA231iSCC21CNTRL",
"Name": "kakuna.tail78f774.ts.net.",
"User": 95258267813808,
"Key": "nodekey:49af7af592744a75fd4ed73e9c1e27d41c1b7b1f64e8ca0d88ec0ec1d59ad05d",
"DiscoKey": "discokey:507d1a05096f91b79dfe0900942788f23c7a87970025500e0667d021395dfb16",
"Addresses": ["100.90.208.94/32", "fd7a:115c:a1e0::d537:d05e/128"],
"AllowedIPs": ["100.90.208.94/32", "fd7a:115c:a1e0::d537:d05e/128"],
"Endpoints": ["77.164.248.136:53131", "10.65.0.27:53131", "172.17.0.1:53131"],
"User": 8861619092721427,
"Key": "nodekey:2f67aa7f9401af042be81edb67e63259402b310997b059003ea3a0ab92ce8e33",
"DiscoKey": "discokey:5180c2326f0859bffb932832d6bf1e8640169e0eabdf996fb4e2c48f31d8cd58",
"Addresses": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
"Endpoints": [
"192.0.2.1:49611",
"198.51.100.1:49611",
"198.51.100.2:49611",
"198.51.100.3:49611"
],
"Hostinfo": {"Hostname": "kakuna", "RequestTags": ["tag:prod"], "Services": [
{"Proto": "peerapi4", "Port": 52120},
{"Proto": "peerapi6", "Port": 52120},
{"Proto": "peerapi4", "Port": 51523},
{"Proto": "peerapi6", "Port": 51523},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T15:50:52.005762748Z",
"Created": "2026-10-30T16:35:25.512922508Z",
"Tags": ["tag:prod"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -3702,6 +3774,7 @@
"ComputedNameWithHost": "kakuna"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -3712,8 +3785,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:49af7af592744a75fd4ed73e9c1e27d41c1b7b1f64e8ca0d88ec0ec1d59ad05d",
"MachineKey": "mkey:dacdc001b518403144ff7610f1ee8f5549c98adcf7154df8091ff3d860723842",
"NodeKey": "nodekey:2f67aa7f9401af042be81edb67e63259402b310997b059003ea3a0ab92ce8e33",
"MachineKey": "mkey:c18c39489f72b372540e5005298fc0dada2d296ce53e2ac296ddee6d615f6269",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -4539,38 +4612,44 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {"95258267813808": {
"ID": 95258267813808,
"UserProfiles": {"8861619092721427": {
"ID": 8861619092721427,
"LoginName": "kakuna.tail78f774.ts.net",
"DisplayName": "kakuna"
}}
}}, "squirtle": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 7411873552531413,
"StableID": "n8py4JMrsz11CNTRL",
"ID": 3619539533749992,
"StableID": "nHDs4dAJGV11CNTRL",
"Name": "squirtle.tail78f774.ts.net.",
"User": 7411873552531413,
"Key": "nodekey:eb51bc1449571036cb8712df9799c048080889624495bb73784e4df289497e66",
"DiscoKey": "discokey:ffd6efaf30831d48b9bffea4bce479642a273ffa0f82e90aa1df5ce05155767f",
"Addresses": ["100.73.126.103/32", "fd7a:115c:a1e0::8937:7e67/128"],
"AllowedIPs": ["100.73.126.103/32", "fd7a:115c:a1e0::8937:7e67/128", "10.33.0.0/16"],
"Endpoints": ["77.164.248.136:33067", "10.65.0.27:33067", "172.17.0.1:33067"],
"User": 3619539533749992,
"Key": "nodekey:9364b9f359618a49d4ed43201a1f97149eda4356fd1be5254c2bd9532dc42303",
"DiscoKey": "discokey:12dc69e3eb579892102633b1f1251b207d32e347e4f62d6bf6d30e012584a950",
"Addresses": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128", "10.33.0.0/16"],
"Endpoints": [
"192.0.2.1:42090",
"198.51.100.1:42090",
"198.51.100.2:42090",
"198.51.100.3:42090"
],
"Hostinfo": {
"Hostname": "squirtle",
"RoutableIPs": ["10.33.0.0/16"],
"RequestTags": ["tag:router"],
"Services": [
{"Proto": "peerapi4", "Port": 53214},
{"Proto": "peerapi6", "Port": 53214},
{"Proto": "peerapi4", "Port": 43119},
{"Proto": "peerapi6", "Port": 43119},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]
},
"Created": "2026-04-10T15:50:50.96175544Z",
"Created": "2026-10-30T16:35:24.436052078Z",
"Tags": ["tag:router"],
"PrimaryRoutes": ["10.33.0.0/16"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -4585,6 +4664,7 @@
"ComputedNameWithHost": "squirtle"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -4595,8 +4675,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:eb51bc1449571036cb8712df9799c048080889624495bb73784e4df289497e66",
"MachineKey": "mkey:b70fcb7dfeb8fee35777408087b7b7970ae6140596d00fa02482166b6b14040d",
"NodeKey": "nodekey:9364b9f359618a49d4ed43201a1f97149eda4356fd1be5254c2bd9532dc42303",
"MachineKey": "mkey:28b5b1cf90db9e3d76459301fa044fb4bd229144e394bc739450f46fb4ce9a55",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -5422,47 +5502,53 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {"7411873552531413": {
"ID": 7411873552531413,
"UserProfiles": {"3619539533749992": {
"ID": 3619539533749992,
"LoginName": "squirtle.tail78f774.ts.net",
"DisplayName": "squirtle"
}}
}}, "venusaur": {
"packet_filter_rules": [{"SrcIPs": ["100.78.65.94", "fd7a:115c:a1e0::7037:415e"], "DstPorts": [
{"IP": "100.78.65.94", "Ports": {"First": 0, "Last": 65535}},
{"IP": "fd7a:115c:a1e0::7037:415e", "Ports": {"First": 0, "Last": 65535}}
"packet_filter_rules": [{"SrcIPs": ["100.64.0.18", "fd7a:115c:a1e0::12"], "DstPorts": [
{"IP": "100.64.0.18", "Ports": {"First": 0, "Last": 65535}},
{"IP": "fd7a:115c:a1e0::12", "Ports": {"First": 0, "Last": 65535}}
]}],
"packet_filter_matches": [{
"IPProto": [6, 17, 1, 58],
"Srcs": ["100.78.65.94/32", "fd7a:115c:a1e0::7037:415e/128"],
"Srcs": ["100.64.0.18/32", "fd7a:115c:a1e0::12/128"],
"SrcCaps": null,
"Dsts": [{"Net": "100.78.65.94/32", "Ports": {"First": 0, "Last": 65535}}, {
"Net": "fd7a:115c:a1e0::7037:415e/128",
"Ports": {"First": 0, "Last": 65535}
}],
"Dsts": [
{"Net": "100.64.0.18/32", "Ports": {"First": 0, "Last": 65535}},
{"Net": "fd7a:115c:a1e0::12/128", "Ports": {"First": 0, "Last": 65535}}
],
"Caps": []
}],
"netmap": {
"Cached": false,
"SelfNode": {
"ID": 3974375790809285,
"StableID": "naPM2Y713Y11CNTRL",
"ID": 2749563071394645,
"StableID": "npkbBrMHUN11CNTRL",
"Name": "venusaur.tail78f774.ts.net.",
"User": 3982058329734709,
"Key": "nodekey:461442961de3f627bf563c8f2872d591e91ac30edb2576c685d9015e704e415d",
"KeyExpiry": "2026-10-07T15:50:53Z",
"DiscoKey": "discokey:eab10d5b5688e8177ad52ebded1a93c5fee9d29f1e3b0aa1d6ff23879477db7b",
"Addresses": ["100.78.65.94/32", "fd7a:115c:a1e0::7037:415e/128"],
"AllowedIPs": ["100.78.65.94/32", "fd7a:115c:a1e0::7037:415e/128"],
"Endpoints": ["77.164.248.136:44203", "10.65.0.27:44203", "172.17.0.1:44203"],
"Key": "nodekey:15b824d797fcb69a1a46c325a93ed3ef99c63775c8a9d1c929e34c987a24963c",
"KeyExpiry": "2027-04-28T16:35:27Z",
"DiscoKey": "discokey:06c1b6e58d6d776996638607c4d427d739e8d318145facfbec52fc033162fd55",
"Addresses": ["100.64.0.18/32", "fd7a:115c:a1e0::12/128"],
"AllowedIPs": ["100.64.0.18/32", "fd7a:115c:a1e0::12/128"],
"Endpoints": [
"192.0.2.1:56781",
"198.51.100.1:56781",
"198.51.100.2:56781",
"198.51.100.3:56781"
],
"Hostinfo": {"Hostname": "venusaur", "Services": [
{"Proto": "peerapi4", "Port": 64367},
{"Proto": "peerapi6", "Port": 64367},
{"Proto": "peerapi4", "Port": 42394},
{"Proto": "peerapi6", "Port": 42394},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T15:50:53.625609911Z",
"Created": "2026-10-30T16:35:27.154768596Z",
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-admin": null,
"https://tailscale.com/cap/ssh": null,
@@ -5477,6 +5563,7 @@
"ComputedNameWithHost": "venusaur"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-admin",
"https://tailscale.com/cap/ssh",
@@ -5487,23 +5574,23 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:461442961de3f627bf563c8f2872d591e91ac30edb2576c685d9015e704e415d",
"MachineKey": "mkey:337b6968c8a27e22cfa2f236f244b044ed9c253444e6ec8afb4a426b4fcc5063",
"NodeKey": "nodekey:15b824d797fcb69a1a46c325a93ed3ef99c63775c8a9d1c929e34c987a24963c",
"MachineKey": "mkey:a7779a5ee05e03a41439f73fb4aee8bc7eeb194cd6e3042ef93c6d77c88d8870",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [{
"IPProto": [6, 17, 1, 58],
"Srcs": ["100.78.65.94/32", "fd7a:115c:a1e0::7037:415e/128"],
"Srcs": ["100.64.0.18/32", "fd7a:115c:a1e0::12/128"],
"SrcCaps": null,
"Dsts": [{"Net": "100.78.65.94/32", "Ports": {"First": 0, "Last": 65535}}, {
"Net": "fd7a:115c:a1e0::7037:415e/128",
"Ports": {"First": 0, "Last": 65535}
}],
"Dsts": [
{"Net": "100.64.0.18/32", "Ports": {"First": 0, "Last": 65535}},
{"Net": "fd7a:115c:a1e0::12/128", "Ports": {"First": 0, "Last": 65535}}
],
"Caps": []
}],
"PacketFilterRules": [{"SrcIPs": ["100.78.65.94", "fd7a:115c:a1e0::7037:415e"], "DstPorts": [
{"IP": "100.78.65.94", "Ports": {"First": 0, "Last": 65535}},
{"IP": "fd7a:115c:a1e0::7037:415e", "Ports": {"First": 0, "Last": 65535}}
"PacketFilterRules": [{"SrcIPs": ["100.64.0.18", "fd7a:115c:a1e0::12"], "DstPorts": [
{"IP": "100.64.0.18", "Ports": {"First": 0, "Last": 65535}},
{"IP": "fd7a:115c:a1e0::12", "Ports": {"First": 0, "Last": 65535}}
]}],
"SSHPolicy": {"rules": []},
"CollectServices": false,
@@ -6335,24 +6422,30 @@
}, "weedle": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 5598088596506157,
"StableID": "naR8X6JPik11CNTRL",
"ID": 3950037535610795,
"StableID": "nSxikhnyqX11CNTRL",
"Name": "weedle.tail78f774.ts.net.",
"User": 5598088596506157,
"Key": "nodekey:2aa6baa3036220769bd20277b7314590c7c776c779db442239cbe429c04a0d0a",
"DiscoKey": "discokey:be1eb3c60bf76ed2be6dadd867601e7aa7a7cb6d3571c847c6bb38b1329f2117",
"Addresses": ["100.74.13.11/32", "fd7a:115c:a1e0::c037:d0b/128"],
"AllowedIPs": ["100.74.13.11/32", "fd7a:115c:a1e0::c037:d0b/128"],
"Endpoints": ["77.164.248.136:47292", "10.65.0.27:47292", "172.17.0.1:47292"],
"User": 3950037535610795,
"Key": "nodekey:604b819c54a32fde74726cb1c0613011a03d508b4ee388ffb0f98e61885fff62",
"DiscoKey": "discokey:84dc563760a0a80a48028a5be3e557b2d29901da7615bd88ae7031d2f5cc8e48",
"Addresses": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"Endpoints": [
"192.0.2.1:38951",
"198.51.100.1:38951",
"198.51.100.2:38951",
"198.51.100.3:38951"
],
"Hostinfo": {"Hostname": "weedle", "RequestTags": ["tag:client"], "Services": [
{"Proto": "peerapi4", "Port": 63169},
{"Proto": "peerapi6", "Port": 63169},
{"Proto": "peerapi4", "Port": 63957},
{"Proto": "peerapi6", "Port": 63957},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T15:50:51.464151324Z",
"Created": "2026-10-30T16:35:24.962555593Z",
"Tags": ["tag:client"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -6367,6 +6460,7 @@
"ComputedNameWithHost": "weedle"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -6377,8 +6471,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:2aa6baa3036220769bd20277b7314590c7c776c779db442239cbe429c04a0d0a",
"MachineKey": "mkey:6aa972be5eeeb80949ae2948b0a8860721e19df3a307547df343fb58914b4b1d",
"NodeKey": "nodekey:604b819c54a32fde74726cb1c0613011a03d508b4ee388ffb0f98e61885fff62",
"MachineKey": "mkey:b094f31fe7bb0253794387cb2e09a19baf1f1276c95d1d5403127c7f11ff6a35",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -7204,8 +7298,8 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {"5598088596506157": {
"ID": 5598088596506157,
"UserProfiles": {"3950037535610795": {
"ID": 3950037535610795,
"LoginName": "weedle.tail78f774.ts.net",
"DisplayName": "weedle"
}}
hscontrol/policy/v2/testdata/acl_results/acl-h03.hujson
Generated Vendored
+274 -172
View File
@@ -3,26 +3,60 @@
// acl h03
//
// Nodes with filter rules: 1 of 8
// Captured at: 2026-04-10T16:01:35Z
// tscap version: tscap/dev
// Captured at: 2026-10-30T16:36:03Z
// tool version: tscap/5f80ee6150559e777612549d896d444b50768737
// schema version: 1
{
"schema_version": 1,
"test_id": "acl-h03",
"description": "acl h03",
"category": "acl",
"captured_at": "2026-04-10T16:01:35.672963299Z",
"tool_version": "tscap/dev",
"captured_at": "2026-10-30T16:36:03.7777413Z",
"tool_version": "tscap/5f80ee6150559e777612549d896d444b50768737",
"client_version": "1.102.5-ERR-BuildInfo capver 142",
"tailnet": "odin@example.com",
"input": {
"full_policy": "{\"acls\":[{\"action\":\"accept\",\"dst\":[\"tag:server:22\"],\"src\":[\"internal\"]}],\"autoApprovers\":{\"routes\":{\"0.0.0.0/0\":[\"tag:exit\"],\"10.33.0.0/16\":[\"tag:router\"],\"::/0\":[\"tag:exit\"]}},\"groups\":{\"group:admins\":[\"odin@example.com\"],\"group:developers\":[\"thor@example.org\",\"odin@example.com\"],\"group:empty\":[],\"group:monitors\":[\"freya@example.com\"]},\"hosts\":{\"internal\":\"10.0.0.0/8\",\"prodbox\":\"100.103.8.15\",\"subnet24\":\"192.168.1.0/24\",\"webserver\":\"100.108.74.26\"},\"tagOwners\":{\"tag:client\":[\"odin@example.com\"],\"tag:exit\":[\"odin@example.com\"],\"tag:pidgey\":[\"odin@example.com\"],\"tag:pidgeotto\":[\"odin@example.com\"],\"tag:group-a\":[\"odin@example.com\"],\"tag:group-b\":[\"odin@example.com\"],\"tag:ha\":[\"odin@example.com\"],\"tag:prod\":[\"odin@example.com\"],\"tag:router\":[\"odin@example.com\"],\"tag:spearow\":[\"odin@example.com\"],\"tag:fearow\":[\"odin@example.com\"],\"tag:server\":[\"odin@example.com\"]}}",
"api_response_code": 200,
"tailnet": {
"dns": {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
"settings": {}
},
"scenario_hujson": " \n{\"category\": \"acl\", \"description\": \"acl h03\", \"id\": \"acl-h03\", \"policy\": {\n\t\"acls\": [{\"action\": \"accept\", \"dst\": [\"tag:server:22\"], \"src\": [\"internal\"]}],\n\t\"autoApprovers\": {\"routes\": {\n\t\t\"0.0.0.0/0\": [\"tag:exit\"],\n\t\t\"10.33.0.0/16\": [\"tag:router\"],\n\t\t\"::/0\": [\"tag:exit\"]\n\t}},\n\t\"groups\": {\n\t\t\"group:admins\": [\"odin@example.com\"],\n\t\t\"group:developers\": [\"thor@example.org\", \"odin@example.com\"],\n\t\t\"group:empty\": [],\n\t\t\"group:monitors\": [\"freya@example.com\"]\n\t},\n\t\"hosts\": {\n\t\t\"internal\": \"10.0.0.0/8\",\n\t\t\"prodbox\": \"100.103.8.15\",\n\t\t\"subnet24\": \"192.168.1.0/24\",\n\t\t\"webserver\": \"100.108.74.26\"\n\t},\n\t\"tagOwners\": {\n\t\t\"tag:client\": [\"odin@example.com\"],\n\t\t\"tag:exit\": [\"odin@example.com\"],\n\t\t\"tag:pidgey\": [\"odin@example.com\"],\n\t\t\"tag:pidgeotto\": [\"odin@example.com\"],\n\t\t\"tag:group-a\": [\"odin@example.com\"],\n\t\t\"tag:group-b\": [\"odin@example.com\"],\n\t\t\"tag:ha\": [\"odin@example.com\"],\n\t\t\"tag:prod\": [\"odin@example.com\"],\n\t\t\"tag:router\": [\"odin@example.com\"],\n\t\t\"tag:spearow\": [\"odin@example.com\"],\n\t\t\"tag:fearow\": [\"odin@example.com\"],\n\t\t\"tag:server\": [\"odin@example.com\"]\n\t}\n}, \"tailnet\": {\n\t\"dns\": {\"magic_dns\": false, \"nameservers\": [], \"search_paths\": [], \"split_dns\": {}},\n\t\"settings\": {}\n}, \"topology\": \"../_topologies/acl.hujson\"}\n",
"scenario_path": "scenarios/acl/acl-h03.hujson"
"scenario_path": "scenarios/acl/acl-h03.hujson",
"full_policy": {
"acls": [{"action": "accept", "dst": ["tag:server:22"], "src": ["internal"]}],
"autoApprovers": {"routes": {
"0.0.0.0/0": ["tag:exit"],
"10.33.0.0/16": ["tag:router"],
"::/0": ["tag:exit"]
}},
"groups": {
"group:admins": ["odin@example.com"],
"group:developers": ["thor@example.org", "odin@example.com"],
"group:empty": [],
"group:monitors": ["freya@example.com"]
},
"hosts": {
"internal": "10.0.0.0/8",
"prodbox": "100.103.8.15",
"subnet24": "192.168.1.0/24",
"webserver": "100.108.74.26"
},
"tagOwners": {
"tag:client": ["odin@example.com"],
"tag:exit": ["odin@example.com"],
"tag:pidgey": ["odin@example.com"],
"tag:pidgeotto": ["odin@example.com"],
"tag:group-a": ["odin@example.com"],
"tag:group-b": ["odin@example.com"],
"tag:ha": ["odin@example.com"],
"tag:prod": ["odin@example.com"],
"tag:router": ["odin@example.com"],
"tag:spearow": ["odin@example.com"],
"tag:fearow": ["odin@example.com"],
"tag:server": ["odin@example.com"]
}
}
},
"topology": {"users": [
{"id": 1, "name": "odin", "email": "odin@example.com"},
@@ -31,96 +65,102 @@
], "nodes": {"beedrill": {
"hostname": "beedrill",
"tags": ["tag:server"],
"ipv4": "100.66.229.96",
"ipv6": "fd7a:115c:a1e0::2b37:e560",
"ipv4": "100.64.0.16",
"ipv6": "fd7a:115c:a1e0::10",
"routable_ips": [],
"approved_routes": []
}, "bulbasaur": {
"hostname": "bulbasaur",
"tags": [],
"ipv4": "100.67.63.92",
"ipv6": "fd7a:115c:a1e0::e537:3f5c",
"ipv4": "100.64.0.19",
"ipv6": "fd7a:115c:a1e0::13",
"user": "odin",
"routable_ips": [],
"approved_routes": []
}, "charmander": {
"hostname": "charmander",
"tags": ["tag:exit"],
"ipv4": "100.81.248.57",
"ipv6": "fd7a:115c:a1e0::a237:f839",
"ipv4": "100.64.0.4",
"ipv6": "fd7a:115c:a1e0::4",
"routable_ips": ["0.0.0.0/0", "::/0"],
"approved_routes": []
}, "ivysaur": {
"hostname": "ivysaur",
"tags": [],
"ipv4": "100.90.215.67",
"ipv6": "fd7a:115c:a1e0::9637:d743",
"ipv4": "100.64.0.17",
"ipv6": "fd7a:115c:a1e0::11",
"user": "thor",
"routable_ips": [],
"approved_routes": []
}, "kakuna": {
"hostname": "kakuna",
"tags": ["tag:prod"],
"ipv4": "100.96.186.98",
"ipv6": "fd7a:115c:a1e0::2e37:ba62",
"ipv4": "100.64.0.15",
"ipv6": "fd7a:115c:a1e0::f",
"routable_ips": [],
"approved_routes": []
}, "squirtle": {
"hostname": "squirtle",
"tags": ["tag:router"],
"ipv4": "100.106.44.88",
"ipv6": "fd7a:115c:a1e0::6537:2c58",
"ipv4": "100.64.0.13",
"ipv6": "fd7a:115c:a1e0::d",
"routable_ips": ["10.33.0.0/16"],
"approved_routes": []
"approved_routes": ["10.33.0.0/16"]
}, "venusaur": {
"hostname": "venusaur",
"tags": [],
"ipv4": "100.105.236.73",
"ipv6": "fd7a:115c:a1e0::737:ec49",
"ipv4": "100.64.0.18",
"ipv6": "fd7a:115c:a1e0::12",
"user": "freya",
"routable_ips": [],
"approved_routes": []
}, "weedle": {
"hostname": "weedle",
"tags": ["tag:client"],
"ipv4": "100.70.208.49",
"ipv6": "fd7a:115c:a1e0::bb37:d031",
"ipv4": "100.64.0.14",
"ipv6": "fd7a:115c:a1e0::e",
"routable_ips": [],
"approved_routes": []
}}},
"captures": {"beedrill": {"packet_filter_rules": [{"SrcIPs": ["10.0.0.0/8"], "DstPorts": [
{"IP": "100.66.229.96", "Ports": {"First": 22, "Last": 22}},
{"IP": "fd7a:115c:a1e0::2b37:e560", "Ports": {"First": 22, "Last": 22}}
{"IP": "100.64.0.16", "Ports": {"First": 22, "Last": 22}},
{"IP": "fd7a:115c:a1e0::10", "Ports": {"First": 22, "Last": 22}}
]}], "packet_filter_matches": [{
"IPProto": [6, 17, 1, 58],
"Srcs": ["10.0.0.0/8"],
"SrcCaps": null,
"Dsts": [
{"Net": "100.66.229.96/32", "Ports": {"First": 22, "Last": 22}},
{"Net": "fd7a:115c:a1e0::2b37:e560/128", "Ports": {"First": 22, "Last": 22}}
{"Net": "100.64.0.16/32", "Ports": {"First": 22, "Last": 22}},
{"Net": "fd7a:115c:a1e0::10/128", "Ports": {"First": 22, "Last": 22}}
],
"Caps": []
}], "netmap": {
"Cached": false,
"SelfNode": {
"ID": 1670583669964240,
"StableID": "nPLeGDQc3E11CNTRL",
"ID": 3909706014316063,
"StableID": "ni8uK9MiXX11CNTRL",
"Name": "beedrill.tail78f774.ts.net.",
"User": 1670583669964240,
"Key": "nodekey:15f7d2b74c92045497973410161b7fd1ca81cf8222c36914beb7d5b32b82e55f",
"DiscoKey": "discokey:50d25fbdf6a40195729f31de92f3052205f41a279113d37374c4d7dfafa47f7b",
"Addresses": ["100.66.229.96/32", "fd7a:115c:a1e0::2b37:e560/128"],
"AllowedIPs": ["100.66.229.96/32", "fd7a:115c:a1e0::2b37:e560/128"],
"Endpoints": ["77.164.248.136:35558", "10.65.0.27:35558", "172.17.0.1:35558"],
"User": 3909706014316063,
"Key": "nodekey:30c09441ad1809236a34fc3b09f5d3f0a0373b975b41bf5097339c8850a2e825",
"DiscoKey": "discokey:9d67a2c87202a2f82d9a2db17b2393b659ab23733d1a6e76f5b591e6e4172c22",
"Addresses": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
"Endpoints": [
"192.0.2.1:45127",
"198.51.100.1:45127",
"198.51.100.2:45127",
"198.51.100.3:45127"
],
"Hostinfo": {"Hostname": "beedrill", "RequestTags": ["tag:server"], "Services": [
{"Proto": "peerapi4", "Port": 58957},
{"Proto": "peerapi6", "Port": 58957},
{"Proto": "peerapi4", "Port": 50358},
{"Proto": "peerapi6", "Port": 50358},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T16:01:39.657025522Z",
"Created": "2026-10-30T16:36:08.106069125Z",
"Tags": ["tag:server"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -135,6 +175,7 @@
"ComputedNameWithHost": "beedrill"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -145,25 +186,30 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:15f7d2b74c92045497973410161b7fd1ca81cf8222c36914beb7d5b32b82e55f",
"MachineKey": "mkey:1b511ce607d5924ce1463b8fd9f401e1516b55a6075ec5ecb85788a13475c063",
"NodeKey": "nodekey:30c09441ad1809236a34fc3b09f5d3f0a0373b975b41bf5097339c8850a2e825",
"MachineKey": "mkey:4bb996d8871c28fc6cb596ab421cf4b8a05e2e5a377ffc29d3eebfcdc9f5447e",
"Peers": [{
"ID": 5541287654024823,
"StableID": "npqojMEfGk11CNTRL",
"ID": 439997692411761,
"StableID": "nccsNczGS411CNTRL",
"Name": "squirtle.tail78f774.ts.net.",
"User": 1260082990019555,
"Key": "nodekey:f676ff830bad711cc301e6cca7f5444b225ae3c7f36547c2f5da385a65aa2c57",
"DiscoKey": "discokey:961ce674a521daafb14e8e9bfdb3821f5679c3c18debb16e4e220a1fdeeffb18",
"Addresses": ["100.106.44.88/32", "fd7a:115c:a1e0::6537:2c58/128"],
"AllowedIPs": ["100.106.44.88/32", "fd7a:115c:a1e0::6537:2c58/128", "10.33.0.0/16"],
"Endpoints": ["77.164.248.136:45652", "10.65.0.27:45652", "172.17.0.1:45652"],
"HomeDERP": 14,
"Key": "nodekey:3dc0d52e49d69d9acac7d50c3b80907eba744cd03533376951938b33b4bf3d78",
"DiscoKey": "discokey:3fa326eb84ef8e605b2adcc25e056c5f377e3558b10648420221e049fcf34709",
"Addresses": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128", "10.33.0.0/16"],
"Endpoints": [
"192.0.2.1:41852",
"198.51.100.1:41852",
"198.51.100.2:41852",
"198.51.100.3:41852"
],
"HomeDERP": 14,
"Hostinfo": {"OS": "linux", "Hostname": "squirtle", "Services": [
{"Proto": "peerapi4", "Port": 42380},
{"Proto": "peerapi6", "Port": 42380}
{"Proto": "peerapi4", "Port": 43119},
{"Proto": "peerapi6", "Port": 43119}
]},
"Created": "2026-04-10T16:01:38.035533765Z",
"Cap": 131,
"Created": "2026-10-30T16:36:06.270341841Z",
"Cap": 142,
"Tags": ["tag:router"],
"PrimaryRoutes": ["10.33.0.0/16"],
"Online": true,
@@ -176,14 +222,14 @@
"Srcs": ["10.0.0.0/8"],
"SrcCaps": null,
"Dsts": [
{"Net": "100.66.229.96/32", "Ports": {"First": 22, "Last": 22}},
{"Net": "fd7a:115c:a1e0::2b37:e560/128", "Ports": {"First": 22, "Last": 22}}
{"Net": "100.64.0.16/32", "Ports": {"First": 22, "Last": 22}},
{"Net": "fd7a:115c:a1e0::10/128", "Ports": {"First": 22, "Last": 22}}
],
"Caps": []
}],
"PacketFilterRules": [{"SrcIPs": ["10.0.0.0/8"], "DstPorts": [
{"IP": "100.66.229.96", "Ports": {"First": 22, "Last": 22}},
{"IP": "fd7a:115c:a1e0::2b37:e560", "Ports": {"First": 22, "Last": 22}}
{"IP": "100.64.0.16", "Ports": {"First": 22, "Last": 22}},
{"IP": "fd7a:115c:a1e0::10", "Ports": {"First": 22, "Last": 22}}
]}],
"SSHPolicy": {"rules": []},
"CollectServices": false,
@@ -1010,32 +1056,38 @@
"ID": 1260082990019555,
"LoginName": "tagged-devices",
"DisplayName": "Tagged Devices"
}, "1670583669964240": {
"ID": 1670583669964240,
}, "3909706014316063": {
"ID": 3909706014316063,
"LoginName": "beedrill.tail78f774.ts.net",
"DisplayName": "beedrill"
}}
}}, "bulbasaur": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 2770178999300017,
"StableID": "n4ts8VucdN11CNTRL",
"ID": 6521095354643513,
"StableID": "nS7n3o7Rvs11CNTRL",
"Name": "bulbasaur.tail78f774.ts.net.",
"User": 4156223528223174,
"Key": "nodekey:ee6f0778bcb67e2949cbd9325addaa3b6d28bf67548a4805ba5c77cce5c33f5b",
"KeyExpiry": "2026-10-07T16:01:41Z",
"DiscoKey": "discokey:4f84482ba7c0141a5aff7f73a32a62ff1d271b0b2bcfce71fd8bb8fe3ec18901",
"Addresses": ["100.67.63.92/32", "fd7a:115c:a1e0::e537:3f5c/128"],
"AllowedIPs": ["100.67.63.92/32", "fd7a:115c:a1e0::e537:3f5c/128"],
"Endpoints": ["77.164.248.136:39727", "10.65.0.27:39727", "172.17.0.1:39727"],
"Key": "nodekey:2e92d0bca7ac3eb630f48e59f91509498c61bdc31017edba6b101d306925bd7e",
"KeyExpiry": "2027-04-28T16:36:09Z",
"DiscoKey": "discokey:b6719d8ac2639096110f8b923a5795d6643d1e5113c0f3df4967ac8ab387f73f",
"Addresses": ["100.64.0.19/32", "fd7a:115c:a1e0::13/128"],
"AllowedIPs": ["100.64.0.19/32", "fd7a:115c:a1e0::13/128"],
"Endpoints": [
"192.0.2.1:46852",
"198.51.100.1:46852",
"198.51.100.2:46852",
"198.51.100.3:46852"
],
"Hostinfo": {"Hostname": "bulbasaur", "Services": [
{"Proto": "peerapi4", "Port": 56680},
{"Proto": "peerapi6", "Port": 56680},
{"Proto": "peerapi4", "Port": 38156},
{"Proto": "peerapi6", "Port": 38156},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T16:01:41.291745113Z",
"Created": "2026-10-30T16:36:09.717080375Z",
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-admin": null,
"https://tailscale.com/cap/is-owner": null,
@@ -1051,6 +1103,7 @@
"ComputedNameWithHost": "bulbasaur"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-admin",
"https://tailscale.com/cap/is-owner",
@@ -1062,8 +1115,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:ee6f0778bcb67e2949cbd9325addaa3b6d28bf67548a4805ba5c77cce5c33f5b",
"MachineKey": "mkey:84b90004dc7749b667299a95e7087d68f796d0ea12f4720817cc2fb2b8ae7e55",
"NodeKey": "nodekey:2e92d0bca7ac3eb630f48e59f91509498c61bdc31017edba6b101d306925bd7e",
"MachineKey": "mkey:febcc0ec7e101ae591eef5b024b372404e341d64cea5ee34f8d0aa3a4cd3d55f",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -1897,29 +1950,35 @@
}}, "charmander": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 7534061613996946,
"StableID": "n7PXeL2Cq121CNTRL",
"ID": 4195267568512596,
"StableID": "njcc1nZ3mZ11CNTRL",
"Name": "charmander.tail78f774.ts.net.",
"User": 7534061613996946,
"Key": "nodekey:031a58121f6921541f9ef74a5c04b18a4ecd734306d9f95eeab6ca6da251f838",
"DiscoKey": "discokey:27348edbe7003174f9576f64ceb553f3f6a55dbd23ad784ee62fb209d52f9f1e",
"Addresses": ["100.81.248.57/32", "fd7a:115c:a1e0::a237:f839/128"],
"AllowedIPs": ["100.81.248.57/32", "fd7a:115c:a1e0::a237:f839/128"],
"Endpoints": ["77.164.248.136:56007", "10.65.0.27:56007", "172.17.0.1:56007"],
"User": 4195267568512596,
"Key": "nodekey:3e649af3579ead415d006ec3021412170497076ba5e252872b8f7ba752a2a85c",
"DiscoKey": "discokey:c9a40707f38ea9e16d9a98aff073deeb5e4ea7683feb372c94b6a51eda8c212d",
"Addresses": ["100.64.0.4/32", "fd7a:115c:a1e0::4/128"],
"AllowedIPs": ["100.64.0.4/32", "fd7a:115c:a1e0::4/128"],
"Endpoints": [
"192.0.2.1:36869",
"198.51.100.1:36869",
"198.51.100.2:36869",
"198.51.100.3:36869"
],
"Hostinfo": {
"Hostname": "charmander",
"RoutableIPs": ["0.0.0.0/0", "::/0"],
"RequestTags": ["tag:exit"],
"Services": [
{"Proto": "peerapi4", "Port": 65064},
{"Proto": "peerapi6", "Port": 65064},
{"Proto": "peerapi4", "Port": 37067},
{"Proto": "peerapi6", "Port": 37067},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]
},
"Created": "2026-04-10T16:01:37.489475132Z",
"Created": "2026-10-30T16:36:05.483101972Z",
"Tags": ["tag:exit"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -1934,6 +1993,7 @@
"ComputedNameWithHost": "charmander"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -1944,8 +2004,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:031a58121f6921541f9ef74a5c04b18a4ecd734306d9f95eeab6ca6da251f838",
"MachineKey": "mkey:73f5aa71998e8c0533aae25e7d622c0ea9cfdc3ab321126a9122cd89a6fd937f",
"NodeKey": "nodekey:3e649af3579ead415d006ec3021412170497076ba5e252872b8f7ba752a2a85c",
"MachineKey": "mkey:0257b56c2aa5a699106022792a9c65ec1a7c562ab7b11c764455f62885b4cd03",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -2771,32 +2831,38 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {"7534061613996946": {
"ID": 7534061613996946,
"UserProfiles": {"4195267568512596": {
"ID": 4195267568512596,
"LoginName": "charmander.tail78f774.ts.net",
"DisplayName": "charmander"
}}
}}, "ivysaur": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 6171315903377914,
"StableID": "nyvmhE11Cq11CNTRL",
"ID": 5540540731412088,
"StableID": "nBUBkNcKGk11CNTRL",
"Name": "ivysaur.tail78f774.ts.net.",
"User": 4538565228176803,
"Key": "nodekey:36439741f79b0245462c432e77fa99fbd0f5956d110cd701429bdcc7969ad742",
"KeyExpiry": "2026-10-07T16:01:40Z",
"DiscoKey": "discokey:9dcb1832888f84f0f5661fab06baceb3bec73e34040376bd1cf84b7439c0b038",
"Addresses": ["100.90.215.67/32", "fd7a:115c:a1e0::9637:d743/128"],
"AllowedIPs": ["100.90.215.67/32", "fd7a:115c:a1e0::9637:d743/128"],
"Endpoints": ["77.164.248.136:51449", "10.65.0.27:51449", "172.17.0.1:51449"],
"Key": "nodekey:618978e43387746df569f16b8d8019c0a7f52aa138dc74c11177dc4979733236",
"KeyExpiry": "2027-04-28T16:36:08Z",
"DiscoKey": "discokey:11cf9ad61408a7dc0a16e2e712c5b5eb3842022e0201e06ccac69a753238b979",
"Addresses": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
"Endpoints": [
"192.0.2.1:35114",
"198.51.100.1:35114",
"198.51.100.2:35114",
"198.51.100.3:35114"
],
"Hostinfo": {"Hostname": "ivysaur", "Services": [
{"Proto": "peerapi4", "Port": 45446},
{"Proto": "peerapi6", "Port": 45446},
{"Proto": "peerapi4", "Port": 62496},
{"Proto": "peerapi6", "Port": 62496},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T16:01:40.193227093Z",
"Created": "2026-10-30T16:36:08.636840506Z",
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-admin": null,
"https://tailscale.com/cap/ssh": null,
@@ -2811,6 +2877,7 @@
"ComputedNameWithHost": "ivysaur"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-admin",
"https://tailscale.com/cap/ssh",
@@ -2821,8 +2888,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:36439741f79b0245462c432e77fa99fbd0f5956d110cd701429bdcc7969ad742",
"MachineKey": "mkey:d18756027f50488284fcc2f601f7b323d2b5a77127e697d53490d1427f0dfc68",
"NodeKey": "nodekey:618978e43387746df569f16b8d8019c0a7f52aa138dc74c11177dc4979733236",
"MachineKey": "mkey:7f9fc860b51a7eb98e1851a28e927f674ec56b7c379a8bcbe3028f82b9fae146",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -3648,30 +3715,38 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {
"4538565228176803": {"ID": 4538565228176803, "LoginName": "thor@example.org", "DisplayName": "thor"}
}
"UserProfiles": {"4538565228176803": {
"ID": 4538565228176803,
"LoginName": "thor@example.org",
"DisplayName": "thor"
}}
}}, "kakuna": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 6928435540118905,
"StableID": "ntzJNgFu6w11CNTRL",
"ID": 6680727897272819,
"StableID": "n6YqCpPiAu11CNTRL",
"Name": "kakuna.tail78f774.ts.net.",
"User": 6928435540118905,
"Key": "nodekey:87d77660a1b2953ef17e53bd33e3ed4159fff6fd28825304511c347e2e60ba61",
"DiscoKey": "discokey:b86192e0179b5c21b478252957a556b0e83d0d38f4ce4af651b0071063435747",
"Addresses": ["100.96.186.98/32", "fd7a:115c:a1e0::2e37:ba62/128"],
"AllowedIPs": ["100.96.186.98/32", "fd7a:115c:a1e0::2e37:ba62/128"],
"Endpoints": ["77.164.248.136:39241", "10.65.0.27:39241", "172.17.0.1:39241"],
"User": 6680727897272819,
"Key": "nodekey:341f9f7308da173b6b57e47bf0b096882244c0462449ac9bb74383c37aa7df2b",
"DiscoKey": "discokey:ff517aae839ea830c48d15b9b4f9b771b3fffea6748a00190fc12fbfbaea2e79",
"Addresses": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
"Endpoints": [
"192.0.2.1:36607",
"198.51.100.1:36607",
"198.51.100.2:36607",
"198.51.100.3:36607"
],
"Hostinfo": {"Hostname": "kakuna", "RequestTags": ["tag:prod"], "Services": [
{"Proto": "peerapi4", "Port": 54388},
{"Proto": "peerapi6", "Port": 54388},
{"Proto": "peerapi4", "Port": 51523},
{"Proto": "peerapi6", "Port": 51523},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T16:01:39.117944686Z",
"Created": "2026-10-30T16:36:07.579141227Z",
"Tags": ["tag:prod"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -3686,6 +3761,7 @@
"ComputedNameWithHost": "kakuna"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -3696,8 +3772,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:87d77660a1b2953ef17e53bd33e3ed4159fff6fd28825304511c347e2e60ba61",
"MachineKey": "mkey:c9e7a93437ed9e3756182b16595dda654a9da5081b525575f11386a3c97d6818",
"NodeKey": "nodekey:341f9f7308da173b6b57e47bf0b096882244c0462449ac9bb74383c37aa7df2b",
"MachineKey": "mkey:d646a2bd84f2e05b9417a9f6e3b784fb8ddd45be85a1c1ecb83eccef3743fb4e",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -4523,38 +4599,44 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {"6928435540118905": {
"ID": 6928435540118905,
"UserProfiles": {"6680727897272819": {
"ID": 6680727897272819,
"LoginName": "kakuna.tail78f774.ts.net",
"DisplayName": "kakuna"
}}
}}, "squirtle": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 5541287654024823,
"StableID": "npqojMEfGk11CNTRL",
"ID": 439997692411761,
"StableID": "nccsNczGS411CNTRL",
"Name": "squirtle.tail78f774.ts.net.",
"User": 5541287654024823,
"Key": "nodekey:f676ff830bad711cc301e6cca7f5444b225ae3c7f36547c2f5da385a65aa2c57",
"DiscoKey": "discokey:961ce674a521daafb14e8e9bfdb3821f5679c3c18debb16e4e220a1fdeeffb18",
"Addresses": ["100.106.44.88/32", "fd7a:115c:a1e0::6537:2c58/128"],
"AllowedIPs": ["100.106.44.88/32", "fd7a:115c:a1e0::6537:2c58/128", "10.33.0.0/16"],
"Endpoints": ["77.164.248.136:45652", "10.65.0.27:45652", "172.17.0.1:45652"],
"User": 439997692411761,
"Key": "nodekey:3dc0d52e49d69d9acac7d50c3b80907eba744cd03533376951938b33b4bf3d78",
"DiscoKey": "discokey:3fa326eb84ef8e605b2adcc25e056c5f377e3558b10648420221e049fcf34709",
"Addresses": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128", "10.33.0.0/16"],
"Endpoints": [
"192.0.2.1:41852",
"198.51.100.1:41852",
"198.51.100.2:41852",
"198.51.100.3:41852"
],
"Hostinfo": {
"Hostname": "squirtle",
"RoutableIPs": ["10.33.0.0/16"],
"RequestTags": ["tag:router"],
"Services": [
{"Proto": "peerapi4", "Port": 42380},
{"Proto": "peerapi6", "Port": 42380},
{"Proto": "peerapi4", "Port": 43119},
{"Proto": "peerapi6", "Port": 43119},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]
},
"Created": "2026-04-10T16:01:38.035533765Z",
"Created": "2026-10-30T16:36:06.270341841Z",
"Tags": ["tag:router"],
"PrimaryRoutes": ["10.33.0.0/16"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -4569,6 +4651,7 @@
"ComputedNameWithHost": "squirtle"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -4579,25 +4662,30 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:f676ff830bad711cc301e6cca7f5444b225ae3c7f36547c2f5da385a65aa2c57",
"MachineKey": "mkey:01e9160c38e7c8a9a1bc46dca286cbbe533bbfd4e436dd8d2260a6e5725fc934",
"NodeKey": "nodekey:3dc0d52e49d69d9acac7d50c3b80907eba744cd03533376951938b33b4bf3d78",
"MachineKey": "mkey:f8a5a1fc84830ea9e5f50b76911d87d28ebef5aadc057f9f333155356e411107",
"Peers": [{
"ID": 1670583669964240,
"StableID": "nPLeGDQc3E11CNTRL",
"ID": 3909706014316063,
"StableID": "ni8uK9MiXX11CNTRL",
"Name": "beedrill.tail78f774.ts.net.",
"User": 1260082990019555,
"Key": "nodekey:15f7d2b74c92045497973410161b7fd1ca81cf8222c36914beb7d5b32b82e55f",
"DiscoKey": "discokey:50d25fbdf6a40195729f31de92f3052205f41a279113d37374c4d7dfafa47f7b",
"Addresses": ["100.66.229.96/32", "fd7a:115c:a1e0::2b37:e560/128"],
"AllowedIPs": ["100.66.229.96/32", "fd7a:115c:a1e0::2b37:e560/128"],
"Endpoints": ["77.164.248.136:35558", "10.65.0.27:35558", "172.17.0.1:35558"],
"HomeDERP": 14,
"Key": "nodekey:30c09441ad1809236a34fc3b09f5d3f0a0373b975b41bf5097339c8850a2e825",
"DiscoKey": "discokey:9d67a2c87202a2f82d9a2db17b2393b659ab23733d1a6e76f5b591e6e4172c22",
"Addresses": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
"Endpoints": [
"192.0.2.1:45127",
"198.51.100.1:45127",
"198.51.100.2:45127",
"198.51.100.3:45127"
],
"HomeDERP": 14,
"Hostinfo": {"OS": "linux", "Hostname": "beedrill", "Services": [
{"Proto": "peerapi4", "Port": 58957},
{"Proto": "peerapi6", "Port": 58957}
{"Proto": "peerapi4", "Port": 50358},
{"Proto": "peerapi6", "Port": 50358}
]},
"Created": "2026-04-10T16:01:39.657025522Z",
"Cap": 131,
"Created": "2026-10-30T16:36:08.106069125Z",
"Cap": 142,
"Tags": ["tag:server"],
"Online": true,
"ComputedName": "beedrill",
@@ -5431,32 +5519,38 @@
"ID": 1260082990019555,
"LoginName": "tagged-devices",
"DisplayName": "Tagged Devices"
}, "5541287654024823": {
"ID": 5541287654024823,
}, "439997692411761": {
"ID": 439997692411761,
"LoginName": "squirtle.tail78f774.ts.net",
"DisplayName": "squirtle"
}}
}}, "venusaur": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 4672640047888257,
"StableID": "nGa1LBLFVd11CNTRL",
"ID": 894105809356928,
"StableID": "nfCneKewy711CNTRL",
"Name": "venusaur.tail78f774.ts.net.",
"User": 3982058329734709,
"Key": "nodekey:a997e25100186b07abca52ffdb25b35df5286aeffeef1aac88de8c0007e9ec48",
"KeyExpiry": "2026-10-07T16:01:40Z",
"DiscoKey": "discokey:247f5587f82a9486b9c4e1ec66798639d37dd8470d8b88e987053fb3ffc94201",
"Addresses": ["100.105.236.73/32", "fd7a:115c:a1e0::737:ec49/128"],
"AllowedIPs": ["100.105.236.73/32", "fd7a:115c:a1e0::737:ec49/128"],
"Endpoints": ["77.164.248.136:57153", "10.65.0.27:57153", "172.17.0.1:57153"],
"Key": "nodekey:d8977cf23f54d160d03687990950387299fdde6241df6506f513e54bd7576037",
"KeyExpiry": "2027-04-28T16:36:09Z",
"DiscoKey": "discokey:d6b6068b1cd2b8d7e4e6f61adccb809dfd55b086850a852fd5911aa127a22a6b",
"Addresses": ["100.64.0.18/32", "fd7a:115c:a1e0::12/128"],
"AllowedIPs": ["100.64.0.18/32", "fd7a:115c:a1e0::12/128"],
"Endpoints": [
"192.0.2.1:60167",
"198.51.100.1:60167",
"198.51.100.2:60167",
"198.51.100.3:60167"
],
"Hostinfo": {"Hostname": "venusaur", "Services": [
{"Proto": "peerapi4", "Port": 60521},
{"Proto": "peerapi6", "Port": 60521},
{"Proto": "peerapi4", "Port": 42394},
{"Proto": "peerapi6", "Port": 42394},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T16:01:40.736351126Z",
"Created": "2026-10-30T16:36:09.174703858Z",
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-admin": null,
"https://tailscale.com/cap/ssh": null,
@@ -5471,6 +5565,7 @@
"ComputedNameWithHost": "venusaur"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-admin",
"https://tailscale.com/cap/ssh",
@@ -5481,8 +5576,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:a997e25100186b07abca52ffdb25b35df5286aeffeef1aac88de8c0007e9ec48",
"MachineKey": "mkey:d3debfe431421dbf12983f9948913c52b803ce18dbe062efbbbbe07e0f556833",
"NodeKey": "nodekey:d8977cf23f54d160d03687990950387299fdde6241df6506f513e54bd7576037",
"MachineKey": "mkey:ffe788d459b7cf0eab986135dc3ed1aa8373371e2dec2d59df79c8b62e0ce766",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -6316,24 +6411,30 @@
}}, "weedle": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 4599117707187585,
"StableID": "na93rM2xuc11CNTRL",
"ID": 4864246591001435,
"StableID": "nWQBRZW2ze11CNTRL",
"Name": "weedle.tail78f774.ts.net.",
"User": 4599117707187585,
"Key": "nodekey:cbc33b5bb6897a84197337a3c172c382e4b3bcfc359c365b0ef28686bbc6d030",
"DiscoKey": "discokey:312a317b1ff7998de5aa6bebd7e8da9acb33db385afdd6264e0aa385e9b19f1f",
"Addresses": ["100.70.208.49/32", "fd7a:115c:a1e0::bb37:d031/128"],
"AllowedIPs": ["100.70.208.49/32", "fd7a:115c:a1e0::bb37:d031/128"],
"Endpoints": ["77.164.248.136:43787", "10.65.0.27:43787", "172.17.0.1:43787"],
"User": 4864246591001435,
"Key": "nodekey:cf1d7ab71aa48b15f17840d1c896978730b0527665eea9ea13b3cec58d213277",
"DiscoKey": "discokey:6686ade0810549bae9fdfd8ab7a997156946b3f224c3a0f04334b2a33f682f4b",
"Addresses": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"Endpoints": [
"192.0.2.1:42585",
"198.51.100.1:42585",
"198.51.100.2:42585",
"198.51.100.3:42585"
],
"Hostinfo": {"Hostname": "weedle", "RequestTags": ["tag:client"], "Services": [
{"Proto": "peerapi4", "Port": 60741},
{"Proto": "peerapi6", "Port": 60741},
{"Proto": "peerapi4", "Port": 63957},
{"Proto": "peerapi6", "Port": 63957},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T16:01:38.566139453Z",
"Created": "2026-10-30T16:36:07.049906461Z",
"Tags": ["tag:client"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -6348,6 +6449,7 @@
"ComputedNameWithHost": "weedle"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -6358,8 +6460,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:cbc33b5bb6897a84197337a3c172c382e4b3bcfc359c365b0ef28686bbc6d030",
"MachineKey": "mkey:8d8c1ef1f33d4c9d2da5ed9e23feb4eb6e738beedc3590cf6e2e1f02f64b534c",
"NodeKey": "nodekey:cf1d7ab71aa48b15f17840d1c896978730b0527665eea9ea13b3cec58d213277",
"MachineKey": "mkey:7a385db26233e9f531f347bccbeca8f13746607c315d62d9467928c4e0615d05",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -7185,8 +7287,8 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {"4599117707187585": {
"ID": 4599117707187585,
"UserProfiles": {"4864246591001435": {
"ID": 4864246591001435,
"LoginName": "weedle.tail78f774.ts.net",
"DisplayName": "weedle"
}}
hscontrol/policy/v2/testdata/acl_results/acl-k03.hujson
Generated Vendored
+2081 -1705
View File
File diff suppressed because it is too large. Load diff
hscontrol/policy/v2/testdata/acl_results/acl-m02.hujson
Generated Vendored
+284 -179
View File
@@ -3,26 +3,58 @@
// acl m02
//
// Nodes with filter rules: 1 of 8
// Captured at: 2026-04-10T16:08:55Z
// tscap version: tscap/dev
// Captured at: 2026-10-30T16:37:27Z
// tool version: tscap/5f80ee6150559e777612549d896d444b50768737
// schema version: 1
{
"schema_version": 1,
"test_id": "acl-m02",
"description": "acl m02",
"category": "acl",
"captured_at": "2026-04-10T16:08:55.603020036Z",
"tool_version": "tscap/dev",
"captured_at": "2026-10-30T16:37:27.115437258Z",
"tool_version": "tscap/5f80ee6150559e777612549d896d444b50768737",
"client_version": "1.102.5-ERR-BuildInfo capver 142",
"tailnet": "odin@example.com",
"input": {
"full_policy": "{\"acls\":[{\"action\":\"accept\",\"dst\":[\"tag:server:22\"],\"src\":[\"100.90.199.68\",\"tag:client\"]}],\"autoApprovers\":{\"routes\":{\"0.0.0.0/0\":[\"tag:exit\"],\"10.33.0.0/16\":[\"tag:router\"],\"::/0\":[\"tag:exit\"]}},\"groups\":{\"group:admins\":[\"odin@example.com\"],\"group:developers\":[\"thor@example.org\",\"odin@example.com\"],\"group:empty\":[],\"group:monitors\":[\"freya@example.com\"]},\"hosts\":{\"internal\":\"10.0.0.0/8\",\"prodbox\":\"100.103.8.15\",\"subnet24\":\"192.168.1.0/24\",\"webserver\":\"100.108.74.26\"},\"tagOwners\":{\"tag:client\":[\"odin@example.com\"],\"tag:exit\":[\"odin@example.com\"],\"tag:pidgey\":[\"odin@example.com\"],\"tag:pidgeotto\":[\"odin@example.com\"],\"tag:group-a\":[\"odin@example.com\"],\"tag:group-b\":[\"odin@example.com\"],\"tag:ha\":[\"odin@example.com\"],\"tag:prod\":[\"odin@example.com\"],\"tag:router\":[\"odin@example.com\"],\"tag:spearow\":[\"odin@example.com\"],\"tag:fearow\":[\"odin@example.com\"],\"tag:server\":[\"odin@example.com\"]}}",
"api_response_code": 200,
"tailnet": {
"dns": {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
"settings": {}
},
"scenario_hujson": " \n{\n\t\"category\": \"acl\",\n\t\"description\": \"acl m02\",\n\t\"id\": \"acl-m02\",\n\t\"policy\": {\"acls\": [{\n\t\t\"action\": \"accept\",\n\t\t\"dst\": [\"tag:server:22\"],\n\t\t\"src\": [\"100.90.199.68\", \"tag:client\"]\n\t}], \"autoApprovers\": {\"routes\": {\n\t\t\"0.0.0.0/0\": [\"tag:exit\"],\n\t\t\"10.33.0.0/16\": [\"tag:router\"],\n\t\t\"::/0\": [\"tag:exit\"]\n\t}}, \"groups\": {\n\t\t\"group:admins\": [\"odin@example.com\"],\n\t\t\"group:developers\": [\"thor@example.org\", \"odin@example.com\"],\n\t\t\"group:empty\": [],\n\t\t\"group:monitors\": [\"freya@example.com\"]\n\t}, \"hosts\": {\n\t\t\"internal\": \"10.0.0.0/8\",\n\t\t\"prodbox\": \"100.103.8.15\",\n\t\t\"subnet24\": \"192.168.1.0/24\",\n\t\t\"webserver\": \"100.108.74.26\"\n\t}, \"tagOwners\": {\n\t\t\"tag:client\": [\"odin@example.com\"],\n\t\t\"tag:exit\": [\"odin@example.com\"],\n\t\t\"tag:pidgey\": [\"odin@example.com\"],\n\t\t\"tag:pidgeotto\": [\"odin@example.com\"],\n\t\t\"tag:group-a\": [\"odin@example.com\"],\n\t\t\"tag:group-b\": [\"odin@example.com\"],\n\t\t\"tag:ha\": [\"odin@example.com\"],\n\t\t\"tag:prod\": [\"odin@example.com\"],\n\t\t\"tag:router\": [\"odin@example.com\"],\n\t\t\"tag:spearow\": [\"odin@example.com\"],\n\t\t\"tag:fearow\": [\"odin@example.com\"],\n\t\t\"tag:server\": [\"odin@example.com\"]\n\t}},\n\t\"tailnet\": {\n\t\t\"dns\": {\"magic_dns\": false, \"nameservers\": [], \"search_paths\": [], \"split_dns\": {}},\n\t\t\"settings\": {}\n\t},\n\t\"topology\": \"../_topologies/acl.hujson\"\n}\n",
"scenario_path": "scenarios/acl/acl-m02.hujson"
"scenario_path": "scenarios/acl/acl-m02.hujson",
"full_policy": {"acls": [{
"action": "accept",
"dst": ["tag:server:22"],
"src": ["100.90.199.68", "tag:client"]
}], "autoApprovers": {"routes": {
"0.0.0.0/0": ["tag:exit"],
"10.33.0.0/16": ["tag:router"],
"::/0": ["tag:exit"]
}}, "groups": {
"group:admins": ["odin@example.com"],
"group:developers": ["thor@example.org", "odin@example.com"],
"group:empty": [],
"group:monitors": ["freya@example.com"]
}, "hosts": {
"internal": "10.0.0.0/8",
"prodbox": "100.103.8.15",
"subnet24": "192.168.1.0/24",
"webserver": "100.108.74.26"
}, "tagOwners": {
"tag:client": ["odin@example.com"],
"tag:exit": ["odin@example.com"],
"tag:pidgey": ["odin@example.com"],
"tag:pidgeotto": ["odin@example.com"],
"tag:group-a": ["odin@example.com"],
"tag:group-b": ["odin@example.com"],
"tag:ha": ["odin@example.com"],
"tag:prod": ["odin@example.com"],
"tag:router": ["odin@example.com"],
"tag:spearow": ["odin@example.com"],
"tag:fearow": ["odin@example.com"],
"tag:server": ["odin@example.com"]
}}
},
"topology": {"users": [
{"id": 1, "name": "odin", "email": "odin@example.com"},
@@ -31,99 +63,105 @@
], "nodes": {"beedrill": {
"hostname": "beedrill",
"tags": ["tag:server"],
"ipv4": "100.70.14.22",
"ipv6": "fd7a:115c:a1e0::fa37:e16",
"ipv4": "100.64.0.16",
"ipv6": "fd7a:115c:a1e0::10",
"routable_ips": [],
"approved_routes": []
}, "bulbasaur": {
"hostname": "bulbasaur",
"tags": [],
"ipv4": "100.116.46.72",
"ipv6": "fd7a:115c:a1e0::3237:2e48",
"ipv4": "100.64.0.19",
"ipv6": "fd7a:115c:a1e0::13",
"user": "odin",
"routable_ips": [],
"approved_routes": []
}, "charmander": {
"hostname": "charmander",
"tags": ["tag:exit"],
"ipv4": "100.87.37.28",
"ipv6": "fd7a:115c:a1e0::c37:251c",
"ipv4": "100.64.0.4",
"ipv6": "fd7a:115c:a1e0::4",
"routable_ips": ["0.0.0.0/0", "::/0"],
"approved_routes": []
}, "ivysaur": {
"hostname": "ivysaur",
"tags": [],
"ipv4": "100.114.80.65",
"ipv6": "fd7a:115c:a1e0::3937:5041",
"ipv4": "100.64.0.17",
"ipv6": "fd7a:115c:a1e0::11",
"user": "thor",
"routable_ips": [],
"approved_routes": []
}, "kakuna": {
"hostname": "kakuna",
"tags": ["tag:prod"],
"ipv4": "100.65.138.122",
"ipv6": "fd7a:115c:a1e0::9537:8a7a",
"ipv4": "100.64.0.15",
"ipv6": "fd7a:115c:a1e0::f",
"routable_ips": [],
"approved_routes": []
}, "squirtle": {
"hostname": "squirtle",
"tags": ["tag:router"],
"ipv4": "100.114.204.121",
"ipv6": "fd7a:115c:a1e0::d437:cc79",
"ipv4": "100.64.0.13",
"ipv6": "fd7a:115c:a1e0::d",
"routable_ips": ["10.33.0.0/16"],
"approved_routes": []
"approved_routes": ["10.33.0.0/16"]
}, "venusaur": {
"hostname": "venusaur",
"tags": [],
"ipv4": "100.74.73.123",
"ipv6": "fd7a:115c:a1e0::6d37:497b",
"ipv4": "100.64.0.18",
"ipv6": "fd7a:115c:a1e0::12",
"user": "freya",
"routable_ips": [],
"approved_routes": []
}, "weedle": {
"hostname": "weedle",
"tags": ["tag:client"],
"ipv4": "100.90.79.71",
"ipv6": "fd7a:115c:a1e0::6237:4f47",
"ipv4": "100.64.0.14",
"ipv6": "fd7a:115c:a1e0::e",
"routable_ips": [],
"approved_routes": []
}}},
"captures": {"beedrill": {"packet_filter_rules": [{
"SrcIPs": ["100.90.199.68", "100.90.79.71", "fd7a:115c:a1e0::6237:4f47"],
"SrcIPs": ["100.64.0.14", "100.90.199.68", "fd7a:115c:a1e0::e"],
"DstPorts": [
{"IP": "100.70.14.22", "Ports": {"First": 22, "Last": 22}},
{"IP": "fd7a:115c:a1e0::fa37:e16", "Ports": {"First": 22, "Last": 22}}
{"IP": "100.64.0.16", "Ports": {"First": 22, "Last": 22}},
{"IP": "fd7a:115c:a1e0::10", "Ports": {"First": 22, "Last": 22}}
]
}], "packet_filter_matches": [{
"IPProto": [6, 17, 1, 58],
"Srcs": ["100.90.199.68/32", "100.90.79.71/32", "fd7a:115c:a1e0::6237:4f47/128"],
"Srcs": ["100.64.0.14/32", "100.90.199.68/32", "fd7a:115c:a1e0::e/128"],
"SrcCaps": null,
"Dsts": [
{"Net": "100.70.14.22/32", "Ports": {"First": 22, "Last": 22}},
{"Net": "fd7a:115c:a1e0::fa37:e16/128", "Ports": {"First": 22, "Last": 22}}
{"Net": "100.64.0.16/32", "Ports": {"First": 22, "Last": 22}},
{"Net": "fd7a:115c:a1e0::10/128", "Ports": {"First": 22, "Last": 22}}
],
"Caps": []
}], "netmap": {
"Cached": false,
"SelfNode": {
"ID": 5101918606587955,
"StableID": "ntbkZXkfqg11CNTRL",
"ID": 4437896814165912,
"StableID": "nPN3cP2web11CNTRL",
"Name": "beedrill.tail78f774.ts.net.",
"User": 5101918606587955,
"Key": "nodekey:f7a6e3c8bf3b2fbc0744149c086386a8986f2322a64dfb75aa0061f9fa060e15",
"DiscoKey": "discokey:dc97b5ed1cf36e11e32040f72cfb7e2d255cd185ae5c3d27aee991e8cd76c346",
"Addresses": ["100.70.14.22/32", "fd7a:115c:a1e0::fa37:e16/128"],
"AllowedIPs": ["100.70.14.22/32", "fd7a:115c:a1e0::fa37:e16/128"],
"Endpoints": ["77.164.248.136:37019", "10.65.0.27:37019", "172.17.0.1:37019"],
"User": 4437896814165912,
"Key": "nodekey:c96b801437659c5ce413137fb76ad0e4c91a312bf30fa82613f50d58eb2d3420",
"DiscoKey": "discokey:5a4df9a6e45afb1b2175991d338a14edd762be9006fa3bf7175e5e97b4e17d7c",
"Addresses": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
"Endpoints": [
"192.0.2.1:44827",
"198.51.100.1:44827",
"198.51.100.2:44827",
"198.51.100.3:44827"
],
"Hostinfo": {"Hostname": "beedrill", "RequestTags": ["tag:server"], "Services": [
{"Proto": "peerapi4", "Port": 45247},
{"Proto": "peerapi6", "Port": 45247},
{"Proto": "peerapi4", "Port": 50358},
{"Proto": "peerapi6", "Port": 50358},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T16:08:59.580525917Z",
"Created": "2026-10-30T16:37:30.915216391Z",
"Tags": ["tag:server"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -138,6 +176,7 @@
"ComputedNameWithHost": "beedrill"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -148,25 +187,30 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:f7a6e3c8bf3b2fbc0744149c086386a8986f2322a64dfb75aa0061f9fa060e15",
"MachineKey": "mkey:9dcf6ca260ee9eafcfb81a58479a198834a44176f90a83426496df70a993e90c",
"NodeKey": "nodekey:c96b801437659c5ce413137fb76ad0e4c91a312bf30fa82613f50d58eb2d3420",
"MachineKey": "mkey:6b2812999c2b97fd97daff453a65ec500260c2457aaa87ba9dffa2e6d366c449",
"Peers": [{
"ID": 2762747162340321,
"StableID": "nJ5s9dgFaN11CNTRL",
"ID": 888647694469960,
"StableID": "n1BJjYGUw711CNTRL",
"Name": "weedle.tail78f774.ts.net.",
"User": 1260082990019555,
"Key": "nodekey:7ffc956fbcb31a5318952c16dc0e9d9caf89024cc2680cfd305fd7a0629a4f46",
"DiscoKey": "discokey:8323516b95217270b4480317a64cbdf87c046af1fd906da4b16c4603d3527505",
"Addresses": ["100.90.79.71/32", "fd7a:115c:a1e0::6237:4f47/128"],
"AllowedIPs": ["100.90.79.71/32", "fd7a:115c:a1e0::6237:4f47/128"],
"Endpoints": ["77.164.248.136:50262", "10.65.0.27:50262", "172.17.0.1:50262"],
"HomeDERP": 14,
"Key": "nodekey:8dc88498a2c50776486532c10328d0bff352c4758fea5b5b498754168b98dc64",
"DiscoKey": "discokey:a0348bb78f501a42b7df45a6cb9090578d4a9bdc46a52eea76a9171482b1df4a",
"Addresses": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"Endpoints": [
"192.0.2.1:42883",
"198.51.100.1:42883",
"198.51.100.2:42883",
"198.51.100.3:42883"
],
"HomeDERP": 14,
"Hostinfo": {"OS": "linux", "Hostname": "weedle", "Services": [
{"Proto": "peerapi4", "Port": 62861},
{"Proto": "peerapi6", "Port": 62861}
{"Proto": "peerapi4", "Port": 63957},
{"Proto": "peerapi6", "Port": 63957}
]},
"Created": "2026-04-10T16:08:58.492985061Z",
"Cap": 131,
"Created": "2026-10-30T16:37:29.766313972Z",
"Cap": 142,
"Tags": ["tag:client"],
"Online": true,
"ComputedName": "weedle",
@@ -175,19 +219,19 @@
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [{
"IPProto": [6, 17, 1, 58],
"Srcs": ["100.90.199.68/32", "100.90.79.71/32", "fd7a:115c:a1e0::6237:4f47/128"],
"Srcs": ["100.64.0.14/32", "100.90.199.68/32", "fd7a:115c:a1e0::e/128"],
"SrcCaps": null,
"Dsts": [
{"Net": "100.70.14.22/32", "Ports": {"First": 22, "Last": 22}},
{"Net": "fd7a:115c:a1e0::fa37:e16/128", "Ports": {"First": 22, "Last": 22}}
{"Net": "100.64.0.16/32", "Ports": {"First": 22, "Last": 22}},
{"Net": "fd7a:115c:a1e0::10/128", "Ports": {"First": 22, "Last": 22}}
],
"Caps": []
}],
"PacketFilterRules": [{
"SrcIPs": ["100.90.199.68", "100.90.79.71", "fd7a:115c:a1e0::6237:4f47"],
"SrcIPs": ["100.64.0.14", "100.90.199.68", "fd7a:115c:a1e0::e"],
"DstPorts": [
{"IP": "100.70.14.22", "Ports": {"First": 22, "Last": 22}},
{"IP": "fd7a:115c:a1e0::fa37:e16", "Ports": {"First": 22, "Last": 22}}
{"IP": "100.64.0.16", "Ports": {"First": 22, "Last": 22}},
{"IP": "fd7a:115c:a1e0::10", "Ports": {"First": 22, "Last": 22}}
]
}],
"SSHPolicy": {"rules": []},
@@ -1015,32 +1059,38 @@
"ID": 1260082990019555,
"LoginName": "tagged-devices",
"DisplayName": "Tagged Devices"
}, "5101918606587955": {
"ID": 5101918606587955,
}, "4437896814165912": {
"ID": 4437896814165912,
"LoginName": "beedrill.tail78f774.ts.net",
"DisplayName": "beedrill"
}}
}}, "bulbasaur": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 2193963250837100,
"StableID": "nf4wbGhe8J11CNTRL",
"ID": 907281678489428,
"StableID": "nZu66aku5811CNTRL",
"Name": "bulbasaur.tail78f774.ts.net.",
"User": 4156223528223174,
"Key": "nodekey:bdff66460bfc66ca7580d50fda5072a4074adb57292688120775bf0432342e47",
"KeyExpiry": "2026-10-07T16:09:01Z",
"DiscoKey": "discokey:93c4fd62dd236e7fc7014bd1cf95213a5d66ff6a10f2f7aab6bfba8e43d1893c",
"Addresses": ["100.116.46.72/32", "fd7a:115c:a1e0::3237:2e48/128"],
"AllowedIPs": ["100.116.46.72/32", "fd7a:115c:a1e0::3237:2e48/128"],
"Endpoints": ["77.164.248.136:39079", "10.65.0.27:39079", "172.17.0.1:39079"],
"Key": "nodekey:7ad022ace17291fd1cacc4087153f939bef889b4643fc7a81f5fd1033d46df45",
"KeyExpiry": "2027-04-28T16:37:32Z",
"DiscoKey": "discokey:1a95bbd9014589e0ffa1f13f40e916cda0740b58c718c5e51d657be93e00b578",
"Addresses": ["100.64.0.19/32", "fd7a:115c:a1e0::13/128"],
"AllowedIPs": ["100.64.0.19/32", "fd7a:115c:a1e0::13/128"],
"Endpoints": [
"192.0.2.1:40040",
"198.51.100.1:40040",
"198.51.100.2:40040",
"198.51.100.3:40040"
],
"Hostinfo": {"Hostname": "bulbasaur", "Services": [
{"Proto": "peerapi4", "Port": 55568},
{"Proto": "peerapi6", "Port": 55568},
{"Proto": "peerapi4", "Port": 38156},
{"Proto": "peerapi6", "Port": 38156},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T16:09:01.187185259Z",
"Created": "2026-10-30T16:37:32.479184787Z",
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-admin": null,
"https://tailscale.com/cap/is-owner": null,
@@ -1056,6 +1106,7 @@
"ComputedNameWithHost": "bulbasaur"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-admin",
"https://tailscale.com/cap/is-owner",
@@ -1067,8 +1118,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:bdff66460bfc66ca7580d50fda5072a4074adb57292688120775bf0432342e47",
"MachineKey": "mkey:48dfe8c4faf24ab99d07d1b4fbb0e6dee5548f6edcafc9e93d44fe4c8f263c48",
"NodeKey": "nodekey:7ad022ace17291fd1cacc4087153f939bef889b4643fc7a81f5fd1033d46df45",
"MachineKey": "mkey:dc09b0e6b14167a9067f7b3da4fa40314e0d41df1d8a998348fa7af85000a620",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -1902,24 +1953,35 @@
}}, "charmander": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 4456220370344926,
"StableID": "nBH2XTMEob11CNTRL",
"ID": 7977751514991574,
"StableID": "nq4VrF19J521CNTRL",
"Name": "charmander.tail78f774.ts.net.",
"User": 4456220370344926,
"Key": "nodekey:d3228e630b2d3b7b438d2ccfa74fe4e9a5e89110b45a17987b4f630a0c57251b",
"DiscoKey": "discokey:a196c1edb357d52d7d5541e525031471bef9caeda3cd9395e12cc93129c7f870",
"Addresses": ["100.87.37.28/32", "fd7a:115c:a1e0::c37:251c/128"],
"AllowedIPs": ["100.87.37.28/32", "fd7a:115c:a1e0::c37:251c/128"],
"Endpoints": ["77.164.248.136:59672", "10.65.0.27:59672", "172.17.0.1:59672"],
"Hostinfo": {"Hostname": "charmander", "RequestTags": ["tag:exit"], "Services": [
{"Proto": "peerapi4", "Port": 60815},
{"Proto": "peerapi6", "Port": 60815},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T16:08:57.433426163Z",
"User": 7977751514991574,
"Key": "nodekey:41778d39ef25c2c8f36bf856835c7988e0254f7cf56b5e78a6c66e8ecc4ee008",
"DiscoKey": "discokey:124542a35dd68f49d8a1a805e7a90c4a8ff34ab53bd2426be37f361f0ea97e08",
"Addresses": ["100.64.0.4/32", "fd7a:115c:a1e0::4/128"],
"AllowedIPs": ["100.64.0.4/32", "fd7a:115c:a1e0::4/128"],
"Endpoints": [
"192.0.2.1:55058",
"198.51.100.1:55058",
"198.51.100.2:55058",
"198.51.100.3:55058"
],
"Hostinfo": {
"Hostname": "charmander",
"RoutableIPs": ["0.0.0.0/0", "::/0"],
"RequestTags": ["tag:exit"],
"Services": [
{"Proto": "peerapi4", "Port": 64252},
{"Proto": "peerapi6", "Port": 64252},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]
},
"Created": "2026-10-30T16:37:28.686281973Z",
"Tags": ["tag:exit"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -1934,6 +1996,7 @@
"ComputedNameWithHost": "charmander"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -1944,8 +2007,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:d3228e630b2d3b7b438d2ccfa74fe4e9a5e89110b45a17987b4f630a0c57251b",
"MachineKey": "mkey:c402c2137c505df4220c5c4d7b95ae39f56563f91c3f40dd094f5090a8919c52",
"NodeKey": "nodekey:41778d39ef25c2c8f36bf856835c7988e0254f7cf56b5e78a6c66e8ecc4ee008",
"MachineKey": "mkey:8dd01e30fb998af6aa37221d8ff421683d84986c9c7928e203f7cade8bdd964c",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -2771,32 +2834,38 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {"4456220370344926": {
"ID": 4456220370344926,
"UserProfiles": {"7977751514991574": {
"ID": 7977751514991574,
"LoginName": "charmander.tail78f774.ts.net",
"DisplayName": "charmander"
}}
}}, "ivysaur": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 7317007120193059,
"StableID": "nQVGJSNt8z11CNTRL",
"ID": 8138570961803527,
"StableID": "nYsifbTyY621CNTRL",
"Name": "ivysaur.tail78f774.ts.net.",
"User": 4538565228176803,
"Key": "nodekey:efd05e9f1369581ca3d0c5425bb08135aa7d8f505cea688259336e7539f25040",
"KeyExpiry": "2026-10-07T16:09:00Z",
"DiscoKey": "discokey:d2effdbce038fd6c37dc68aaf9686ffd5782c85f89128f707b140daad6d4183f",
"Addresses": ["100.114.80.65/32", "fd7a:115c:a1e0::3937:5041/128"],
"AllowedIPs": ["100.114.80.65/32", "fd7a:115c:a1e0::3937:5041/128"],
"Endpoints": ["77.164.248.136:49797", "10.65.0.27:49797", "172.17.0.1:49797"],
"Key": "nodekey:a13973f60f9a866a1e74de181576858b5a77959b9eb435020874807cde79ea0b",
"KeyExpiry": "2027-04-28T16:37:31Z",
"DiscoKey": "discokey:f069fc58f1fe1a362c43ccbe950b4f3039d4e53efda77313267a6b16d71c484a",
"Addresses": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
"Endpoints": [
"192.0.2.1:40108",
"198.51.100.1:40108",
"198.51.100.2:40108",
"198.51.100.3:40108"
],
"Hostinfo": {"Hostname": "ivysaur", "Services": [
{"Proto": "peerapi4", "Port": 51582},
{"Proto": "peerapi6", "Port": 51582},
{"Proto": "peerapi4", "Port": 62496},
{"Proto": "peerapi6", "Port": 62496},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T16:09:00.125385263Z",
"Created": "2026-10-30T16:37:31.417053884Z",
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-admin": null,
"https://tailscale.com/cap/ssh": null,
@@ -2811,6 +2880,7 @@
"ComputedNameWithHost": "ivysaur"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-admin",
"https://tailscale.com/cap/ssh",
@@ -2821,8 +2891,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:efd05e9f1369581ca3d0c5425bb08135aa7d8f505cea688259336e7539f25040",
"MachineKey": "mkey:35479f7ec414d37ee690344a9cb342a002d52f7b6cbd44a05100beea898bc15d",
"NodeKey": "nodekey:a13973f60f9a866a1e74de181576858b5a77959b9eb435020874807cde79ea0b",
"MachineKey": "mkey:82cf2290abbf8bc7935d8237eb7a5c91abcb8ff752fd229bd5c63d988d3e1941",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -3648,30 +3718,38 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {
"4538565228176803": {"ID": 4538565228176803, "LoginName": "thor@example.org", "DisplayName": "thor"}
}
"UserProfiles": {"4538565228176803": {
"ID": 4538565228176803,
"LoginName": "thor@example.org",
"DisplayName": "thor"
}}
}}, "kakuna": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 284973164081995,
"StableID": "npdafBm4E311CNTRL",
"ID": 3861543559691205,
"StableID": "nGtq8gCu9X11CNTRL",
"Name": "kakuna.tail78f774.ts.net.",
"User": 284973164081995,
"Key": "nodekey:3eb4f965ed11d0c4392437e56d7fca636f73571df2d5f4ef1316f97295418a79",
"DiscoKey": "discokey:72e02f5de539d3227c0e321216b26b638db627085c0be35d7ae7c3657265d44d",
"Addresses": ["100.65.138.122/32", "fd7a:115c:a1e0::9537:8a7a/128"],
"AllowedIPs": ["100.65.138.122/32", "fd7a:115c:a1e0::9537:8a7a/128"],
"Endpoints": ["77.164.248.136:52684", "10.65.0.27:52684", "172.17.0.1:52684"],
"User": 3861543559691205,
"Key": "nodekey:c716179f9b00071c9925b2dfb58eee76c4a9ac34483a3cbdac11dd02e3d60f71",
"DiscoKey": "discokey:d97b0ce18c09de638197f67c1487a5e5047be5b462f5d7fae1c78e656dc09260",
"Addresses": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
"Endpoints": [
"192.0.2.1:45540",
"198.51.100.1:45540",
"198.51.100.2:45540",
"198.51.100.3:45540"
],
"Hostinfo": {"Hostname": "kakuna", "RequestTags": ["tag:prod"], "Services": [
{"Proto": "peerapi4", "Port": 54790},
{"Proto": "peerapi6", "Port": 54790},
{"Proto": "peerapi4", "Port": 51523},
{"Proto": "peerapi6", "Port": 51523},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T16:08:59.03971558Z",
"Created": "2026-10-30T16:37:30.348458934Z",
"Tags": ["tag:prod"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -3686,6 +3764,7 @@
"ComputedNameWithHost": "kakuna"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -3696,8 +3775,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:3eb4f965ed11d0c4392437e56d7fca636f73571df2d5f4ef1316f97295418a79",
"MachineKey": "mkey:6bedfab6ff154771ede8f7b627799dbbaaab5ff1b7351c8e101894190fbbbe15",
"NodeKey": "nodekey:c716179f9b00071c9925b2dfb58eee76c4a9ac34483a3cbdac11dd02e3d60f71",
"MachineKey": "mkey:1ca42cdf999aaf2fa631c40fce6a4d0524cff13daeae403eada2a91422f63540",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -4523,38 +4602,44 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {"284973164081995": {
"ID": 284973164081995,
"UserProfiles": {"3861543559691205": {
"ID": 3861543559691205,
"LoginName": "kakuna.tail78f774.ts.net",
"DisplayName": "kakuna"
}}
}}, "squirtle": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 8727159236931786,
"StableID": "nTwr18gY9B21CNTRL",
"ID": 4706611728242054,
"StableID": "nsBdP8idkd11CNTRL",
"Name": "squirtle.tail78f774.ts.net.",
"User": 8727159236931786,
"Key": "nodekey:7f5b7e1aea40361a809974791a4041f99a49ed3bfbf5b44ce2f791edd432cc78",
"DiscoKey": "discokey:85c7128e1de2d4b35e17cdd7d6bf5edbdaccd5bc456f2c9825c9e251ad61b525",
"Addresses": ["100.114.204.121/32", "fd7a:115c:a1e0::d437:cc79/128"],
"AllowedIPs": ["100.114.204.121/32", "fd7a:115c:a1e0::d437:cc79/128", "10.33.0.0/16"],
"Endpoints": ["77.164.248.136:43464", "10.65.0.27:43464", "172.17.0.1:43464"],
"User": 4706611728242054,
"Key": "nodekey:f728bd37a7949c4222ae19bc0b71838d58320313d2104f2b6e21b2cfb968d902",
"DiscoKey": "discokey:36154115bebdd3cff01072bcce15792d27be3e84360b7dcea80ea8bf22ffda65",
"Addresses": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128", "10.33.0.0/16"],
"Endpoints": [
"192.0.2.1:41705",
"198.51.100.1:41705",
"198.51.100.2:41705",
"198.51.100.3:41705"
],
"Hostinfo": {
"Hostname": "squirtle",
"RoutableIPs": ["10.33.0.0/16"],
"RequestTags": ["tag:router"],
"Services": [
{"Proto": "peerapi4", "Port": 46326},
{"Proto": "peerapi6", "Port": 46326},
{"Proto": "peerapi4", "Port": 43119},
{"Proto": "peerapi6", "Port": 43119},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]
},
"Created": "2026-04-10T16:08:57.96254597Z",
"Created": "2026-10-30T16:37:29.228784922Z",
"Tags": ["tag:router"],
"PrimaryRoutes": ["10.33.0.0/16"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -4569,6 +4654,7 @@
"ComputedNameWithHost": "squirtle"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -4579,8 +4665,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:7f5b7e1aea40361a809974791a4041f99a49ed3bfbf5b44ce2f791edd432cc78",
"MachineKey": "mkey:6ce19398dfd3c0b23e91e2b7e666bfc94f26572190a468c25101cbaf864d1c26",
"NodeKey": "nodekey:f728bd37a7949c4222ae19bc0b71838d58320313d2104f2b6e21b2cfb968d902",
"MachineKey": "mkey:172cfb9b04636786b7945fa43e404d3ecbe2fc47eaac03de77e7dd4c1baf3341",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -5406,32 +5492,38 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {"8727159236931786": {
"ID": 8727159236931786,
"UserProfiles": {"4706611728242054": {
"ID": 4706611728242054,
"LoginName": "squirtle.tail78f774.ts.net",
"DisplayName": "squirtle"
}}
}}, "venusaur": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 4120824629396008,
"StableID": "njJ8QN5LBZ11CNTRL",
"ID": 2649620591718475,
"StableID": "nYjTVK32hM11CNTRL",
"Name": "venusaur.tail78f774.ts.net.",
"User": 3982058329734709,
"Key": "nodekey:6f308f7edd9d319dbdf8d3bca5ee815fb2a9ebaf49640a04e0efe9c76d8a497a",
"KeyExpiry": "2026-10-07T16:09:00Z",
"DiscoKey": "discokey:db681f294e227f3e9a39d442d868cde2c577857849146aa619cddbec04bf8c39",
"Addresses": ["100.74.73.123/32", "fd7a:115c:a1e0::6d37:497b/128"],
"AllowedIPs": ["100.74.73.123/32", "fd7a:115c:a1e0::6d37:497b/128"],
"Endpoints": ["77.164.248.136:42619", "10.65.0.27:42619", "172.17.0.1:42619"],
"Key": "nodekey:caf4fc8eca12786be3bb41b10e5d2cf0fdf060cd149101861f302b26e8403c22",
"KeyExpiry": "2027-04-28T16:37:31Z",
"DiscoKey": "discokey:5e14967dfad105da855e7a54c73bec6cd73df85c2f5104a72b48e6d5b06b8f72",
"Addresses": ["100.64.0.18/32", "fd7a:115c:a1e0::12/128"],
"AllowedIPs": ["100.64.0.18/32", "fd7a:115c:a1e0::12/128"],
"Endpoints": [
"192.0.2.1:34545",
"198.51.100.1:34545",
"198.51.100.2:34545",
"198.51.100.3:34545"
],
"Hostinfo": {"Hostname": "venusaur", "Services": [
{"Proto": "peerapi4", "Port": 36348},
{"Proto": "peerapi6", "Port": 36348},
{"Proto": "peerapi4", "Port": 42394},
{"Proto": "peerapi6", "Port": 42394},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T16:09:00.66143059Z",
"Created": "2026-10-30T16:37:31.951044672Z",
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-admin": null,
"https://tailscale.com/cap/ssh": null,
@@ -5446,6 +5538,7 @@
"ComputedNameWithHost": "venusaur"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-admin",
"https://tailscale.com/cap/ssh",
@@ -5456,8 +5549,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:6f308f7edd9d319dbdf8d3bca5ee815fb2a9ebaf49640a04e0efe9c76d8a497a",
"MachineKey": "mkey:ae0fcb046082d241a99c76a1b0e19dbf4e9b3d9b8d2529a890feaf94833f4f07",
"NodeKey": "nodekey:caf4fc8eca12786be3bb41b10e5d2cf0fdf060cd149101861f302b26e8403c22",
"MachineKey": "mkey:c62cbc580030d29aac0d848bcb99f81150a381d06ed1b4edefc11a3bd0a8c021",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -6291,24 +6384,30 @@
}}, "weedle": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 2762747162340321,
"StableID": "nJ5s9dgFaN11CNTRL",
"ID": 888647694469960,
"StableID": "n1BJjYGUw711CNTRL",
"Name": "weedle.tail78f774.ts.net.",
"User": 2762747162340321,
"Key": "nodekey:7ffc956fbcb31a5318952c16dc0e9d9caf89024cc2680cfd305fd7a0629a4f46",
"DiscoKey": "discokey:8323516b95217270b4480317a64cbdf87c046af1fd906da4b16c4603d3527505",
"Addresses": ["100.90.79.71/32", "fd7a:115c:a1e0::6237:4f47/128"],
"AllowedIPs": ["100.90.79.71/32", "fd7a:115c:a1e0::6237:4f47/128"],
"Endpoints": ["77.164.248.136:50262", "10.65.0.27:50262", "172.17.0.1:50262"],
"User": 888647694469960,
"Key": "nodekey:8dc88498a2c50776486532c10328d0bff352c4758fea5b5b498754168b98dc64",
"DiscoKey": "discokey:a0348bb78f501a42b7df45a6cb9090578d4a9bdc46a52eea76a9171482b1df4a",
"Addresses": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"Endpoints": [
"192.0.2.1:42883",
"198.51.100.1:42883",
"198.51.100.2:42883",
"198.51.100.3:42883"
],
"Hostinfo": {"Hostname": "weedle", "RequestTags": ["tag:client"], "Services": [
{"Proto": "peerapi4", "Port": 62861},
{"Proto": "peerapi6", "Port": 62861},
{"Proto": "peerapi4", "Port": 63957},
{"Proto": "peerapi6", "Port": 63957},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T16:08:58.492985061Z",
"Created": "2026-10-30T16:37:29.766313972Z",
"Tags": ["tag:client"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -6323,6 +6422,7 @@
"ComputedNameWithHost": "weedle"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -6333,25 +6433,30 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:7ffc956fbcb31a5318952c16dc0e9d9caf89024cc2680cfd305fd7a0629a4f46",
"MachineKey": "mkey:be6f786e2a5b254abaf5820496b125ee6c48b8d824383a9d8ac9eca47da1eb20",
"NodeKey": "nodekey:8dc88498a2c50776486532c10328d0bff352c4758fea5b5b498754168b98dc64",
"MachineKey": "mkey:066da0d2bf27470cace152e3a7da88fcd408d2eb242d2e1b3b55457d4bfc8f31",
"Peers": [{
"ID": 5101918606587955,
"StableID": "ntbkZXkfqg11CNTRL",
"ID": 4437896814165912,
"StableID": "nPN3cP2web11CNTRL",
"Name": "beedrill.tail78f774.ts.net.",
"User": 1260082990019555,
"Key": "nodekey:f7a6e3c8bf3b2fbc0744149c086386a8986f2322a64dfb75aa0061f9fa060e15",
"DiscoKey": "discokey:dc97b5ed1cf36e11e32040f72cfb7e2d255cd185ae5c3d27aee991e8cd76c346",
"Addresses": ["100.70.14.22/32", "fd7a:115c:a1e0::fa37:e16/128"],
"AllowedIPs": ["100.70.14.22/32", "fd7a:115c:a1e0::fa37:e16/128"],
"Endpoints": ["77.164.248.136:37019", "10.65.0.27:37019", "172.17.0.1:37019"],
"HomeDERP": 14,
"Key": "nodekey:c96b801437659c5ce413137fb76ad0e4c91a312bf30fa82613f50d58eb2d3420",
"DiscoKey": "discokey:5a4df9a6e45afb1b2175991d338a14edd762be9006fa3bf7175e5e97b4e17d7c",
"Addresses": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
"Endpoints": [
"192.0.2.1:44827",
"198.51.100.1:44827",
"198.51.100.2:44827",
"198.51.100.3:44827"
],
"HomeDERP": 14,
"Hostinfo": {"OS": "linux", "Hostname": "beedrill", "Services": [
{"Proto": "peerapi4", "Port": 45247},
{"Proto": "peerapi6", "Port": 45247}
{"Proto": "peerapi4", "Port": 50358},
{"Proto": "peerapi6", "Port": 50358}
]},
"Created": "2026-04-10T16:08:59.580525917Z",
"Cap": 131,
"Created": "2026-10-30T16:37:30.915216391Z",
"Cap": 142,
"Tags": ["tag:server"],
"Online": true,
"ComputedName": "beedrill",
@@ -7185,8 +7290,8 @@
"ID": 1260082990019555,
"LoginName": "tagged-devices",
"DisplayName": "Tagged Devices"
}, "2762747162340321": {
"ID": 2762747162340321,
}, "888647694469960": {
"ID": 888647694469960,
"LoginName": "weedle.tail78f774.ts.net",
"DisplayName": "weedle"
}}
hscontrol/policy/v2/testdata/acl_results/acl-mr09.hujson
Generated Vendored
+422 -294
View File
File diff suppressed because it is too large. Load diff
hscontrol/policy/v2/testdata/acl_results/acl-mr20.hujson
Generated Vendored
+410 -288
View File
File diff suppressed because it is too large. Load diff
hscontrol/policy/v2/testdata/acl_results/acl-mu02.hujson
Generated Vendored
+270 -175
View File
@@ -3,26 +3,58 @@
// acl mu02
//
// Nodes with filter rules: 2 of 8
// Captured at: 2026-04-10T16:28:15Z
// tscap version: tscap/dev
// Captured at: 2026-10-30T16:39:34Z
// tool version: tscap/5f80ee6150559e777612549d896d444b50768737
// schema version: 1
{
"schema_version": 1,
"test_id": "acl-mu02",
"description": "acl mu02",
"category": "acl",
"captured_at": "2026-04-10T16:28:15.846302209Z",
"tool_version": "tscap/dev",
"captured_at": "2026-10-30T16:39:34.490907986Z",
"tool_version": "tscap/5f80ee6150559e777612549d896d444b50768737",
"client_version": "1.102.5-ERR-BuildInfo capver 142",
"tailnet": "odin@example.com",
"input": {
"full_policy": "{\"acls\":[{\"action\":\"accept\",\"dst\":[\"autogroup:self:*\"],\"src\":[\"group:developers\"]}],\"autoApprovers\":{\"routes\":{\"0.0.0.0/0\":[\"tag:exit\"],\"10.33.0.0/16\":[\"tag:router\"],\"::/0\":[\"tag:exit\"]}},\"groups\":{\"group:admins\":[\"odin@example.com\"],\"group:developers\":[\"thor@example.org\",\"odin@example.com\"],\"group:empty\":[],\"group:monitors\":[\"freya@example.com\"]},\"hosts\":{\"internal\":\"10.0.0.0/8\",\"prodbox\":\"100.103.8.15\",\"subnet24\":\"192.168.1.0/24\",\"webserver\":\"100.108.74.26\"},\"tagOwners\":{\"tag:client\":[\"odin@example.com\"],\"tag:exit\":[\"odin@example.com\"],\"tag:pidgey\":[\"odin@example.com\"],\"tag:pidgeotto\":[\"odin@example.com\"],\"tag:group-a\":[\"odin@example.com\"],\"tag:group-b\":[\"odin@example.com\"],\"tag:ha\":[\"odin@example.com\"],\"tag:prod\":[\"odin@example.com\"],\"tag:router\":[\"odin@example.com\"],\"tag:spearow\":[\"odin@example.com\"],\"tag:fearow\":[\"odin@example.com\"],\"tag:server\":[\"odin@example.com\"]}}",
"api_response_code": 200,
"tailnet": {
"dns": {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
"settings": {}
},
"scenario_hujson": " \n{\n\t\"category\": \"acl\",\n\t\"description\": \"acl mu02\",\n\t\"id\": \"acl-mu02\",\n\t\"policy\": {\"acls\": [{\n\t\t\"action\": \"accept\",\n\t\t\"dst\": [\"autogroup:self:*\"],\n\t\t\"src\": [\"group:developers\"]\n\t}], \"autoApprovers\": {\"routes\": {\n\t\t\"0.0.0.0/0\": [\"tag:exit\"],\n\t\t\"10.33.0.0/16\": [\"tag:router\"],\n\t\t\"::/0\": [\"tag:exit\"]\n\t}}, \"groups\": {\n\t\t\"group:admins\": [\"odin@example.com\"],\n\t\t\"group:developers\": [\"thor@example.org\", \"odin@example.com\"],\n\t\t\"group:empty\": [],\n\t\t\"group:monitors\": [\"freya@example.com\"]\n\t}, \"hosts\": {\n\t\t\"internal\": \"10.0.0.0/8\",\n\t\t\"prodbox\": \"100.103.8.15\",\n\t\t\"subnet24\": \"192.168.1.0/24\",\n\t\t\"webserver\": \"100.108.74.26\"\n\t}, \"tagOwners\": {\n\t\t\"tag:client\": [\"odin@example.com\"],\n\t\t\"tag:exit\": [\"odin@example.com\"],\n\t\t\"tag:pidgey\": [\"odin@example.com\"],\n\t\t\"tag:pidgeotto\": [\"odin@example.com\"],\n\t\t\"tag:group-a\": [\"odin@example.com\"],\n\t\t\"tag:group-b\": [\"odin@example.com\"],\n\t\t\"tag:ha\": [\"odin@example.com\"],\n\t\t\"tag:prod\": [\"odin@example.com\"],\n\t\t\"tag:router\": [\"odin@example.com\"],\n\t\t\"tag:spearow\": [\"odin@example.com\"],\n\t\t\"tag:fearow\": [\"odin@example.com\"],\n\t\t\"tag:server\": [\"odin@example.com\"]\n\t}},\n\t\"tailnet\": {\n\t\t\"dns\": {\"magic_dns\": false, \"nameservers\": [], \"search_paths\": [], \"split_dns\": {}},\n\t\t\"settings\": {}\n\t},\n\t\"topology\": \"../_topologies/acl.hujson\"\n}\n",
"scenario_path": "scenarios/acl/acl-mu02.hujson"
"scenario_path": "scenarios/acl/acl-mu02.hujson",
"full_policy": {"acls": [{
"action": "accept",
"dst": ["autogroup:self:*"],
"src": ["group:developers"]
}], "autoApprovers": {"routes": {
"0.0.0.0/0": ["tag:exit"],
"10.33.0.0/16": ["tag:router"],
"::/0": ["tag:exit"]
}}, "groups": {
"group:admins": ["odin@example.com"],
"group:developers": ["thor@example.org", "odin@example.com"],
"group:empty": [],
"group:monitors": ["freya@example.com"]
}, "hosts": {
"internal": "10.0.0.0/8",
"prodbox": "100.103.8.15",
"subnet24": "192.168.1.0/24",
"webserver": "100.108.74.26"
}, "tagOwners": {
"tag:client": ["odin@example.com"],
"tag:exit": ["odin@example.com"],
"tag:pidgey": ["odin@example.com"],
"tag:pidgeotto": ["odin@example.com"],
"tag:group-a": ["odin@example.com"],
"tag:group-b": ["odin@example.com"],
"tag:ha": ["odin@example.com"],
"tag:prod": ["odin@example.com"],
"tag:router": ["odin@example.com"],
"tag:spearow": ["odin@example.com"],
"tag:fearow": ["odin@example.com"],
"tag:server": ["odin@example.com"]
}}
},
"topology": {"users": [
{"id": 1, "name": "odin", "email": "odin@example.com"},
@@ -31,84 +63,90 @@
], "nodes": {"beedrill": {
"hostname": "beedrill",
"tags": ["tag:server"],
"ipv4": "100.80.36.125",
"ipv6": "fd7a:115c:a1e0::c637:247d",
"ipv4": "100.64.0.16",
"ipv6": "fd7a:115c:a1e0::10",
"routable_ips": [],
"approved_routes": []
}, "bulbasaur": {
"hostname": "bulbasaur",
"tags": [],
"ipv4": "100.89.183.51",
"ipv6": "fd7a:115c:a1e0::6e37:b733",
"ipv4": "100.64.0.19",
"ipv6": "fd7a:115c:a1e0::13",
"user": "odin",
"routable_ips": [],
"approved_routes": []
}, "charmander": {
"hostname": "charmander",
"tags": ["tag:exit"],
"ipv4": "100.70.179.93",
"ipv6": "fd7a:115c:a1e0::6f37:b35d",
"ipv4": "100.64.0.4",
"ipv6": "fd7a:115c:a1e0::4",
"routable_ips": ["0.0.0.0/0", "::/0"],
"approved_routes": []
}, "ivysaur": {
"hostname": "ivysaur",
"tags": [],
"ipv4": "100.90.78.6",
"ipv6": "fd7a:115c:a1e0::b537:4e06",
"ipv4": "100.64.0.17",
"ipv6": "fd7a:115c:a1e0::11",
"user": "thor",
"routable_ips": [],
"approved_routes": []
}, "kakuna": {
"hostname": "kakuna",
"tags": ["tag:prod"],
"ipv4": "100.120.125.73",
"ipv6": "fd7a:115c:a1e0::1237:7d49",
"ipv4": "100.64.0.15",
"ipv6": "fd7a:115c:a1e0::f",
"routable_ips": [],
"approved_routes": []
}, "squirtle": {
"hostname": "squirtle",
"tags": ["tag:router"],
"ipv4": "100.109.37.1",
"ipv6": "fd7a:115c:a1e0::e237:2501",
"ipv4": "100.64.0.13",
"ipv6": "fd7a:115c:a1e0::d",
"routable_ips": ["10.33.0.0/16"],
"approved_routes": []
"approved_routes": ["10.33.0.0/16"]
}, "venusaur": {
"hostname": "venusaur",
"tags": [],
"ipv4": "100.66.104.60",
"ipv6": "fd7a:115c:a1e0::b237:683c",
"ipv4": "100.64.0.18",
"ipv6": "fd7a:115c:a1e0::12",
"user": "freya",
"routable_ips": [],
"approved_routes": []
}, "weedle": {
"hostname": "weedle",
"tags": ["tag:client"],
"ipv4": "100.76.246.27",
"ipv6": "fd7a:115c:a1e0::3b37:f61b",
"ipv4": "100.64.0.14",
"ipv6": "fd7a:115c:a1e0::e",
"routable_ips": [],
"approved_routes": []
}}},
"captures": {"beedrill": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 5328561933599363,
"StableID": "n6AcGcHKci11CNTRL",
"ID": 3079644562065244,
"StableID": "nfgjCM3n3R11CNTRL",
"Name": "beedrill.tail78f774.ts.net.",
"User": 5328561933599363,
"Key": "nodekey:ef5a25bb23a3e5f6272e02168c3546cfa954ddfd6c94b6d48a153c4dc690247c",
"DiscoKey": "discokey:dc4e1333acba05e07fac7a74f1b18a1e957ca63feff07709d447464475eeac61",
"Addresses": ["100.80.36.125/32", "fd7a:115c:a1e0::c637:247d/128"],
"AllowedIPs": ["100.80.36.125/32", "fd7a:115c:a1e0::c637:247d/128"],
"Endpoints": ["77.164.248.136:40016", "10.65.0.27:40016", "172.17.0.1:40016"],
"User": 3079644562065244,
"Key": "nodekey:fd5f32bdfe84d8fcceefcb515f5e1e52c4ded641285b18c62dff8ef2e1a83251",
"DiscoKey": "discokey:bbacd2d907f16cd98ac8b583c4fce4fa627e54e83de611c87af3a7f651ecca19",
"Addresses": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
"Endpoints": [
"192.0.2.1:58437",
"198.51.100.1:58437",
"198.51.100.2:58437",
"198.51.100.3:58437"
],
"Hostinfo": {"Hostname": "beedrill", "RequestTags": ["tag:server"], "Services": [
{"Proto": "peerapi4", "Port": 39813},
{"Proto": "peerapi6", "Port": 39813},
{"Proto": "peerapi4", "Port": 50358},
{"Proto": "peerapi6", "Port": 50358},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T16:28:19.864927592Z",
"Created": "2026-10-30T16:39:38.089077869Z",
"Tags": ["tag:server"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -123,6 +161,7 @@
"ComputedNameWithHost": "beedrill"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -133,8 +172,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:ef5a25bb23a3e5f6272e02168c3546cfa954ddfd6c94b6d48a153c4dc690247c",
"MachineKey": "mkey:7d7d2d534cdf2d64376f5097b0be163dbcc405d3077f8c971f59b686a28e2c3f",
"NodeKey": "nodekey:fd5f32bdfe84d8fcceefcb515f5e1e52c4ded641285b18c62dff8ef2e1a83251",
"MachineKey": "mkey:fc21084a20d919423ec79b21bd9731779bc5a44b047a7fe441a667de34c6944f",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -960,47 +999,53 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {"5328561933599363": {
"ID": 5328561933599363,
"UserProfiles": {"3079644562065244": {
"ID": 3079644562065244,
"LoginName": "beedrill.tail78f774.ts.net",
"DisplayName": "beedrill"
}}
}}, "bulbasaur": {
"packet_filter_rules": [{"SrcIPs": ["100.89.183.51", "fd7a:115c:a1e0::6e37:b733"], "DstPorts": [
{"IP": "100.89.183.51", "Ports": {"First": 0, "Last": 65535}},
{"IP": "fd7a:115c:a1e0::6e37:b733", "Ports": {"First": 0, "Last": 65535}}
"packet_filter_rules": [{"SrcIPs": ["100.64.0.19", "fd7a:115c:a1e0::13"], "DstPorts": [
{"IP": "100.64.0.19", "Ports": {"First": 0, "Last": 65535}},
{"IP": "fd7a:115c:a1e0::13", "Ports": {"First": 0, "Last": 65535}}
]}],
"packet_filter_matches": [{
"IPProto": [6, 17, 1, 58],
"Srcs": ["100.89.183.51/32", "fd7a:115c:a1e0::6e37:b733/128"],
"Srcs": ["100.64.0.19/32", "fd7a:115c:a1e0::13/128"],
"SrcCaps": null,
"Dsts": [{"Net": "100.89.183.51/32", "Ports": {"First": 0, "Last": 65535}}, {
"Net": "fd7a:115c:a1e0::6e37:b733/128",
"Ports": {"First": 0, "Last": 65535}
}],
"Dsts": [
{"Net": "100.64.0.19/32", "Ports": {"First": 0, "Last": 65535}},
{"Net": "fd7a:115c:a1e0::13/128", "Ports": {"First": 0, "Last": 65535}}
],
"Caps": []
}],
"netmap": {
"Cached": false,
"SelfNode": {
"ID": 3261829307896591,
"StableID": "ng76L3jHUS11CNTRL",
"ID": 581405413771635,
"StableID": "nksAVzXKY511CNTRL",
"Name": "bulbasaur.tail78f774.ts.net.",
"User": 4156223528223174,
"Key": "nodekey:e5403833665e70e3deb73b8fda395c07467c553f35a50df385497eca6e99b732",
"KeyExpiry": "2026-10-07T16:28:21Z",
"DiscoKey": "discokey:2ef2b76d9bfa5595b7444f49bb6688a860aecadeddfb9c39062157573ac7a72a",
"Addresses": ["100.89.183.51/32", "fd7a:115c:a1e0::6e37:b733/128"],
"AllowedIPs": ["100.89.183.51/32", "fd7a:115c:a1e0::6e37:b733/128"],
"Endpoints": ["77.164.248.136:45786", "10.65.0.27:45786", "172.17.0.1:45786"],
"Key": "nodekey:a3583c52cba55161510fd8aca24106165842213a0b9ee39ebbe978dbd6fcc67f",
"KeyExpiry": "2027-04-28T16:39:39Z",
"DiscoKey": "discokey:914e6d6b6002ae8b9cecec545c97a7312d062384bfa55788ac5f7ffcf72e2e24",
"Addresses": ["100.64.0.19/32", "fd7a:115c:a1e0::13/128"],
"AllowedIPs": ["100.64.0.19/32", "fd7a:115c:a1e0::13/128"],
"Endpoints": [
"192.0.2.1:49363",
"198.51.100.1:49363",
"198.51.100.2:49363",
"198.51.100.3:49363"
],
"Hostinfo": {"Hostname": "bulbasaur", "Services": [
{"Proto": "peerapi4", "Port": 38212},
{"Proto": "peerapi6", "Port": 38212},
{"Proto": "peerapi4", "Port": 38156},
{"Proto": "peerapi6", "Port": 38156},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T16:28:21.465399519Z",
"Created": "2026-10-30T16:39:39.699643496Z",
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-admin": null,
"https://tailscale.com/cap/is-owner": null,
@@ -1016,6 +1061,7 @@
"ComputedNameWithHost": "bulbasaur"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-admin",
"https://tailscale.com/cap/is-owner",
@@ -1027,23 +1073,23 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:e5403833665e70e3deb73b8fda395c07467c553f35a50df385497eca6e99b732",
"MachineKey": "mkey:b13b4d36b99d91581399b2ea0cab85c7e6eabc40d4e4afeace37d0bf95dd9e02",
"NodeKey": "nodekey:a3583c52cba55161510fd8aca24106165842213a0b9ee39ebbe978dbd6fcc67f",
"MachineKey": "mkey:6cc373f485ecccb0c125d8f068c08db1e715d68e5df0fdeebd2c83c4758aed44",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [{
"IPProto": [6, 17, 1, 58],
"Srcs": ["100.89.183.51/32", "fd7a:115c:a1e0::6e37:b733/128"],
"Srcs": ["100.64.0.19/32", "fd7a:115c:a1e0::13/128"],
"SrcCaps": null,
"Dsts": [{"Net": "100.89.183.51/32", "Ports": {"First": 0, "Last": 65535}}, {
"Net": "fd7a:115c:a1e0::6e37:b733/128",
"Ports": {"First": 0, "Last": 65535}
}],
"Dsts": [
{"Net": "100.64.0.19/32", "Ports": {"First": 0, "Last": 65535}},
{"Net": "fd7a:115c:a1e0::13/128", "Ports": {"First": 0, "Last": 65535}}
],
"Caps": []
}],
"PacketFilterRules": [{"SrcIPs": ["100.89.183.51", "fd7a:115c:a1e0::6e37:b733"], "DstPorts": [
{"IP": "100.89.183.51", "Ports": {"First": 0, "Last": 65535}},
{"IP": "fd7a:115c:a1e0::6e37:b733", "Ports": {"First": 0, "Last": 65535}}
"PacketFilterRules": [{"SrcIPs": ["100.64.0.19", "fd7a:115c:a1e0::13"], "DstPorts": [
{"IP": "100.64.0.19", "Ports": {"First": 0, "Last": 65535}},
{"IP": "fd7a:115c:a1e0::13", "Ports": {"First": 0, "Last": 65535}}
]}],
"SSHPolicy": {"rules": []},
"CollectServices": false,
@@ -1875,24 +1921,35 @@
}, "charmander": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 8806400326574022,
"StableID": "nHUykoCSmB21CNTRL",
"ID": 7822200986460685,
"StableID": "nAsfJSxg5421CNTRL",
"Name": "charmander.tail78f774.ts.net.",
"User": 8806400326574022,
"Key": "nodekey:e5f677b9df80dec94ffbf0f7dcc27ee766c6447a724d112c635a097d6f06b35c",
"DiscoKey": "discokey:8030caa84896fa3e9ff4c8e6e2421342202dc395dfaa7cd5417fa0e8a51e3d56",
"Addresses": ["100.70.179.93/32", "fd7a:115c:a1e0::6f37:b35d/128"],
"AllowedIPs": ["100.70.179.93/32", "fd7a:115c:a1e0::6f37:b35d/128"],
"Endpoints": ["77.164.248.136:44909", "10.65.0.27:44909", "172.17.0.1:44909"],
"Hostinfo": {"Hostname": "charmander", "RequestTags": ["tag:exit"], "Services": [
{"Proto": "peerapi4", "Port": 63570},
{"Proto": "peerapi6", "Port": 63570},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T16:28:17.759489407Z",
"User": 7822200986460685,
"Key": "nodekey:9e5bf9f8a03f52dfb61b15931d3bb097118e1d93bf3f9330ea15952b44c48546",
"DiscoKey": "discokey:f3376a3a427d8094bb13fe4b24c27168724d2d49fa81404882f098fe6b1b1f2f",
"Addresses": ["100.64.0.4/32", "fd7a:115c:a1e0::4/128"],
"AllowedIPs": ["100.64.0.4/32", "fd7a:115c:a1e0::4/128"],
"Endpoints": [
"192.0.2.1:48511",
"198.51.100.1:48511",
"198.51.100.2:48511",
"198.51.100.3:48511"
],
"Hostinfo": {
"Hostname": "charmander",
"RoutableIPs": ["0.0.0.0/0", "::/0"],
"RequestTags": ["tag:exit"],
"Services": [
{"Proto": "peerapi4", "Port": 37067},
{"Proto": "peerapi6", "Port": 37067},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]
},
"Created": "2026-10-30T16:39:36.0467347Z",
"Tags": ["tag:exit"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -1907,6 +1964,7 @@
"ComputedNameWithHost": "charmander"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -1917,8 +1975,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:e5f677b9df80dec94ffbf0f7dcc27ee766c6447a724d112c635a097d6f06b35c",
"MachineKey": "mkey:43e116d6dabb9e813fa25ca8f56e1d1e3005213296f6b950b764dde7cabb372b",
"NodeKey": "nodekey:9e5bf9f8a03f52dfb61b15931d3bb097118e1d93bf3f9330ea15952b44c48546",
"MachineKey": "mkey:862d49a6b9f0d0e8af4596b4667f74a1f9b84766160d01f69170440b947f5d0d",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -2744,47 +2802,53 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {"8806400326574022": {
"ID": 8806400326574022,
"UserProfiles": {"7822200986460685": {
"ID": 7822200986460685,
"LoginName": "charmander.tail78f774.ts.net",
"DisplayName": "charmander"
}}
}}, "ivysaur": {
"packet_filter_rules": [{"SrcIPs": ["100.90.78.6", "fd7a:115c:a1e0::b537:4e06"], "DstPorts": [
{"IP": "100.90.78.6", "Ports": {"First": 0, "Last": 65535}},
{"IP": "fd7a:115c:a1e0::b537:4e06", "Ports": {"First": 0, "Last": 65535}}
"packet_filter_rules": [{"SrcIPs": ["100.64.0.17", "fd7a:115c:a1e0::11"], "DstPorts": [
{"IP": "100.64.0.17", "Ports": {"First": 0, "Last": 65535}},
{"IP": "fd7a:115c:a1e0::11", "Ports": {"First": 0, "Last": 65535}}
]}],
"packet_filter_matches": [{
"IPProto": [6, 17, 1, 58],
"Srcs": ["100.90.78.6/32", "fd7a:115c:a1e0::b537:4e06/128"],
"Srcs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
"SrcCaps": null,
"Dsts": [{"Net": "100.90.78.6/32", "Ports": {"First": 0, "Last": 65535}}, {
"Net": "fd7a:115c:a1e0::b537:4e06/128",
"Ports": {"First": 0, "Last": 65535}
}],
"Dsts": [
{"Net": "100.64.0.17/32", "Ports": {"First": 0, "Last": 65535}},
{"Net": "fd7a:115c:a1e0::11/128", "Ports": {"First": 0, "Last": 65535}}
],
"Caps": []
}],
"netmap": {
"Cached": false,
"SelfNode": {
"ID": 2431608656716788,
"StableID": "nDVoLhEHzK11CNTRL",
"ID": 60793318568423,
"StableID": "npyKPNwXU111CNTRL",
"Name": "ivysaur.tail78f774.ts.net.",
"User": 4538565228176803,
"Key": "nodekey:7924bedd5cb26cfa251d92cc63bf7bb1464b33ac5492764310d26446b55a4e05",
"KeyExpiry": "2026-10-07T16:28:20Z",
"DiscoKey": "discokey:ce0210980cdbceb14d379d6927a76ad8b4041505b1e3f9b0fc0f38874957ba46",
"Addresses": ["100.90.78.6/32", "fd7a:115c:a1e0::b537:4e06/128"],
"AllowedIPs": ["100.90.78.6/32", "fd7a:115c:a1e0::b537:4e06/128"],
"Endpoints": ["77.164.248.136:54485", "10.65.0.27:54485", "172.17.0.1:54485"],
"Key": "nodekey:d23b1df5ebe7010fe026362ccc66d59b0992edbd27bf7f6040008cae1b71fc58",
"KeyExpiry": "2027-04-28T16:39:38Z",
"DiscoKey": "discokey:e4b7e9177c3d073091c5ec4a6d84673183d114888393699ccab4faa9d935e86b",
"Addresses": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
"Endpoints": [
"192.0.2.1:34125",
"198.51.100.1:34125",
"198.51.100.2:34125",
"198.51.100.3:34125"
],
"Hostinfo": {"Hostname": "ivysaur", "Services": [
{"Proto": "peerapi4", "Port": 46538},
{"Proto": "peerapi6", "Port": 46538},
{"Proto": "peerapi4", "Port": 62496},
{"Proto": "peerapi6", "Port": 62496},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T16:28:20.385839729Z",
"Created": "2026-10-30T16:39:38.608513431Z",
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-admin": null,
"https://tailscale.com/cap/ssh": null,
@@ -2799,6 +2863,7 @@
"ComputedNameWithHost": "ivysaur"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-admin",
"https://tailscale.com/cap/ssh",
@@ -2809,23 +2874,23 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:7924bedd5cb26cfa251d92cc63bf7bb1464b33ac5492764310d26446b55a4e05",
"MachineKey": "mkey:d49e214a0dde32d624a22ebefa40008a2511163a508718f643ba8593012aa878",
"NodeKey": "nodekey:d23b1df5ebe7010fe026362ccc66d59b0992edbd27bf7f6040008cae1b71fc58",
"MachineKey": "mkey:20a912bcb2b26c1388a12e4767b450de3b9440d166d5f601e38b627688ffa268",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [{
"IPProto": [6, 17, 1, 58],
"Srcs": ["100.90.78.6/32", "fd7a:115c:a1e0::b537:4e06/128"],
"Srcs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
"SrcCaps": null,
"Dsts": [{"Net": "100.90.78.6/32", "Ports": {"First": 0, "Last": 65535}}, {
"Net": "fd7a:115c:a1e0::b537:4e06/128",
"Ports": {"First": 0, "Last": 65535}
}],
"Dsts": [
{"Net": "100.64.0.17/32", "Ports": {"First": 0, "Last": 65535}},
{"Net": "fd7a:115c:a1e0::11/128", "Ports": {"First": 0, "Last": 65535}}
],
"Caps": []
}],
"PacketFilterRules": [{"SrcIPs": ["100.90.78.6", "fd7a:115c:a1e0::b537:4e06"], "DstPorts": [
{"IP": "100.90.78.6", "Ports": {"First": 0, "Last": 65535}},
{"IP": "fd7a:115c:a1e0::b537:4e06", "Ports": {"First": 0, "Last": 65535}}
"PacketFilterRules": [{"SrcIPs": ["100.64.0.17", "fd7a:115c:a1e0::11"], "DstPorts": [
{"IP": "100.64.0.17", "Ports": {"First": 0, "Last": 65535}},
{"IP": "fd7a:115c:a1e0::11", "Ports": {"First": 0, "Last": 65535}}
]}],
"SSHPolicy": {"rules": []},
"CollectServices": false,
@@ -3648,31 +3713,39 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {
"4538565228176803": {"ID": 4538565228176803, "LoginName": "thor@example.org", "DisplayName": "thor"}
}
"UserProfiles": {"4538565228176803": {
"ID": 4538565228176803,
"LoginName": "thor@example.org",
"DisplayName": "thor"
}}
}
}, "kakuna": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 6027491591804397,
"StableID": "nktxn2zr4p11CNTRL",
"ID": 6483906793082006,
"StableID": "nPu7DjEads11CNTRL",
"Name": "kakuna.tail78f774.ts.net.",
"User": 6027491591804397,
"Key": "nodekey:bb3bfeb533eb1ee4b65d3d3471bc6bfd704aa106cb51156550189ee212787d48",
"DiscoKey": "discokey:df970ee26c2d13a21890c012b0bed0e345f818500b05a1063b24bf5ccab4913c",
"Addresses": ["100.120.125.73/32", "fd7a:115c:a1e0::1237:7d49/128"],
"AllowedIPs": ["100.120.125.73/32", "fd7a:115c:a1e0::1237:7d49/128"],
"Endpoints": ["77.164.248.136:58286", "10.65.0.27:58286", "172.17.0.1:58286"],
"User": 6483906793082006,
"Key": "nodekey:66d4717ac64c49ed36104da90150abb5f56aabace5ec9310d168503a518ece5f",
"DiscoKey": "discokey:b6fc9e1e1afdcf3d51b1a7398fcb10ee1149ebf03ffaa0da0f1f0595ab5c063c",
"Addresses": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
"Endpoints": [
"192.0.2.1:55969",
"198.51.100.1:55969",
"198.51.100.2:55969",
"198.51.100.3:55969"
],
"Hostinfo": {"Hostname": "kakuna", "RequestTags": ["tag:prod"], "Services": [
{"Proto": "peerapi4", "Port": 40565},
{"Proto": "peerapi6", "Port": 40565},
{"Proto": "peerapi4", "Port": 51523},
{"Proto": "peerapi6", "Port": 51523},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T16:28:19.326226338Z",
"Created": "2026-10-30T16:39:37.561457673Z",
"Tags": ["tag:prod"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -3687,6 +3760,7 @@
"ComputedNameWithHost": "kakuna"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -3697,8 +3771,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:bb3bfeb533eb1ee4b65d3d3471bc6bfd704aa106cb51156550189ee212787d48",
"MachineKey": "mkey:8c120747147963300c899f707af659bcaad3700e3716fae26fb129f862d6d138",
"NodeKey": "nodekey:66d4717ac64c49ed36104da90150abb5f56aabace5ec9310d168503a518ece5f",
"MachineKey": "mkey:63a57a6ea3fc6a2184e7a8a40e76d38b04acb6b6a30363bc5a9be7815fa4d337",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -4524,38 +4598,44 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {"6027491591804397": {
"ID": 6027491591804397,
"UserProfiles": {"6483906793082006": {
"ID": 6483906793082006,
"LoginName": "kakuna.tail78f774.ts.net",
"DisplayName": "kakuna"
}}
}}, "squirtle": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 4588202836354312,
"StableID": "nhoz5tJ1qc11CNTRL",
"ID": 4636122137793909,
"StableID": "nYQRft4iCd11CNTRL",
"Name": "squirtle.tail78f774.ts.net.",
"User": 4588202836354312,
"Key": "nodekey:28c3926e999b5a7ad95ee3938aefda0c98fa8f4889b087b5fa9f89cde22d2500",
"DiscoKey": "discokey:0e6bb08ad7e0fbb80fd2e2178575c949e6bd9539054cf56fe5a910df63040535",
"Addresses": ["100.109.37.1/32", "fd7a:115c:a1e0::e237:2501/128"],
"AllowedIPs": ["100.109.37.1/32", "fd7a:115c:a1e0::e237:2501/128", "10.33.0.0/16"],
"Endpoints": ["77.164.248.136:46481", "10.65.0.27:46481", "172.17.0.1:46481"],
"User": 4636122137793909,
"Key": "nodekey:970700d902b4c3b0c7e38affcbc13279424d4cab3d79b14f605a701097055907",
"DiscoKey": "discokey:62462df6d6fb202f5b123edb0ba4b595df2ae8d7a00105878e46f13b210c2316",
"Addresses": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128", "10.33.0.0/16"],
"Endpoints": [
"192.0.2.1:53661",
"198.51.100.1:53661",
"198.51.100.2:53661",
"198.51.100.3:53661"
],
"Hostinfo": {
"Hostname": "squirtle",
"RoutableIPs": ["10.33.0.0/16"],
"RequestTags": ["tag:router"],
"Services": [
{"Proto": "peerapi4", "Port": 57616},
{"Proto": "peerapi6", "Port": 57616},
{"Proto": "peerapi4", "Port": 43119},
{"Proto": "peerapi6", "Port": 43119},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]
},
"Created": "2026-04-10T16:28:18.235689877Z",
"Created": "2026-10-30T16:39:36.505605849Z",
"Tags": ["tag:router"],
"PrimaryRoutes": ["10.33.0.0/16"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -4570,6 +4650,7 @@
"ComputedNameWithHost": "squirtle"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -4580,8 +4661,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:28c3926e999b5a7ad95ee3938aefda0c98fa8f4889b087b5fa9f89cde22d2500",
"MachineKey": "mkey:b14469ebd97fa2ed3f41ac6ebac01607aa1935b11e166fe178122636b0b8426c",
"NodeKey": "nodekey:970700d902b4c3b0c7e38affcbc13279424d4cab3d79b14f605a701097055907",
"MachineKey": "mkey:e20fcecb1e0981da8fa26eda150150f56196755a5c659ada4e8cfd9f62c9090b",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -5407,32 +5488,38 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {"4588202836354312": {
"ID": 4588202836354312,
"UserProfiles": {"4636122137793909": {
"ID": 4636122137793909,
"LoginName": "squirtle.tail78f774.ts.net",
"DisplayName": "squirtle"
}}
}}, "venusaur": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 2111686676251963,
"StableID": "nSi3TqRPVH11CNTRL",
"ID": 4186232198804471,
"StableID": "nkw7LqDxgZ11CNTRL",
"Name": "venusaur.tail78f774.ts.net.",
"User": 3982058329734709,
"Key": "nodekey:4eb236a993b309eb403d8e7fb26f388ea08f2a6e0ded3467b575998eb242683b",
"KeyExpiry": "2026-10-07T16:28:20Z",
"DiscoKey": "discokey:612ff42dc794963c62afab8ea2496f44202d122eca36624cc62b63de41ebf13b",
"Addresses": ["100.66.104.60/32", "fd7a:115c:a1e0::b237:683c/128"],
"AllowedIPs": ["100.66.104.60/32", "fd7a:115c:a1e0::b237:683c/128"],
"Endpoints": ["77.164.248.136:43997", "10.65.0.27:43997", "172.17.0.1:43997"],
"Key": "nodekey:1d7deac17267bc1467325822d307e9d127d7993ff6be43f6844f25310f3a425c",
"KeyExpiry": "2027-04-28T16:39:39Z",
"DiscoKey": "discokey:57871c9f44ad2c78f065d93ad29627946ea0290d239f4735cc2d50ae3eb71639",
"Addresses": ["100.64.0.18/32", "fd7a:115c:a1e0::12/128"],
"AllowedIPs": ["100.64.0.18/32", "fd7a:115c:a1e0::12/128"],
"Endpoints": [
"192.0.2.1:35168",
"198.51.100.1:35168",
"198.51.100.2:35168",
"198.51.100.3:35168"
],
"Hostinfo": {"Hostname": "venusaur", "Services": [
{"Proto": "peerapi4", "Port": 40340},
{"Proto": "peerapi6", "Port": 40340},
{"Proto": "peerapi4", "Port": 42394},
{"Proto": "peerapi6", "Port": 42394},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T16:28:20.931010808Z",
"Created": "2026-10-30T16:39:39.138994874Z",
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-admin": null,
"https://tailscale.com/cap/ssh": null,
@@ -5447,6 +5534,7 @@
"ComputedNameWithHost": "venusaur"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-admin",
"https://tailscale.com/cap/ssh",
@@ -5457,8 +5545,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:4eb236a993b309eb403d8e7fb26f388ea08f2a6e0ded3467b575998eb242683b",
"MachineKey": "mkey:50ecc7201e1ff121054cafab40ab0ad5f9cf66a3836dec56b0413e56f07f9f3c",
"NodeKey": "nodekey:1d7deac17267bc1467325822d307e9d127d7993ff6be43f6844f25310f3a425c",
"MachineKey": "mkey:90ff45235fe23ff23758643ec0161391917e05fc5f4919ac201665f2cc3c9a0e",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -6292,24 +6380,30 @@
}}, "weedle": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 2019098086597390,
"StableID": "n5SVqQHTmG11CNTRL",
"ID": 147778603336901,
"StableID": "nWqh8ptv9211CNTRL",
"Name": "weedle.tail78f774.ts.net.",
"User": 2019098086597390,
"Key": "nodekey:2b9c8b22a04c7bf97c282673b34bc55258f79d74954a5bb75e71226e3b0cf61a",
"DiscoKey": "discokey:f8e886f632926971e8b64361a2a0535e8147cd65b60a4352a3d84de2f957610a",
"Addresses": ["100.76.246.27/32", "fd7a:115c:a1e0::3b37:f61b/128"],
"AllowedIPs": ["100.76.246.27/32", "fd7a:115c:a1e0::3b37:f61b/128"],
"Endpoints": ["77.164.248.136:39709", "10.65.0.27:39709", "172.17.0.1:39709"],
"User": 147778603336901,
"Key": "nodekey:f6b555a6d6aeb86c24c563f2f943b9bc11c960d74dd5871b78485121f409957a",
"DiscoKey": "discokey:64c569a960f2e008d26d8d038201de909d987bdd7badf80ee6e4f18d93c0ef23",
"Addresses": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"Endpoints": [
"192.0.2.1:48998",
"198.51.100.1:48998",
"198.51.100.2:48998",
"198.51.100.3:48998"
],
"Hostinfo": {"Hostname": "weedle", "RequestTags": ["tag:client"], "Services": [
{"Proto": "peerapi4", "Port": 41569},
{"Proto": "peerapi6", "Port": 41569},
{"Proto": "peerapi4", "Port": 63957},
{"Proto": "peerapi6", "Port": 63957},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T16:28:18.778166584Z",
"Created": "2026-10-30T16:39:37.051352423Z",
"Tags": ["tag:client"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -6324,6 +6418,7 @@
"ComputedNameWithHost": "weedle"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -6334,8 +6429,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:2b9c8b22a04c7bf97c282673b34bc55258f79d74954a5bb75e71226e3b0cf61a",
"MachineKey": "mkey:4becdbb92a7a3f3624c7cad9217eabb53d2b17dcee3007acc72b74c69d0bf016",
"NodeKey": "nodekey:f6b555a6d6aeb86c24c563f2f943b9bc11c960d74dd5871b78485121f409957a",
"MachineKey": "mkey:f2d3f363ebd9d929bc5f4e9e7dbef047ed9808a776732832abf46166ec64e77d",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -7161,8 +7256,8 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {"2019098086597390": {
"ID": 2019098086597390,
"UserProfiles": {"147778603336901": {
"ID": 147778603336901,
"LoginName": "weedle.tail78f774.ts.net",
"DisplayName": "weedle"
}}
hscontrol/policy/v2/testdata/acl_results/acl-mu07.hujson
Generated Vendored
+1297 -1032
View File
File diff suppressed because it is too large. Load diff
hscontrol/policy/v2/testdata/acl_results/acl-o04.hujson
Generated Vendored
+326 -216
View File
@@ -3,26 +3,58 @@
// acl o04
//
// Nodes with filter rules: 2 of 8
// Captured at: 2026-04-10T16:34:16Z
// tscap version: tscap/dev
// Captured at: 2026-10-30T16:41:00Z
// tool version: tscap/5f80ee6150559e777612549d896d444b50768737
// schema version: 1
{
"schema_version": 1,
"test_id": "acl-o04",
"description": "acl o04",
"category": "acl",
"captured_at": "2026-04-10T16:34:16.535202984Z",
"tool_version": "tscap/dev",
"captured_at": "2026-10-30T16:41:00.114354641Z",
"tool_version": "tscap/5f80ee6150559e777612549d896d444b50768737",
"client_version": "1.102.5-ERR-BuildInfo capver 142",
"tailnet": "odin@example.com",
"input": {
"full_policy": "{\"acls\":[{\"action\":\"accept\",\"dst\":[\"tag:prod:5432\",\"tag:server:22\"],\"src\":[\"tag:client\"]}],\"autoApprovers\":{\"routes\":{\"0.0.0.0/0\":[\"tag:exit\"],\"10.33.0.0/16\":[\"tag:router\"],\"::/0\":[\"tag:exit\"]}},\"groups\":{\"group:admins\":[\"odin@example.com\"],\"group:developers\":[\"thor@example.org\",\"odin@example.com\"],\"group:empty\":[],\"group:monitors\":[\"freya@example.com\"]},\"hosts\":{\"internal\":\"10.0.0.0/8\",\"prodbox\":\"100.103.8.15\",\"subnet24\":\"192.168.1.0/24\",\"webserver\":\"100.108.74.26\"},\"tagOwners\":{\"tag:client\":[\"odin@example.com\"],\"tag:exit\":[\"odin@example.com\"],\"tag:pidgey\":[\"odin@example.com\"],\"tag:pidgeotto\":[\"odin@example.com\"],\"tag:group-a\":[\"odin@example.com\"],\"tag:group-b\":[\"odin@example.com\"],\"tag:ha\":[\"odin@example.com\"],\"tag:prod\":[\"odin@example.com\"],\"tag:router\":[\"odin@example.com\"],\"tag:spearow\":[\"odin@example.com\"],\"tag:fearow\":[\"odin@example.com\"],\"tag:server\":[\"odin@example.com\"]}}",
"api_response_code": 200,
"tailnet": {
"dns": {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
"settings": {}
},
"scenario_hujson": " \n{\n\t\"category\": \"acl\",\n\t\"description\": \"acl o04\",\n\t\"id\": \"acl-o04\",\n\t\"policy\": {\"acls\": [{\n\t\t\"action\": \"accept\",\n\t\t\"dst\": [\"tag:prod:5432\", \"tag:server:22\"],\n\t\t\"src\": [\"tag:client\"]\n\t}], \"autoApprovers\": {\"routes\": {\n\t\t\"0.0.0.0/0\": [\"tag:exit\"],\n\t\t\"10.33.0.0/16\": [\"tag:router\"],\n\t\t\"::/0\": [\"tag:exit\"]\n\t}}, \"groups\": {\n\t\t\"group:admins\": [\"odin@example.com\"],\n\t\t\"group:developers\": [\"thor@example.org\", \"odin@example.com\"],\n\t\t\"group:empty\": [],\n\t\t\"group:monitors\": [\"freya@example.com\"]\n\t}, \"hosts\": {\n\t\t\"internal\": \"10.0.0.0/8\",\n\t\t\"prodbox\": \"100.103.8.15\",\n\t\t\"subnet24\": \"192.168.1.0/24\",\n\t\t\"webserver\": \"100.108.74.26\"\n\t}, \"tagOwners\": {\n\t\t\"tag:client\": [\"odin@example.com\"],\n\t\t\"tag:exit\": [\"odin@example.com\"],\n\t\t\"tag:pidgey\": [\"odin@example.com\"],\n\t\t\"tag:pidgeotto\": [\"odin@example.com\"],\n\t\t\"tag:group-a\": [\"odin@example.com\"],\n\t\t\"tag:group-b\": [\"odin@example.com\"],\n\t\t\"tag:ha\": [\"odin@example.com\"],\n\t\t\"tag:prod\": [\"odin@example.com\"],\n\t\t\"tag:router\": [\"odin@example.com\"],\n\t\t\"tag:spearow\": [\"odin@example.com\"],\n\t\t\"tag:fearow\": [\"odin@example.com\"],\n\t\t\"tag:server\": [\"odin@example.com\"]\n\t}},\n\t\"tailnet\": {\n\t\t\"dns\": {\"magic_dns\": false, \"nameservers\": [], \"search_paths\": [], \"split_dns\": {}},\n\t\t\"settings\": {}\n\t},\n\t\"topology\": \"../_topologies/acl.hujson\"\n}\n",
"scenario_path": "scenarios/acl/acl-o04.hujson"
"scenario_path": "scenarios/acl/acl-o04.hujson",
"full_policy": {"acls": [{
"action": "accept",
"dst": ["tag:prod:5432", "tag:server:22"],
"src": ["tag:client"]
}], "autoApprovers": {"routes": {
"0.0.0.0/0": ["tag:exit"],
"10.33.0.0/16": ["tag:router"],
"::/0": ["tag:exit"]
}}, "groups": {
"group:admins": ["odin@example.com"],
"group:developers": ["thor@example.org", "odin@example.com"],
"group:empty": [],
"group:monitors": ["freya@example.com"]
}, "hosts": {
"internal": "10.0.0.0/8",
"prodbox": "100.103.8.15",
"subnet24": "192.168.1.0/24",
"webserver": "100.108.74.26"
}, "tagOwners": {
"tag:client": ["odin@example.com"],
"tag:exit": ["odin@example.com"],
"tag:pidgey": ["odin@example.com"],
"tag:pidgeotto": ["odin@example.com"],
"tag:group-a": ["odin@example.com"],
"tag:group-b": ["odin@example.com"],
"tag:ha": ["odin@example.com"],
"tag:prod": ["odin@example.com"],
"tag:router": ["odin@example.com"],
"tag:spearow": ["odin@example.com"],
"tag:fearow": ["odin@example.com"],
"tag:server": ["odin@example.com"]
}}
},
"topology": {"users": [
{"id": 1, "name": "odin", "email": "odin@example.com"},
@@ -31,99 +63,105 @@
], "nodes": {"beedrill": {
"hostname": "beedrill",
"tags": ["tag:server"],
"ipv4": "100.118.165.58",
"ipv6": "fd7a:115c:a1e0::7f37:a53a",
"ipv4": "100.64.0.16",
"ipv6": "fd7a:115c:a1e0::10",
"routable_ips": [],
"approved_routes": []
}, "bulbasaur": {
"hostname": "bulbasaur",
"tags": [],
"ipv4": "100.100.24.126",
"ipv6": "fd7a:115c:a1e0::7737:187e",
"ipv4": "100.64.0.19",
"ipv6": "fd7a:115c:a1e0::13",
"user": "odin",
"routable_ips": [],
"approved_routes": []
}, "charmander": {
"hostname": "charmander",
"tags": ["tag:exit"],
"ipv4": "100.99.139.94",
"ipv6": "fd7a:115c:a1e0::ba37:8b5e",
"ipv4": "100.64.0.4",
"ipv6": "fd7a:115c:a1e0::4",
"routable_ips": ["0.0.0.0/0", "::/0"],
"approved_routes": []
}, "ivysaur": {
"hostname": "ivysaur",
"tags": [],
"ipv4": "100.121.43.94",
"ipv6": "fd7a:115c:a1e0::ba37:2b5e",
"ipv4": "100.64.0.17",
"ipv6": "fd7a:115c:a1e0::11",
"user": "thor",
"routable_ips": [],
"approved_routes": []
}, "kakuna": {
"hostname": "kakuna",
"tags": ["tag:prod"],
"ipv4": "100.126.78.124",
"ipv6": "fd7a:115c:a1e0::d137:4e7c",
"ipv4": "100.64.0.15",
"ipv6": "fd7a:115c:a1e0::f",
"routable_ips": [],
"approved_routes": []
}, "squirtle": {
"hostname": "squirtle",
"tags": ["tag:router"],
"ipv4": "100.118.182.108",
"ipv6": "fd7a:115c:a1e0::3037:b66c",
"ipv4": "100.64.0.13",
"ipv6": "fd7a:115c:a1e0::d",
"routable_ips": ["10.33.0.0/16"],
"approved_routes": []
"approved_routes": ["10.33.0.0/16"]
}, "venusaur": {
"hostname": "venusaur",
"tags": [],
"ipv4": "100.108.141.62",
"ipv6": "fd7a:115c:a1e0::fc37:8d3e",
"ipv4": "100.64.0.18",
"ipv6": "fd7a:115c:a1e0::12",
"user": "freya",
"routable_ips": [],
"approved_routes": []
}, "weedle": {
"hostname": "weedle",
"tags": ["tag:client"],
"ipv4": "100.117.81.120",
"ipv6": "fd7a:115c:a1e0::f037:5178",
"ipv4": "100.64.0.14",
"ipv6": "fd7a:115c:a1e0::e",
"routable_ips": [],
"approved_routes": []
}}},
"captures": {"beedrill": {
"packet_filter_rules": [{"SrcIPs": ["100.117.81.120", "fd7a:115c:a1e0::f037:5178"], "DstPorts": [
{"IP": "100.118.165.58", "Ports": {"First": 22, "Last": 22}},
{"IP": "fd7a:115c:a1e0::7f37:a53a", "Ports": {"First": 22, "Last": 22}}
"packet_filter_rules": [{"SrcIPs": ["100.64.0.14", "fd7a:115c:a1e0::e"], "DstPorts": [
{"IP": "100.64.0.16", "Ports": {"First": 22, "Last": 22}},
{"IP": "fd7a:115c:a1e0::10", "Ports": {"First": 22, "Last": 22}}
]}],
"packet_filter_matches": [{
"IPProto": [6, 17, 1, 58],
"Srcs": ["100.117.81.120/32", "fd7a:115c:a1e0::f037:5178/128"],
"Srcs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"SrcCaps": null,
"Dsts": [
{"Net": "100.118.165.58/32", "Ports": {"First": 22, "Last": 22}},
{"Net": "fd7a:115c:a1e0::7f37:a53a/128", "Ports": {"First": 22, "Last": 22}}
{"Net": "100.64.0.16/32", "Ports": {"First": 22, "Last": 22}},
{"Net": "fd7a:115c:a1e0::10/128", "Ports": {"First": 22, "Last": 22}}
],
"Caps": []
}],
"netmap": {
"Cached": false,
"SelfNode": {
"ID": 7679775811807396,
"StableID": "nh1JLugBy221CNTRL",
"ID": 8550238376220509,
"StableID": "nehfPHGRm921CNTRL",
"Name": "beedrill.tail78f774.ts.net.",
"User": 7679775811807396,
"Key": "nodekey:70ddda31eb5bf7fb2fc7d8998da80d7af7405a8bd427641cc577982e7ff6a539",
"DiscoKey": "discokey:7d4710f902553d43026d6847b3d14b7096da625b61730a8e5627dde8ed48605e",
"Addresses": ["100.118.165.58/32", "fd7a:115c:a1e0::7f37:a53a/128"],
"AllowedIPs": ["100.118.165.58/32", "fd7a:115c:a1e0::7f37:a53a/128"],
"Endpoints": ["77.164.248.136:59543", "10.65.0.27:59543", "172.17.0.1:59543"],
"User": 8550238376220509,
"Key": "nodekey:4eec2d3ecdadb4508dcc962a2798fba7ebf97415107e32ac8ad38292c74a2f68",
"DiscoKey": "discokey:44371b6d25de8396d590ee7c73d425c2525f36fde78d8ebb9f30d66ffcc0d56d",
"Addresses": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
"Endpoints": [
"192.0.2.1:49520",
"198.51.100.1:49520",
"198.51.100.2:49520",
"198.51.100.3:49520"
],
"Hostinfo": {"Hostname": "beedrill", "RequestTags": ["tag:server"], "Services": [
{"Proto": "peerapi4", "Port": 56558},
{"Proto": "peerapi6", "Port": 56558},
{"Proto": "peerapi4", "Port": 50358},
{"Proto": "peerapi6", "Port": 50358},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T16:34:21.331899432Z",
"Created": "2026-10-30T16:41:05.463483055Z",
"Tags": ["tag:server"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -138,6 +176,7 @@
"ComputedNameWithHost": "beedrill"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -148,25 +187,30 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:70ddda31eb5bf7fb2fc7d8998da80d7af7405a8bd427641cc577982e7ff6a539",
"MachineKey": "mkey:bbd3887550d441860034596e4acb68ca7b28300d9caefc9161b9940df75c3477",
"NodeKey": "nodekey:4eec2d3ecdadb4508dcc962a2798fba7ebf97415107e32ac8ad38292c74a2f68",
"MachineKey": "mkey:1020fdc60dad91ae258ab392a2279b10769f71651d3c268c6f941fcb89093c00",
"Peers": [{
"ID": 3894180799000342,
"StableID": "nb9JDXXgQX11CNTRL",
"ID": 828277332165437,
"StableID": "nnsNYaS8U711CNTRL",
"Name": "weedle.tail78f774.ts.net.",
"User": 1260082990019555,
"Key": "nodekey:1b2aeed942593817786c42854caab60cbe0cc21f173377efc4a00b71f0f55177",
"DiscoKey": "discokey:0a09dbca337e6710926132d18819ccbc102db91a8f9cb0e779782981361ccd71",
"Addresses": ["100.117.81.120/32", "fd7a:115c:a1e0::f037:5178/128"],
"AllowedIPs": ["100.117.81.120/32", "fd7a:115c:a1e0::f037:5178/128"],
"Endpoints": ["77.164.248.136:51146", "10.65.0.27:51146", "172.17.0.1:51146"],
"HomeDERP": 14,
"Key": "nodekey:6bfc611106ccc3f4e291f0f7d819d0bedbea029a65e600f515b47315207ec91d",
"DiscoKey": "discokey:40d1073c8322ee457babd0191ff2b305612f53e6d9f6620ad00d98c505bb721f",
"Addresses": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"Endpoints": [
"192.0.2.1:39124",
"198.51.100.1:39124",
"198.51.100.2:39124",
"198.51.100.3:39124"
],
"HomeDERP": 14,
"Hostinfo": {"OS": "linux", "Hostname": "weedle", "Services": [
{"Proto": "peerapi4", "Port": 59058},
{"Proto": "peerapi6", "Port": 59058}
{"Proto": "peerapi4", "Port": 63957},
{"Proto": "peerapi6", "Port": 63957}
]},
"Created": "2026-04-10T16:34:20.281674714Z",
"Cap": 131,
"Created": "2026-10-30T16:41:02.74418602Z",
"Cap": 142,
"Tags": ["tag:client"],
"Online": true,
"ComputedName": "weedle",
@@ -175,17 +219,17 @@
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [{
"IPProto": [6, 17, 1, 58],
"Srcs": ["100.117.81.120/32", "fd7a:115c:a1e0::f037:5178/128"],
"Srcs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"SrcCaps": null,
"Dsts": [
{"Net": "100.118.165.58/32", "Ports": {"First": 22, "Last": 22}},
{"Net": "fd7a:115c:a1e0::7f37:a53a/128", "Ports": {"First": 22, "Last": 22}}
{"Net": "100.64.0.16/32", "Ports": {"First": 22, "Last": 22}},
{"Net": "fd7a:115c:a1e0::10/128", "Ports": {"First": 22, "Last": 22}}
],
"Caps": []
}],
"PacketFilterRules": [{"SrcIPs": ["100.117.81.120", "fd7a:115c:a1e0::f037:5178"], "DstPorts": [
{"IP": "100.118.165.58", "Ports": {"First": 22, "Last": 22}},
{"IP": "fd7a:115c:a1e0::7f37:a53a", "Ports": {"First": 22, "Last": 22}}
"PacketFilterRules": [{"SrcIPs": ["100.64.0.14", "fd7a:115c:a1e0::e"], "DstPorts": [
{"IP": "100.64.0.16", "Ports": {"First": 22, "Last": 22}},
{"IP": "fd7a:115c:a1e0::10", "Ports": {"First": 22, "Last": 22}}
]}],
"SSHPolicy": {"rules": []},
"CollectServices": false,
@@ -1012,8 +1056,8 @@
"ID": 1260082990019555,
"LoginName": "tagged-devices",
"DisplayName": "Tagged Devices"
}, "7679775811807396": {
"ID": 7679775811807396,
}, "8550238376220509": {
"ID": 8550238376220509,
"LoginName": "beedrill.tail78f774.ts.net",
"DisplayName": "beedrill"
}}
@@ -1021,24 +1065,30 @@
}, "bulbasaur": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 5812542739287840,
"StableID": "nRHhkCeWPn11CNTRL",
"ID": 2452648777762944,
"StableID": "nZhoncvo9L11CNTRL",
"Name": "bulbasaur.tail78f774.ts.net.",
"User": 4156223528223174,
"Key": "nodekey:db59752d436bae8f4c52f800501b10f9f8c337bbf530986f9f0066107724187d",
"KeyExpiry": "2026-10-07T16:34:22Z",
"DiscoKey": "discokey:2129f3c1be85f4fe04ada78a179023f49085f89eafb1fa8312b6e30072925c56",
"Addresses": ["100.100.24.126/32", "fd7a:115c:a1e0::7737:187e/128"],
"AllowedIPs": ["100.100.24.126/32", "fd7a:115c:a1e0::7737:187e/128"],
"Endpoints": ["77.164.248.136:43997", "10.65.0.27:43997", "172.17.0.1:43997"],
"Key": "nodekey:2f16c050ab1d4774479d9f49d418044429eba39cf3b7825cb589fdb4b97a413f",
"KeyExpiry": "2027-04-28T16:41:07Z",
"DiscoKey": "discokey:eddffe70a85e0021b2d3a1705f2e65673ea50823c6513228d1652d0b50cd146b",
"Addresses": ["100.64.0.19/32", "fd7a:115c:a1e0::13/128"],
"AllowedIPs": ["100.64.0.19/32", "fd7a:115c:a1e0::13/128"],
"Endpoints": [
"192.0.2.1:49655",
"198.51.100.1:49655",
"198.51.100.2:49655",
"198.51.100.3:49655"
],
"Hostinfo": {"Hostname": "bulbasaur", "Services": [
{"Proto": "peerapi4", "Port": 65164},
{"Proto": "peerapi6", "Port": 65164},
{"Proto": "peerapi4", "Port": 38156},
{"Proto": "peerapi6", "Port": 38156},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T16:34:22.939069726Z",
"Created": "2026-10-30T16:41:07.086015354Z",
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-admin": null,
"https://tailscale.com/cap/is-owner": null,
@@ -1054,6 +1104,7 @@
"ComputedNameWithHost": "bulbasaur"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-admin",
"https://tailscale.com/cap/is-owner",
@@ -1065,8 +1116,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:db59752d436bae8f4c52f800501b10f9f8c337bbf530986f9f0066107724187d",
"MachineKey": "mkey:3c83d0aa11a640c7d207fecfae07a5d46c3653abd6128e88519dc86b0b0f6f57",
"NodeKey": "nodekey:2f16c050ab1d4774479d9f49d418044429eba39cf3b7825cb589fdb4b97a413f",
"MachineKey": "mkey:6dda260f5a8d1343d500c5dd744adda1eafa3453c2a14b9ca197c432c344ea33",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -1900,29 +1951,35 @@
}}, "charmander": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 3164182807018371,
"StableID": "nN2SRai4iR11CNTRL",
"ID": 6435744808231558,
"StableID": "njDnXy6mFs11CNTRL",
"Name": "charmander.tail78f774.ts.net.",
"User": 3164182807018371,
"Key": "nodekey:018fb0c8856784589e5fe013771a9ea2885e548a9a936defda1b77a5baa38b5d",
"DiscoKey": "discokey:d9d9f7c87e9d072f6bff14a4ee2150d7157ccb5e5ca180963391d079881dc00a",
"Addresses": ["100.99.139.94/32", "fd7a:115c:a1e0::ba37:8b5e/128"],
"AllowedIPs": ["100.99.139.94/32", "fd7a:115c:a1e0::ba37:8b5e/128"],
"Endpoints": ["77.164.248.136:47113", "10.65.0.27:47113", "172.17.0.1:47113"],
"User": 6435744808231558,
"Key": "nodekey:fb204606fe59c01b282739abb523cdd68702379732563b41225de6edd028b334",
"DiscoKey": "discokey:e90f64c3197ec5306cb9e1a5fa788645c59d0717acc78e7f941f105a95b97f38",
"Addresses": ["100.64.0.4/32", "fd7a:115c:a1e0::4/128"],
"AllowedIPs": ["100.64.0.4/32", "fd7a:115c:a1e0::4/128"],
"Endpoints": [
"192.0.2.1:38981",
"198.51.100.1:38981",
"198.51.100.2:38981",
"198.51.100.3:38981"
],
"Hostinfo": {
"Hostname": "charmander",
"RoutableIPs": ["0.0.0.0/0", "::/0"],
"RequestTags": ["tag:exit"],
"Services": [
{"Proto": "peerapi4", "Port": 37144},
{"Proto": "peerapi6", "Port": 37144},
{"Proto": "peerapi4", "Port": 37067},
{"Proto": "peerapi6", "Port": 37067},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]
},
"Created": "2026-04-10T16:34:19.204689155Z",
"Created": "2026-10-30T16:41:01.691746462Z",
"Tags": ["tag:exit"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -1937,6 +1994,7 @@
"ComputedNameWithHost": "charmander"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -1947,8 +2005,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:018fb0c8856784589e5fe013771a9ea2885e548a9a936defda1b77a5baa38b5d",
"MachineKey": "mkey:72bd4f3a2dd350684a09336a076e03e951d1020708ec3552ec1bd113b20f573a",
"NodeKey": "nodekey:fb204606fe59c01b282739abb523cdd68702379732563b41225de6edd028b334",
"MachineKey": "mkey:2caf2e62ba8cdc198ab7797da9383a16d0345b5c3bb23988d0436c2a8cea2e55",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -2774,32 +2832,38 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {"3164182807018371": {
"ID": 3164182807018371,
"UserProfiles": {"6435744808231558": {
"ID": 6435744808231558,
"LoginName": "charmander.tail78f774.ts.net",
"DisplayName": "charmander"
}}
}}, "ivysaur": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 973268953013948,
"StableID": "nfvLaF8ob811CNTRL",
"ID": 5609936967472297,
"StableID": "nUcMVpXkok11CNTRL",
"Name": "ivysaur.tail78f774.ts.net.",
"User": 4538565228176803,
"Key": "nodekey:3e97a2accd586ab044f37ff480e449f8a63078002f923b45957f04e0ba392b5d",
"KeyExpiry": "2026-10-07T16:34:21Z",
"DiscoKey": "discokey:671a3f99ed93de0b9ad137ba3b0e52beb361159f2ed5a960e06b595046d71703",
"Addresses": ["100.121.43.94/32", "fd7a:115c:a1e0::ba37:2b5e/128"],
"AllowedIPs": ["100.121.43.94/32", "fd7a:115c:a1e0::ba37:2b5e/128"],
"Endpoints": ["77.164.248.136:56847", "10.65.0.27:56847", "172.17.0.1:56847"],
"Key": "nodekey:6af10862b4bd3342cb276658d1b11fd25fa13b567a5e920f14d0b8d0ed48cc2e",
"KeyExpiry": "2027-04-28T16:41:05Z",
"DiscoKey": "discokey:7f9fc653520ec0bde3b53f47267c48cf5e585a9ea30ddb8f1f35a33601fd162d",
"Addresses": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
"Endpoints": [
"192.0.2.1:33802",
"198.51.100.1:33802",
"198.51.100.2:33802",
"198.51.100.3:33802"
],
"Hostinfo": {"Hostname": "ivysaur", "Services": [
{"Proto": "peerapi4", "Port": 35671},
{"Proto": "peerapi6", "Port": 35671},
{"Proto": "peerapi4", "Port": 62496},
{"Proto": "peerapi6", "Port": 62496},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T16:34:21.877186146Z",
"Created": "2026-10-30T16:41:05.997620574Z",
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-admin": null,
"https://tailscale.com/cap/ssh": null,
@@ -2814,6 +2878,7 @@
"ComputedNameWithHost": "ivysaur"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-admin",
"https://tailscale.com/cap/ssh",
@@ -2824,8 +2889,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:3e97a2accd586ab044f37ff480e449f8a63078002f923b45957f04e0ba392b5d",
"MachineKey": "mkey:0d944c6b996555e9797822609177419346775d5ebba02a2bffdf0f42ed35fb3f",
"NodeKey": "nodekey:6af10862b4bd3342cb276658d1b11fd25fa13b567a5e920f14d0b8d0ed48cc2e",
"MachineKey": "mkey:df355ea07611479a7b4ac8728b9df964a232319908b13ba5b12eb6ce76d08f7a",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -3651,45 +3716,53 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {
"4538565228176803": {"ID": 4538565228176803, "LoginName": "thor@example.org", "DisplayName": "thor"}
}
"UserProfiles": {"4538565228176803": {
"ID": 4538565228176803,
"LoginName": "thor@example.org",
"DisplayName": "thor"
}}
}}, "kakuna": {
"packet_filter_rules": [{"SrcIPs": ["100.117.81.120", "fd7a:115c:a1e0::f037:5178"], "DstPorts": [
{"IP": "100.126.78.124", "Ports": {"First": 5432, "Last": 5432}},
{"IP": "fd7a:115c:a1e0::d137:4e7c", "Ports": {"First": 5432, "Last": 5432}}
"packet_filter_rules": [{"SrcIPs": ["100.64.0.14", "fd7a:115c:a1e0::e"], "DstPorts": [
{"IP": "100.64.0.15", "Ports": {"First": 5432, "Last": 5432}},
{"IP": "fd7a:115c:a1e0::f", "Ports": {"First": 5432, "Last": 5432}}
]}],
"packet_filter_matches": [{
"IPProto": [6, 17, 1, 58],
"Srcs": ["100.117.81.120/32", "fd7a:115c:a1e0::f037:5178/128"],
"Srcs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"SrcCaps": null,
"Dsts": [{"Net": "100.126.78.124/32", "Ports": {"First": 5432, "Last": 5432}}, {
"Net": "fd7a:115c:a1e0::d137:4e7c/128",
"Ports": {"First": 5432, "Last": 5432}
}],
"Dsts": [
{"Net": "100.64.0.15/32", "Ports": {"First": 5432, "Last": 5432}},
{"Net": "fd7a:115c:a1e0::f/128", "Ports": {"First": 5432, "Last": 5432}}
],
"Caps": []
}],
"netmap": {
"Cached": false,
"SelfNode": {
"ID": 4089370738411269,
"StableID": "nce9mRq5wY11CNTRL",
"ID": 7932576646329656,
"StableID": "nhfQQZLgw421CNTRL",
"Name": "kakuna.tail78f774.ts.net.",
"User": 4089370738411269,
"Key": "nodekey:e818734037d6961b5f696ee6c8642feea4fbc5044b324c7021b0b0e5d13e4e7b",
"DiscoKey": "discokey:e99c0f1e12c37b30a0a0932f97f52b05d87809c184d68534432bae9c213f7321",
"Addresses": ["100.126.78.124/32", "fd7a:115c:a1e0::d137:4e7c/128"],
"AllowedIPs": ["100.126.78.124/32", "fd7a:115c:a1e0::d137:4e7c/128"],
"Endpoints": ["77.164.248.136:37516", "10.65.0.27:37516", "172.17.0.1:37516"],
"User": 7932576646329656,
"Key": "nodekey:64386b9feafe5a7fde86a8a82df72f0c601a0c4280ac20bbff0f3c68fb850207",
"DiscoKey": "discokey:a45fc2af7caab67464e8e153cd1c438b737e0167047178dbb9174e1973fbd655",
"Addresses": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
"Endpoints": [
"192.0.2.1:33458",
"198.51.100.1:33458",
"198.51.100.2:33458",
"198.51.100.3:33458"
],
"Hostinfo": {"Hostname": "kakuna", "RequestTags": ["tag:prod"], "Services": [
{"Proto": "peerapi4", "Port": 50132},
{"Proto": "peerapi6", "Port": 50132},
{"Proto": "peerapi4", "Port": 51523},
{"Proto": "peerapi6", "Port": 51523},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T16:34:20.801430106Z",
"Created": "2026-10-30T16:41:03.283361512Z",
"Tags": ["tag:prod"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -3704,6 +3777,7 @@
"ComputedNameWithHost": "kakuna"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -3714,25 +3788,30 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:e818734037d6961b5f696ee6c8642feea4fbc5044b324c7021b0b0e5d13e4e7b",
"MachineKey": "mkey:6951434b7b3fbfe25bc50b5e633318ed558f829bd3ba9faf54f672dc5342f911",
"NodeKey": "nodekey:64386b9feafe5a7fde86a8a82df72f0c601a0c4280ac20bbff0f3c68fb850207",
"MachineKey": "mkey:cd00fdfff23e6255fd03849d930c7399f6e40bacd2646672a7bf65f26eb9f419",
"Peers": [{
"ID": 3894180799000342,
"StableID": "nb9JDXXgQX11CNTRL",
"ID": 828277332165437,
"StableID": "nnsNYaS8U711CNTRL",
"Name": "weedle.tail78f774.ts.net.",
"User": 1260082990019555,
"Key": "nodekey:1b2aeed942593817786c42854caab60cbe0cc21f173377efc4a00b71f0f55177",
"DiscoKey": "discokey:0a09dbca337e6710926132d18819ccbc102db91a8f9cb0e779782981361ccd71",
"Addresses": ["100.117.81.120/32", "fd7a:115c:a1e0::f037:5178/128"],
"AllowedIPs": ["100.117.81.120/32", "fd7a:115c:a1e0::f037:5178/128"],
"Endpoints": ["77.164.248.136:51146", "10.65.0.27:51146", "172.17.0.1:51146"],
"HomeDERP": 14,
"Key": "nodekey:6bfc611106ccc3f4e291f0f7d819d0bedbea029a65e600f515b47315207ec91d",
"DiscoKey": "discokey:40d1073c8322ee457babd0191ff2b305612f53e6d9f6620ad00d98c505bb721f",
"Addresses": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"Endpoints": [
"192.0.2.1:39124",
"198.51.100.1:39124",
"198.51.100.2:39124",
"198.51.100.3:39124"
],
"HomeDERP": 14,
"Hostinfo": {"OS": "linux", "Hostname": "weedle", "Services": [
{"Proto": "peerapi4", "Port": 59058},
{"Proto": "peerapi6", "Port": 59058}
{"Proto": "peerapi4", "Port": 63957},
{"Proto": "peerapi6", "Port": 63957}
]},
"Created": "2026-04-10T16:34:20.281674714Z",
"Cap": 131,
"Created": "2026-10-30T16:41:02.74418602Z",
"Cap": 142,
"Tags": ["tag:client"],
"Online": true,
"ComputedName": "weedle",
@@ -3741,17 +3820,17 @@
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [{
"IPProto": [6, 17, 1, 58],
"Srcs": ["100.117.81.120/32", "fd7a:115c:a1e0::f037:5178/128"],
"Srcs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"SrcCaps": null,
"Dsts": [{"Net": "100.126.78.124/32", "Ports": {"First": 5432, "Last": 5432}}, {
"Net": "fd7a:115c:a1e0::d137:4e7c/128",
"Ports": {"First": 5432, "Last": 5432}
}],
"Dsts": [
{"Net": "100.64.0.15/32", "Ports": {"First": 5432, "Last": 5432}},
{"Net": "fd7a:115c:a1e0::f/128", "Ports": {"First": 5432, "Last": 5432}}
],
"Caps": []
}],
"PacketFilterRules": [{"SrcIPs": ["100.117.81.120", "fd7a:115c:a1e0::f037:5178"], "DstPorts": [
{"IP": "100.126.78.124", "Ports": {"First": 5432, "Last": 5432}},
{"IP": "fd7a:115c:a1e0::d137:4e7c", "Ports": {"First": 5432, "Last": 5432}}
"PacketFilterRules": [{"SrcIPs": ["100.64.0.14", "fd7a:115c:a1e0::e"], "DstPorts": [
{"IP": "100.64.0.15", "Ports": {"First": 5432, "Last": 5432}},
{"IP": "fd7a:115c:a1e0::f", "Ports": {"First": 5432, "Last": 5432}}
]}],
"SSHPolicy": {"rules": []},
"CollectServices": false,
@@ -4578,8 +4657,8 @@
"ID": 1260082990019555,
"LoginName": "tagged-devices",
"DisplayName": "Tagged Devices"
}, "4089370738411269": {
"ID": 4089370738411269,
}, "7932576646329656": {
"ID": 7932576646329656,
"LoginName": "kakuna.tail78f774.ts.net",
"DisplayName": "kakuna"
}}
@@ -4587,30 +4666,36 @@
}, "squirtle": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 2636722185126045,
"StableID": "nQYBUoDBbM11CNTRL",
"ID": 899664134571765,
"StableID": "nvRPpmeT2811CNTRL",
"Name": "squirtle.tail78f774.ts.net.",
"User": 2636722185126045,
"Key": "nodekey:2cb55ff26065d8e15d7ddd896ac27f7c49e25fa0c5858c4dfc61fa8830b6b66b",
"DiscoKey": "discokey:f4efb6427c4a0d5a2caa368c44592347bf54188af6165d2bbd4ce40b3dc96c7c",
"Addresses": ["100.118.182.108/32", "fd7a:115c:a1e0::3037:b66c/128"],
"AllowedIPs": ["100.118.182.108/32", "fd7a:115c:a1e0::3037:b66c/128", "10.33.0.0/16"],
"Endpoints": ["77.164.248.136:39784", "10.65.0.27:39784", "172.17.0.1:39784"],
"User": 899664134571765,
"Key": "nodekey:b97a1851ed2dc972b20e23a327e4f4b546234bdeda6d5aabed73c408ae6b7042",
"DiscoKey": "discokey:8cc6ebd038a4893fd07b094e835e0b7c1fa30b701c15a9332f2610b349ff5d7d",
"Addresses": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128", "10.33.0.0/16"],
"Endpoints": [
"192.0.2.1:42738",
"198.51.100.1:42738",
"198.51.100.2:42738",
"198.51.100.3:42738"
],
"Hostinfo": {
"Hostname": "squirtle",
"RoutableIPs": ["10.33.0.0/16"],
"RequestTags": ["tag:router"],
"Services": [
{"Proto": "peerapi4", "Port": 59837},
{"Proto": "peerapi6", "Port": 59837},
{"Proto": "peerapi4", "Port": 43119},
{"Proto": "peerapi6", "Port": 43119},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]
},
"Created": "2026-04-10T16:34:19.72133044Z",
"Created": "2026-10-30T16:41:02.225409249Z",
"Tags": ["tag:router"],
"PrimaryRoutes": ["10.33.0.0/16"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -4625,6 +4710,7 @@
"ComputedNameWithHost": "squirtle"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -4635,8 +4721,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:2cb55ff26065d8e15d7ddd896ac27f7c49e25fa0c5858c4dfc61fa8830b6b66b",
"MachineKey": "mkey:675d31040c9006334e6b1a3f8d7c6f2bf571c9ecd6518101220d806f292a5836",
"NodeKey": "nodekey:b97a1851ed2dc972b20e23a327e4f4b546234bdeda6d5aabed73c408ae6b7042",
"MachineKey": "mkey:bedcc920327f54d6193c7ac4485f21f242c758979862c53ce5c422ba051b2623",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -5462,32 +5548,38 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {"2636722185126045": {
"ID": 2636722185126045,
"UserProfiles": {"899664134571765": {
"ID": 899664134571765,
"LoginName": "squirtle.tail78f774.ts.net",
"DisplayName": "squirtle"
}}
}}, "venusaur": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 6058966286533092,
"StableID": "nVqZnfm7Kp11CNTRL",
"ID": 6939536116960955,
"StableID": "nJrBL6rvBw11CNTRL",
"Name": "venusaur.tail78f774.ts.net.",
"User": 3982058329734709,
"Key": "nodekey:2b51d6f9dc4f1cad44c9afdcdb0d69a0e351dc49294f4571b70773a8fcec8d3d",
"KeyExpiry": "2026-10-07T16:34:22Z",
"DiscoKey": "discokey:8acf7f68f23d4ae0c674534018a10220ee1bc37a8f75ad7d8d3f686a54ee9024",
"Addresses": ["100.108.141.62/32", "fd7a:115c:a1e0::fc37:8d3e/128"],
"AllowedIPs": ["100.108.141.62/32", "fd7a:115c:a1e0::fc37:8d3e/128"],
"Endpoints": ["77.164.248.136:59350", "10.65.0.27:59350", "172.17.0.1:59350"],
"Key": "nodekey:3f361a9af930ab208eb8a5067c3efdaba1824dcf0ffe4015fcb92144eb21293d",
"KeyExpiry": "2027-04-28T16:41:06Z",
"DiscoKey": "discokey:b40d2d872e70689fb94a65b177d6535201b9538a0091d6477f733c7000616733",
"Addresses": ["100.64.0.18/32", "fd7a:115c:a1e0::12/128"],
"AllowedIPs": ["100.64.0.18/32", "fd7a:115c:a1e0::12/128"],
"Endpoints": [
"192.0.2.1:59770",
"198.51.100.1:59770",
"198.51.100.2:59770",
"198.51.100.3:59770"
],
"Hostinfo": {"Hostname": "venusaur", "Services": [
{"Proto": "peerapi4", "Port": 37115},
{"Proto": "peerapi6", "Port": 37115},
{"Proto": "peerapi4", "Port": 42394},
{"Proto": "peerapi6", "Port": 42394},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T16:34:22.409355379Z",
"Created": "2026-10-30T16:41:06.542737516Z",
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-admin": null,
"https://tailscale.com/cap/ssh": null,
@@ -5502,6 +5594,7 @@
"ComputedNameWithHost": "venusaur"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-admin",
"https://tailscale.com/cap/ssh",
@@ -5512,8 +5605,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:2b51d6f9dc4f1cad44c9afdcdb0d69a0e351dc49294f4571b70773a8fcec8d3d",
"MachineKey": "mkey:b3f5f1433dbc146fe3468cf10d274d16ee87aed60d6f35779f25e7592b077475",
"NodeKey": "nodekey:3f361a9af930ab208eb8a5067c3efdaba1824dcf0ffe4015fcb92144eb21293d",
"MachineKey": "mkey:f7fef5142ed85e48f66785cd67d75db169ea312cf473e79a931c50628938c311",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -6347,24 +6440,30 @@
}}, "weedle": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 3894180799000342,
"StableID": "nb9JDXXgQX11CNTRL",
"ID": 828277332165437,
"StableID": "nnsNYaS8U711CNTRL",
"Name": "weedle.tail78f774.ts.net.",
"User": 3894180799000342,
"Key": "nodekey:1b2aeed942593817786c42854caab60cbe0cc21f173377efc4a00b71f0f55177",
"DiscoKey": "discokey:0a09dbca337e6710926132d18819ccbc102db91a8f9cb0e779782981361ccd71",
"Addresses": ["100.117.81.120/32", "fd7a:115c:a1e0::f037:5178/128"],
"AllowedIPs": ["100.117.81.120/32", "fd7a:115c:a1e0::f037:5178/128"],
"Endpoints": ["77.164.248.136:51146", "10.65.0.27:51146", "172.17.0.1:51146"],
"User": 828277332165437,
"Key": "nodekey:6bfc611106ccc3f4e291f0f7d819d0bedbea029a65e600f515b47315207ec91d",
"DiscoKey": "discokey:40d1073c8322ee457babd0191ff2b305612f53e6d9f6620ad00d98c505bb721f",
"Addresses": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"Endpoints": [
"192.0.2.1:39124",
"198.51.100.1:39124",
"198.51.100.2:39124",
"198.51.100.3:39124"
],
"Hostinfo": {"Hostname": "weedle", "RequestTags": ["tag:client"], "Services": [
{"Proto": "peerapi4", "Port": 59058},
{"Proto": "peerapi6", "Port": 59058},
{"Proto": "peerapi4", "Port": 63957},
{"Proto": "peerapi6", "Port": 63957},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T16:34:20.281674714Z",
"Created": "2026-10-30T16:41:02.74418602Z",
"Tags": ["tag:client"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -6379,6 +6478,7 @@
"ComputedNameWithHost": "weedle"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -6389,46 +6489,56 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:1b2aeed942593817786c42854caab60cbe0cc21f173377efc4a00b71f0f55177",
"MachineKey": "mkey:4f5e7ea1e0c81f2800cd80ababe2310f780e365de7919b9b6ece50b9e3b9ca17",
"NodeKey": "nodekey:6bfc611106ccc3f4e291f0f7d819d0bedbea029a65e600f515b47315207ec91d",
"MachineKey": "mkey:ab2c6ad2a4236c5668e271a1cf43a0b64cf3883b906577b1eee0f5ec1f71144b",
"Peers": [{
"ID": 4089370738411269,
"StableID": "nce9mRq5wY11CNTRL",
"ID": 7932576646329656,
"StableID": "nhfQQZLgw421CNTRL",
"Name": "kakuna.tail78f774.ts.net.",
"User": 1260082990019555,
"Key": "nodekey:e818734037d6961b5f696ee6c8642feea4fbc5044b324c7021b0b0e5d13e4e7b",
"DiscoKey": "discokey:e99c0f1e12c37b30a0a0932f97f52b05d87809c184d68534432bae9c213f7321",
"Addresses": ["100.126.78.124/32", "fd7a:115c:a1e0::d137:4e7c/128"],
"AllowedIPs": ["100.126.78.124/32", "fd7a:115c:a1e0::d137:4e7c/128"],
"Endpoints": ["77.164.248.136:37516", "10.65.0.27:37516", "172.17.0.1:37516"],
"HomeDERP": 14,
"Key": "nodekey:64386b9feafe5a7fde86a8a82df72f0c601a0c4280ac20bbff0f3c68fb850207",
"DiscoKey": "discokey:a45fc2af7caab67464e8e153cd1c438b737e0167047178dbb9174e1973fbd655",
"Addresses": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
"Endpoints": [
"192.0.2.1:33458",
"198.51.100.1:33458",
"198.51.100.2:33458",
"198.51.100.3:33458"
],
"HomeDERP": 14,
"Hostinfo": {"OS": "linux", "Hostname": "kakuna", "Services": [
{"Proto": "peerapi4", "Port": 50132},
{"Proto": "peerapi6", "Port": 50132}
{"Proto": "peerapi4", "Port": 51523},
{"Proto": "peerapi6", "Port": 51523}
]},
"Created": "2026-04-10T16:34:20.801430106Z",
"Cap": 131,
"Created": "2026-10-30T16:41:03.283361512Z",
"Cap": 142,
"Tags": ["tag:prod"],
"Online": true,
"ComputedName": "kakuna",
"ComputedNameWithHost": "kakuna"
}, {
"ID": 7679775811807396,
"StableID": "nh1JLugBy221CNTRL",
"ID": 8550238376220509,
"StableID": "nehfPHGRm921CNTRL",
"Name": "beedrill.tail78f774.ts.net.",
"User": 1260082990019555,
"Key": "nodekey:70ddda31eb5bf7fb2fc7d8998da80d7af7405a8bd427641cc577982e7ff6a539",
"DiscoKey": "discokey:7d4710f902553d43026d6847b3d14b7096da625b61730a8e5627dde8ed48605e",
"Addresses": ["100.118.165.58/32", "fd7a:115c:a1e0::7f37:a53a/128"],
"AllowedIPs": ["100.118.165.58/32", "fd7a:115c:a1e0::7f37:a53a/128"],
"Endpoints": ["77.164.248.136:59543", "10.65.0.27:59543", "172.17.0.1:59543"],
"HomeDERP": 14,
"Key": "nodekey:4eec2d3ecdadb4508dcc962a2798fba7ebf97415107e32ac8ad38292c74a2f68",
"DiscoKey": "discokey:44371b6d25de8396d590ee7c73d425c2525f36fde78d8ebb9f30d66ffcc0d56d",
"Addresses": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
"Endpoints": [
"192.0.2.1:49520",
"198.51.100.1:49520",
"198.51.100.2:49520",
"198.51.100.3:49520"
],
"HomeDERP": 14,
"Hostinfo": {"OS": "linux", "Hostname": "beedrill", "Services": [
{"Proto": "peerapi4", "Port": 56558},
{"Proto": "peerapi6", "Port": 56558}
{"Proto": "peerapi4", "Port": 50358},
{"Proto": "peerapi6", "Port": 50358}
]},
"Created": "2026-04-10T16:34:21.331899432Z",
"Cap": 131,
"Created": "2026-10-30T16:41:05.463483055Z",
"Cap": 142,
"Tags": ["tag:server"],
"Online": true,
"ComputedName": "beedrill",
@@ -7262,8 +7372,8 @@
"ID": 1260082990019555,
"LoginName": "tagged-devices",
"DisplayName": "Tagged Devices"
}, "3894180799000342": {
"ID": 3894180799000342,
}, "828277332165437": {
"ID": 828277332165437,
"LoginName": "weedle.tail78f774.ts.net",
"DisplayName": "weedle"
}}
hscontrol/policy/v2/testdata/acl_results/acl-pf03.hujson
Generated Vendored
+300 -201
View File
@@ -3,26 +3,58 @@
// acl pf03
//
// Nodes with filter rules: 1 of 8
// Captured at: 2026-04-10T16:39:45Z
// tscap version: tscap/dev
// Captured at: 2026-10-30T16:41:43Z
// tool version: tscap/5f80ee6150559e777612549d896d444b50768737
// schema version: 1
{
"schema_version": 1,
"test_id": "acl-pf03",
"description": "acl pf03",
"category": "acl",
"captured_at": "2026-04-10T16:39:45.539863716Z",
"tool_version": "tscap/dev",
"captured_at": "2026-10-30T16:41:43.330189562Z",
"tool_version": "tscap/5f80ee6150559e777612549d896d444b50768737",
"client_version": "1.102.5-ERR-BuildInfo capver 142",
"tailnet": "odin@example.com",
"input": {
"full_policy": "{\"acls\":[{\"action\":\"accept\",\"dst\":[\"tag:server:22,80,443\"],\"src\":[\"tag:client\"]}],\"autoApprovers\":{\"routes\":{\"0.0.0.0/0\":[\"tag:exit\"],\"10.33.0.0/16\":[\"tag:router\"],\"::/0\":[\"tag:exit\"]}},\"groups\":{\"group:admins\":[\"odin@example.com\"],\"group:developers\":[\"thor@example.org\",\"odin@example.com\"],\"group:empty\":[],\"group:monitors\":[\"freya@example.com\"]},\"hosts\":{\"internal\":\"10.0.0.0/8\",\"prodbox\":\"100.103.8.15\",\"subnet24\":\"192.168.1.0/24\",\"webserver\":\"100.108.74.26\"},\"tagOwners\":{\"tag:client\":[\"odin@example.com\"],\"tag:exit\":[\"odin@example.com\"],\"tag:pidgey\":[\"odin@example.com\"],\"tag:pidgeotto\":[\"odin@example.com\"],\"tag:group-a\":[\"odin@example.com\"],\"tag:group-b\":[\"odin@example.com\"],\"tag:ha\":[\"odin@example.com\"],\"tag:prod\":[\"odin@example.com\"],\"tag:router\":[\"odin@example.com\"],\"tag:spearow\":[\"odin@example.com\"],\"tag:fearow\":[\"odin@example.com\"],\"tag:server\":[\"odin@example.com\"]}}",
"api_response_code": 200,
"tailnet": {
"dns": {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
"settings": {}
},
"scenario_hujson": " \n{\n\t\"category\": \"acl\",\n\t\"description\": \"acl pf03\",\n\t\"id\": \"acl-pf03\",\n\t\"policy\": {\"acls\": [{\n\t\t\"action\": \"accept\",\n\t\t\"dst\": [\"tag:server:22,80,443\"],\n\t\t\"src\": [\"tag:client\"]\n\t}], \"autoApprovers\": {\"routes\": {\n\t\t\"0.0.0.0/0\": [\"tag:exit\"],\n\t\t\"10.33.0.0/16\": [\"tag:router\"],\n\t\t\"::/0\": [\"tag:exit\"]\n\t}}, \"groups\": {\n\t\t\"group:admins\": [\"odin@example.com\"],\n\t\t\"group:developers\": [\"thor@example.org\", \"odin@example.com\"],\n\t\t\"group:empty\": [],\n\t\t\"group:monitors\": [\"freya@example.com\"]\n\t}, \"hosts\": {\n\t\t\"internal\": \"10.0.0.0/8\",\n\t\t\"prodbox\": \"100.103.8.15\",\n\t\t\"subnet24\": \"192.168.1.0/24\",\n\t\t\"webserver\": \"100.108.74.26\"\n\t}, \"tagOwners\": {\n\t\t\"tag:client\": [\"odin@example.com\"],\n\t\t\"tag:exit\": [\"odin@example.com\"],\n\t\t\"tag:pidgey\": [\"odin@example.com\"],\n\t\t\"tag:pidgeotto\": [\"odin@example.com\"],\n\t\t\"tag:group-a\": [\"odin@example.com\"],\n\t\t\"tag:group-b\": [\"odin@example.com\"],\n\t\t\"tag:ha\": [\"odin@example.com\"],\n\t\t\"tag:prod\": [\"odin@example.com\"],\n\t\t\"tag:router\": [\"odin@example.com\"],\n\t\t\"tag:spearow\": [\"odin@example.com\"],\n\t\t\"tag:fearow\": [\"odin@example.com\"],\n\t\t\"tag:server\": [\"odin@example.com\"]\n\t}},\n\t\"tailnet\": {\n\t\t\"dns\": {\"magic_dns\": false, \"nameservers\": [], \"search_paths\": [], \"split_dns\": {}},\n\t\t\"settings\": {}\n\t},\n\t\"topology\": \"../_topologies/acl.hujson\"\n}\n",
"scenario_path": "scenarios/acl/acl-pf03.hujson"
"scenario_path": "scenarios/acl/acl-pf03.hujson",
"full_policy": {"acls": [{
"action": "accept",
"dst": ["tag:server:22,80,443"],
"src": ["tag:client"]
}], "autoApprovers": {"routes": {
"0.0.0.0/0": ["tag:exit"],
"10.33.0.0/16": ["tag:router"],
"::/0": ["tag:exit"]
}}, "groups": {
"group:admins": ["odin@example.com"],
"group:developers": ["thor@example.org", "odin@example.com"],
"group:empty": [],
"group:monitors": ["freya@example.com"]
}, "hosts": {
"internal": "10.0.0.0/8",
"prodbox": "100.103.8.15",
"subnet24": "192.168.1.0/24",
"webserver": "100.108.74.26"
}, "tagOwners": {
"tag:client": ["odin@example.com"],
"tag:exit": ["odin@example.com"],
"tag:pidgey": ["odin@example.com"],
"tag:pidgeotto": ["odin@example.com"],
"tag:group-a": ["odin@example.com"],
"tag:group-b": ["odin@example.com"],
"tag:ha": ["odin@example.com"],
"tag:prod": ["odin@example.com"],
"tag:router": ["odin@example.com"],
"tag:spearow": ["odin@example.com"],
"tag:fearow": ["odin@example.com"],
"tag:server": ["odin@example.com"]
}}
},
"topology": {"users": [
{"id": 1, "name": "odin", "email": "odin@example.com"},
@@ -31,110 +63,113 @@
], "nodes": {"beedrill": {
"hostname": "beedrill",
"tags": ["tag:server"],
"ipv4": "100.105.137.120",
"ipv6": "fd7a:115c:a1e0::8d37:8978",
"ipv4": "100.64.0.16",
"ipv6": "fd7a:115c:a1e0::10",
"routable_ips": [],
"approved_routes": []
}, "bulbasaur": {
"hostname": "bulbasaur",
"tags": [],
"ipv4": "100.84.89.72",
"ipv6": "fd7a:115c:a1e0::9f37:5948",
"ipv4": "100.64.0.19",
"ipv6": "fd7a:115c:a1e0::13",
"user": "odin",
"routable_ips": [],
"approved_routes": []
}, "charmander": {
"hostname": "charmander",
"tags": ["tag:exit"],
"ipv4": "100.95.58.122",
"ipv6": "fd7a:115c:a1e0::dc37:3a7a",
"ipv4": "100.64.0.4",
"ipv6": "fd7a:115c:a1e0::4",
"routable_ips": ["0.0.0.0/0", "::/0"],
"approved_routes": []
}, "ivysaur": {
"hostname": "ivysaur",
"tags": [],
"ipv4": "100.85.198.93",
"ipv6": "fd7a:115c:a1e0::bc37:c65d",
"ipv4": "100.64.0.17",
"ipv6": "fd7a:115c:a1e0::11",
"user": "thor",
"routable_ips": [],
"approved_routes": []
}, "kakuna": {
"hostname": "kakuna",
"tags": ["tag:prod"],
"ipv4": "100.99.142.116",
"ipv6": "fd7a:115c:a1e0::7137:8e74",
"ipv4": "100.64.0.15",
"ipv6": "fd7a:115c:a1e0::f",
"routable_ips": [],
"approved_routes": []
}, "squirtle": {
"hostname": "squirtle",
"tags": ["tag:router"],
"ipv4": "100.118.162.61",
"ipv6": "fd7a:115c:a1e0::6937:a23d",
"ipv4": "100.64.0.13",
"ipv6": "fd7a:115c:a1e0::d",
"routable_ips": ["10.33.0.0/16"],
"approved_routes": []
"approved_routes": ["10.33.0.0/16"]
}, "venusaur": {
"hostname": "venusaur",
"tags": [],
"ipv4": "100.68.50.94",
"ipv6": "fd7a:115c:a1e0::137:325e",
"ipv4": "100.64.0.18",
"ipv6": "fd7a:115c:a1e0::12",
"user": "freya",
"routable_ips": [],
"approved_routes": []
}, "weedle": {
"hostname": "weedle",
"tags": ["tag:client"],
"ipv4": "100.68.139.78",
"ipv6": "fd7a:115c:a1e0::e637:8b4e",
"ipv4": "100.64.0.14",
"ipv6": "fd7a:115c:a1e0::e",
"routable_ips": [],
"approved_routes": []
}}},
"captures": {"beedrill": {
"packet_filter_rules": [{"SrcIPs": ["100.68.139.78", "fd7a:115c:a1e0::e637:8b4e"], "DstPorts": [
{"IP": "100.105.137.120", "Ports": {"First": 22, "Last": 22}},
{"IP": "100.105.137.120", "Ports": {"First": 80, "Last": 80}},
{"IP": "100.105.137.120", "Ports": {"First": 443, "Last": 443}},
{"IP": "fd7a:115c:a1e0::8d37:8978", "Ports": {"First": 22, "Last": 22}},
{"IP": "fd7a:115c:a1e0::8d37:8978", "Ports": {"First": 80, "Last": 80}},
{"IP": "fd7a:115c:a1e0::8d37:8978", "Ports": {"First": 443, "Last": 443}}
"packet_filter_rules": [{"SrcIPs": ["100.64.0.14", "fd7a:115c:a1e0::e"], "DstPorts": [
{"IP": "100.64.0.16", "Ports": {"First": 22, "Last": 22}},
{"IP": "100.64.0.16", "Ports": {"First": 80, "Last": 80}},
{"IP": "100.64.0.16", "Ports": {"First": 443, "Last": 443}},
{"IP": "fd7a:115c:a1e0::10", "Ports": {"First": 22, "Last": 22}},
{"IP": "fd7a:115c:a1e0::10", "Ports": {"First": 80, "Last": 80}},
{"IP": "fd7a:115c:a1e0::10", "Ports": {"First": 443, "Last": 443}}
]}],
"packet_filter_matches": [{
"IPProto": [6, 17, 1, 58],
"Srcs": ["100.68.139.78/32", "fd7a:115c:a1e0::e637:8b4e/128"],
"Srcs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"SrcCaps": null,
"Dsts": [
{"Net": "100.105.137.120/32", "Ports": {"First": 22, "Last": 22}},
{"Net": "100.105.137.120/32", "Ports": {"First": 80, "Last": 80}},
{"Net": "100.105.137.120/32", "Ports": {"First": 443, "Last": 443}},
{"Net": "fd7a:115c:a1e0::8d37:8978/128", "Ports": {"First": 22, "Last": 22}},
{"Net": "fd7a:115c:a1e0::8d37:8978/128", "Ports": {"First": 80, "Last": 80}},
{
"Net": "fd7a:115c:a1e0::8d37:8978/128",
"Ports": {"First": 443, "Last": 443}
}
{"Net": "100.64.0.16/32", "Ports": {"First": 22, "Last": 22}},
{"Net": "100.64.0.16/32", "Ports": {"First": 80, "Last": 80}},
{"Net": "100.64.0.16/32", "Ports": {"First": 443, "Last": 443}},
{"Net": "fd7a:115c:a1e0::10/128", "Ports": {"First": 22, "Last": 22}},
{"Net": "fd7a:115c:a1e0::10/128", "Ports": {"First": 80, "Last": 80}},
{"Net": "fd7a:115c:a1e0::10/128", "Ports": {"First": 443, "Last": 443}}
],
"Caps": []
}],
"netmap": {
"Cached": false,
"SelfNode": {
"ID": 2623405941048973,
"StableID": "nUQaagR9VM11CNTRL",
"ID": 7230849857106755,
"StableID": "nGuSzXAsTy11CNTRL",
"Name": "beedrill.tail78f774.ts.net.",
"User": 2623405941048973,
"Key": "nodekey:4aabe90b775b404836ab1e9aa2d09f8bcce8a63568e10fd1207d04618d698977",
"DiscoKey": "discokey:2800717339d969fe2b2df59e089a63459bf9af8773a882ea135da3afd153a730",
"Addresses": ["100.105.137.120/32", "fd7a:115c:a1e0::8d37:8978/128"],
"AllowedIPs": ["100.105.137.120/32", "fd7a:115c:a1e0::8d37:8978/128"],
"Endpoints": ["77.164.248.136:58505", "10.65.0.27:58505", "172.17.0.1:58505"],
"User": 7230849857106755,
"Key": "nodekey:f5708b2222107d84e89cae93bc7537da21587607fe5c94bfae91e66fc9115a7a",
"DiscoKey": "discokey:133bcf89f1d39bf607ba7dbfe5adf54ccddbf86d89f3ae0baf240f71a9d92436",
"Addresses": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
"Endpoints": [
"192.0.2.1:36102",
"198.51.100.1:36102",
"198.51.100.2:36102",
"198.51.100.3:36102"
],
"Hostinfo": {"Hostname": "beedrill", "RequestTags": ["tag:server"], "Services": [
{"Proto": "peerapi4", "Port": 62385},
{"Proto": "peerapi6", "Port": 62385},
{"Proto": "peerapi4", "Port": 50358},
{"Proto": "peerapi6", "Port": 50358},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T16:39:49.531655989Z",
"Created": "2026-10-30T16:41:47.421892878Z",
"Tags": ["tag:server"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -149,6 +184,7 @@
"ComputedNameWithHost": "beedrill"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -159,25 +195,30 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:4aabe90b775b404836ab1e9aa2d09f8bcce8a63568e10fd1207d04618d698977",
"MachineKey": "mkey:bfbbc9133ed0641322fe4e3bd5f93a81f6d429578a55b6796e530f362d9ba015",
"NodeKey": "nodekey:f5708b2222107d84e89cae93bc7537da21587607fe5c94bfae91e66fc9115a7a",
"MachineKey": "mkey:2699e051a117d621b960f07377e9a1cbe655f45d1a7454ff90118e9e81023d17",
"Peers": [{
"ID": 2549869155179882,
"StableID": "nsfLdrjquL11CNTRL",
"ID": 8111059347455246,
"StableID": "nuNyWxmWL621CNTRL",
"Name": "weedle.tail78f774.ts.net.",
"User": 1260082990019555,
"Key": "nodekey:9c6f7f58a933827692913e74707680b90ec2368786a6056399357455e6048b4d",
"DiscoKey": "discokey:86a75eefa18f6e2191f0d20a135db50bb642176aa6e18d366dfdbb2e50d94571",
"Addresses": ["100.68.139.78/32", "fd7a:115c:a1e0::e637:8b4e/128"],
"AllowedIPs": ["100.68.139.78/32", "fd7a:115c:a1e0::e637:8b4e/128"],
"Endpoints": ["77.164.248.136:45927", "10.65.0.27:45927", "172.17.0.1:45927"],
"HomeDERP": 14,
"Key": "nodekey:bd5b690e89b39d0be43d53ff1e0558fdd31d81cdd0767ca88f202f73048f847e",
"DiscoKey": "discokey:36f096f5533fd2bc7e361a4dd42d1b9932fcbffbb47d599bcd51171a08c88a5b",
"Addresses": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"Endpoints": [
"192.0.2.1:45254",
"198.51.100.1:45254",
"198.51.100.2:45254",
"198.51.100.3:45254"
],
"HomeDERP": 14,
"Hostinfo": {"OS": "linux", "Hostname": "weedle", "Services": [
{"Proto": "peerapi4", "Port": 53529},
{"Proto": "peerapi6", "Port": 53529}
{"Proto": "peerapi4", "Port": 63957},
{"Proto": "peerapi6", "Port": 63957}
]},
"Created": "2026-04-10T16:39:48.489722174Z",
"Cap": 131,
"Created": "2026-10-30T16:41:46.357901761Z",
"Cap": 142,
"Tags": ["tag:client"],
"Online": true,
"ComputedName": "weedle",
@@ -186,28 +227,25 @@
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [{
"IPProto": [6, 17, 1, 58],
"Srcs": ["100.68.139.78/32", "fd7a:115c:a1e0::e637:8b4e/128"],
"Srcs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"SrcCaps": null,
"Dsts": [
{"Net": "100.105.137.120/32", "Ports": {"First": 22, "Last": 22}},
{"Net": "100.105.137.120/32", "Ports": {"First": 80, "Last": 80}},
{"Net": "100.105.137.120/32", "Ports": {"First": 443, "Last": 443}},
{"Net": "fd7a:115c:a1e0::8d37:8978/128", "Ports": {"First": 22, "Last": 22}},
{"Net": "fd7a:115c:a1e0::8d37:8978/128", "Ports": {"First": 80, "Last": 80}},
{
"Net": "fd7a:115c:a1e0::8d37:8978/128",
"Ports": {"First": 443, "Last": 443}
}
{"Net": "100.64.0.16/32", "Ports": {"First": 22, "Last": 22}},
{"Net": "100.64.0.16/32", "Ports": {"First": 80, "Last": 80}},
{"Net": "100.64.0.16/32", "Ports": {"First": 443, "Last": 443}},
{"Net": "fd7a:115c:a1e0::10/128", "Ports": {"First": 22, "Last": 22}},
{"Net": "fd7a:115c:a1e0::10/128", "Ports": {"First": 80, "Last": 80}},
{"Net": "fd7a:115c:a1e0::10/128", "Ports": {"First": 443, "Last": 443}}
],
"Caps": []
}],
"PacketFilterRules": [{"SrcIPs": ["100.68.139.78", "fd7a:115c:a1e0::e637:8b4e"], "DstPorts": [
{"IP": "100.105.137.120", "Ports": {"First": 22, "Last": 22}},
{"IP": "100.105.137.120", "Ports": {"First": 80, "Last": 80}},
{"IP": "100.105.137.120", "Ports": {"First": 443, "Last": 443}},
{"IP": "fd7a:115c:a1e0::8d37:8978", "Ports": {"First": 22, "Last": 22}},
{"IP": "fd7a:115c:a1e0::8d37:8978", "Ports": {"First": 80, "Last": 80}},
{"IP": "fd7a:115c:a1e0::8d37:8978", "Ports": {"First": 443, "Last": 443}}
"PacketFilterRules": [{"SrcIPs": ["100.64.0.14", "fd7a:115c:a1e0::e"], "DstPorts": [
{"IP": "100.64.0.16", "Ports": {"First": 22, "Last": 22}},
{"IP": "100.64.0.16", "Ports": {"First": 80, "Last": 80}},
{"IP": "100.64.0.16", "Ports": {"First": 443, "Last": 443}},
{"IP": "fd7a:115c:a1e0::10", "Ports": {"First": 22, "Last": 22}},
{"IP": "fd7a:115c:a1e0::10", "Ports": {"First": 80, "Last": 80}},
{"IP": "fd7a:115c:a1e0::10", "Ports": {"First": 443, "Last": 443}}
]}],
"SSHPolicy": {"rules": []},
"CollectServices": false,
@@ -1034,8 +1072,8 @@
"ID": 1260082990019555,
"LoginName": "tagged-devices",
"DisplayName": "Tagged Devices"
}, "2623405941048973": {
"ID": 2623405941048973,
}, "7230849857106755": {
"ID": 7230849857106755,
"LoginName": "beedrill.tail78f774.ts.net",
"DisplayName": "beedrill"
}}
@@ -1043,24 +1081,30 @@
}, "bulbasaur": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 8711745555629400,
"StableID": "nFLEnRnZ2B21CNTRL",
"ID": 227431422671750,
"StableID": "n1Y72oE1n211CNTRL",
"Name": "bulbasaur.tail78f774.ts.net.",
"User": 4156223528223174,
"Key": "nodekey:4a9aa399f6fbbd741e7cdeee135c757d562fc8bb847a07467bd4fdcf9f145947",
"KeyExpiry": "2026-10-07T16:39:51Z",
"DiscoKey": "discokey:5d84a948e4c5e8e1f92e8488660a47930a6984bce7ce176adca49fa398bc6a67",
"Addresses": ["100.84.89.72/32", "fd7a:115c:a1e0::9f37:5948/128"],
"AllowedIPs": ["100.84.89.72/32", "fd7a:115c:a1e0::9f37:5948/128"],
"Endpoints": ["77.164.248.136:59791", "10.65.0.27:59791", "172.17.0.1:59791"],
"Key": "nodekey:febbfaed3bee82c888f729dc95923fb9fd7a6c60428a531f6571b979e9143207",
"KeyExpiry": "2027-04-28T16:41:49Z",
"DiscoKey": "discokey:d4985092f87ddc584678cbbbdb7010583c5e3c7804bcf60b6f1bcff63090370c",
"Addresses": ["100.64.0.19/32", "fd7a:115c:a1e0::13/128"],
"AllowedIPs": ["100.64.0.19/32", "fd7a:115c:a1e0::13/128"],
"Endpoints": [
"192.0.2.1:57682",
"198.51.100.1:57682",
"198.51.100.2:57682",
"198.51.100.3:57682"
],
"Hostinfo": {"Hostname": "bulbasaur", "Services": [
{"Proto": "peerapi4", "Port": 61633},
{"Proto": "peerapi6", "Port": 61633},
{"Proto": "peerapi4", "Port": 38156},
{"Proto": "peerapi6", "Port": 38156},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T16:39:51.157670053Z",
"Created": "2026-10-30T16:41:49.056361392Z",
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-admin": null,
"https://tailscale.com/cap/is-owner": null,
@@ -1076,6 +1120,7 @@
"ComputedNameWithHost": "bulbasaur"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-admin",
"https://tailscale.com/cap/is-owner",
@@ -1087,8 +1132,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:4a9aa399f6fbbd741e7cdeee135c757d562fc8bb847a07467bd4fdcf9f145947",
"MachineKey": "mkey:6a852a5e49f3a46b2cb94f3b67e2366c8c524943e698eca2689ba7cbcb23cc26",
"NodeKey": "nodekey:febbfaed3bee82c888f729dc95923fb9fd7a6c60428a531f6571b979e9143207",
"MachineKey": "mkey:c8cb289a192c0d8f5dbe2ce4e17ab747d4925bb2476252fec691d8290d89ac0d",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -1922,24 +1967,35 @@
}}, "charmander": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 1491291015156122,
"StableID": "nuAkKogQeC11CNTRL",
"ID": 890285083590837,
"StableID": "ng2YCDHDx711CNTRL",
"Name": "charmander.tail78f774.ts.net.",
"User": 1491291015156122,
"Key": "nodekey:45e18ad0948379c51ee84a096c09cd04e0d9dcf5372536355835142fdc1f3a79",
"DiscoKey": "discokey:9740019c9340f56c3e6100b842bb1b357af777517bd07165efd9bf9d243e9b00",
"Addresses": ["100.95.58.122/32", "fd7a:115c:a1e0::dc37:3a7a/128"],
"AllowedIPs": ["100.95.58.122/32", "fd7a:115c:a1e0::dc37:3a7a/128"],
"Endpoints": ["77.164.248.136:55914", "10.65.0.27:55914", "172.17.0.1:55914"],
"Hostinfo": {"Hostname": "charmander", "RequestTags": ["tag:exit"], "Services": [
{"Proto": "peerapi4", "Port": 63172},
{"Proto": "peerapi6", "Port": 63172},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T16:39:47.377373908Z",
"User": 890285083590837,
"Key": "nodekey:5f9df9273d3430c5b6585280b861367d6dfbf91ffe85dfe8fdf5b482e4e33460",
"DiscoKey": "discokey:7bd7560ff280143e772682878f6e399b1ba9d9045df0f4aeb07beb9a5fa1382f",
"Addresses": ["100.64.0.4/32", "fd7a:115c:a1e0::4/128"],
"AllowedIPs": ["100.64.0.4/32", "fd7a:115c:a1e0::4/128"],
"Endpoints": [
"192.0.2.1:55779",
"198.51.100.1:55779",
"198.51.100.2:55779",
"198.51.100.3:55779"
],
"Hostinfo": {
"Hostname": "charmander",
"RoutableIPs": ["0.0.0.0/0", "::/0"],
"RequestTags": ["tag:exit"],
"Services": [
{"Proto": "peerapi4", "Port": 37067},
{"Proto": "peerapi6", "Port": 37067},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]
},
"Created": "2026-10-30T16:41:45.039356167Z",
"Tags": ["tag:exit"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -1954,6 +2010,7 @@
"ComputedNameWithHost": "charmander"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -1964,8 +2021,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:45e18ad0948379c51ee84a096c09cd04e0d9dcf5372536355835142fdc1f3a79",
"MachineKey": "mkey:c05cff4e260babf6b85f4e8bd9d68446598fc44f081b124e50fdada0e757d03d",
"NodeKey": "nodekey:5f9df9273d3430c5b6585280b861367d6dfbf91ffe85dfe8fdf5b482e4e33460",
"MachineKey": "mkey:edbf471c0c7b93e1a8e48dc44e33f712753f4bc83302e5eb575d410f92573c77",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -2791,32 +2848,38 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {"1491291015156122": {
"ID": 1491291015156122,
"UserProfiles": {"890285083590837": {
"ID": 890285083590837,
"LoginName": "charmander.tail78f774.ts.net",
"DisplayName": "charmander"
}}
}}, "ivysaur": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 952565046403422,
"StableID": "ndtCFaGRS811CNTRL",
"ID": 5432157466567426,
"StableID": "noPjmnZERj11CNTRL",
"Name": "ivysaur.tail78f774.ts.net.",
"User": 4538565228176803,
"Key": "nodekey:59a90f044a20cebf5d52fda56266fa09f8305d6981194d1b70161513bcd5c65c",
"KeyExpiry": "2026-10-07T16:39:50Z",
"DiscoKey": "discokey:2edf81eebb6fbf128fa475cda744e5b2d9a2e213ffdd6d90da7d7e356748ed38",
"Addresses": ["100.85.198.93/32", "fd7a:115c:a1e0::bc37:c65d/128"],
"AllowedIPs": ["100.85.198.93/32", "fd7a:115c:a1e0::bc37:c65d/128"],
"Endpoints": ["77.164.248.136:54093", "10.65.0.27:54093", "172.17.0.1:54093"],
"Key": "nodekey:b2aa58e62fa7bfe378daa79d841fbb8b299a2b09dc48a551a694503005e5154d",
"KeyExpiry": "2027-04-28T16:41:47Z",
"DiscoKey": "discokey:76407b018577c2682f89a2656f00a8e0d07e2ff981533154bb5028e02099cb22",
"Addresses": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
"Endpoints": [
"192.0.2.1:55326",
"198.51.100.1:55326",
"198.51.100.2:55326",
"198.51.100.3:55326"
],
"Hostinfo": {"Hostname": "ivysaur", "Services": [
{"Proto": "peerapi4", "Port": 59592},
{"Proto": "peerapi6", "Port": 59592},
{"Proto": "peerapi4", "Port": 62496},
{"Proto": "peerapi6", "Port": 62496},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T16:39:50.071094176Z",
"Created": "2026-10-30T16:41:47.969013073Z",
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-admin": null,
"https://tailscale.com/cap/ssh": null,
@@ -2831,6 +2894,7 @@
"ComputedNameWithHost": "ivysaur"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-admin",
"https://tailscale.com/cap/ssh",
@@ -2841,8 +2905,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:59a90f044a20cebf5d52fda56266fa09f8305d6981194d1b70161513bcd5c65c",
"MachineKey": "mkey:37c8c9b09fc62ceeb63b1934421b74dafecd030fbbfffce347d5db1860575d71",
"NodeKey": "nodekey:b2aa58e62fa7bfe378daa79d841fbb8b299a2b09dc48a551a694503005e5154d",
"MachineKey": "mkey:6e092928850b1e8dcf2d5eb004b1eba9c4d5ede8ab5125ca7c504bf9fc13d93d",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -3668,30 +3732,38 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {
"4538565228176803": {"ID": 4538565228176803, "LoginName": "thor@example.org", "DisplayName": "thor"}
}
"UserProfiles": {"4538565228176803": {
"ID": 4538565228176803,
"LoginName": "thor@example.org",
"DisplayName": "thor"
}}
}}, "kakuna": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 2613917888532166,
"StableID": "njwMs3CrQM11CNTRL",
"ID": 2127276114744406,
"StableID": "nwdDkJwScH11CNTRL",
"Name": "kakuna.tail78f774.ts.net.",
"User": 2613917888532166,
"Key": "nodekey:640bfd25e9f56eaf8e0cd5806b8002d52d20c99e178de287b7a2046471e38e73",
"DiscoKey": "discokey:672b500b15a2fb13f0f0271000d62441644500677b01e013d00165e474992652",
"Addresses": ["100.99.142.116/32", "fd7a:115c:a1e0::7137:8e74/128"],
"AllowedIPs": ["100.99.142.116/32", "fd7a:115c:a1e0::7137:8e74/128"],
"Endpoints": ["77.164.248.136:56488", "10.65.0.27:56488", "172.17.0.1:56488"],
"User": 2127276114744406,
"Key": "nodekey:a2e6d007dff8ee614dc4bd19b909187ab97385f8a7df5ef3257645ce8e851827",
"DiscoKey": "discokey:d5803c7dae6b579ce9022ac62e7e2279602c67b4081c27ef1be0ca7b213d5765",
"Addresses": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
"Endpoints": [
"192.0.2.1:33295",
"198.51.100.1:33295",
"198.51.100.2:33295",
"198.51.100.3:33295"
],
"Hostinfo": {"Hostname": "kakuna", "RequestTags": ["tag:prod"], "Services": [
{"Proto": "peerapi4", "Port": 44171},
{"Proto": "peerapi6", "Port": 44171},
{"Proto": "peerapi4", "Port": 51523},
{"Proto": "peerapi6", "Port": 51523},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T16:39:48.994172379Z",
"Created": "2026-10-30T16:41:46.883742977Z",
"Tags": ["tag:prod"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -3706,6 +3778,7 @@
"ComputedNameWithHost": "kakuna"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -3716,8 +3789,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:640bfd25e9f56eaf8e0cd5806b8002d52d20c99e178de287b7a2046471e38e73",
"MachineKey": "mkey:427e81aaab2fee27f8f5b412e105b1b57d9fbba3242fa4cc8116e86165e86941",
"NodeKey": "nodekey:a2e6d007dff8ee614dc4bd19b909187ab97385f8a7df5ef3257645ce8e851827",
"MachineKey": "mkey:a056801923875ba58f23ec000b0f75bc25a2d365576555e5143a6f8b0853476e",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -4543,38 +4616,44 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {"2613917888532166": {
"ID": 2613917888532166,
"UserProfiles": {"2127276114744406": {
"ID": 2127276114744406,
"LoginName": "kakuna.tail78f774.ts.net",
"DisplayName": "kakuna"
}}
}}, "squirtle": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 6010137826780195,
"StableID": "ntH91W81wo11CNTRL",
"ID": 2966289520278695,
"StableID": "nnttKxPSAQ11CNTRL",
"Name": "squirtle.tail78f774.ts.net.",
"User": 6010137826780195,
"Key": "nodekey:8bf588ab1770cbb260dca65ece4a0caa184f58849b1acdd2108c5fbe6936a23c",
"DiscoKey": "discokey:aaebe78d6532453cd59a2b8abd14e875f186e2a965ea2b3ec364479e5b281065",
"Addresses": ["100.118.162.61/32", "fd7a:115c:a1e0::6937:a23d/128"],
"AllowedIPs": ["100.118.162.61/32", "fd7a:115c:a1e0::6937:a23d/128", "10.33.0.0/16"],
"Endpoints": ["77.164.248.136:46632", "10.65.0.27:46632", "172.17.0.1:46632"],
"User": 2966289520278695,
"Key": "nodekey:e653b4fc93c93aeb6d5a61d512973c18f4a69eb25fa6c4e0ac3ca24b011ac108",
"DiscoKey": "discokey:045fe6c2035f9e65634c5fd217924a0c8cc56cf9ba9db0500beb570cd0d20054",
"Addresses": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128", "10.33.0.0/16"],
"Endpoints": [
"192.0.2.1:52201",
"198.51.100.1:52201",
"198.51.100.2:52201",
"198.51.100.3:52201"
],
"Hostinfo": {
"Hostname": "squirtle",
"RoutableIPs": ["10.33.0.0/16"],
"RequestTags": ["tag:router"],
"Services": [
{"Proto": "peerapi4", "Port": 57226},
{"Proto": "peerapi6", "Port": 57226},
{"Proto": "peerapi4", "Port": 43119},
{"Proto": "peerapi6", "Port": 43119},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]
},
"Created": "2026-04-10T16:39:47.918354023Z",
"Created": "2026-10-30T16:41:45.798873483Z",
"Tags": ["tag:router"],
"PrimaryRoutes": ["10.33.0.0/16"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -4589,6 +4668,7 @@
"ComputedNameWithHost": "squirtle"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -4599,8 +4679,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:8bf588ab1770cbb260dca65ece4a0caa184f58849b1acdd2108c5fbe6936a23c",
"MachineKey": "mkey:6773c44e46c6e849c3c247602aed1f787965cd7e7e700f5e90833b63860fb601",
"NodeKey": "nodekey:e653b4fc93c93aeb6d5a61d512973c18f4a69eb25fa6c4e0ac3ca24b011ac108",
"MachineKey": "mkey:f5f4cb9c33930a25f5b1c92bbaa72b93c838d6abef1a730bf7da6741be7dbe63",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -5426,32 +5506,38 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {"6010137826780195": {
"ID": 6010137826780195,
"UserProfiles": {"2966289520278695": {
"ID": 2966289520278695,
"LoginName": "squirtle.tail78f774.ts.net",
"DisplayName": "squirtle"
}}
}}, "venusaur": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 8910007940145294,
"StableID": "nDAMnPoMaC21CNTRL",
"ID": 5887170060011141,
"StableID": "ncW7YXyJyn11CNTRL",
"Name": "venusaur.tail78f774.ts.net.",
"User": 3982058329734709,
"Key": "nodekey:8d79b27e2c5bb1ebd7b97862d14c39dc7f05b044e84e428cbccae8670144325d",
"KeyExpiry": "2026-10-07T16:39:50Z",
"DiscoKey": "discokey:0cc2c4d30d082266a521b4f751331f6f4f3591795238a634373366261b5a2441",
"Addresses": ["100.68.50.94/32", "fd7a:115c:a1e0::137:325e/128"],
"AllowedIPs": ["100.68.50.94/32", "fd7a:115c:a1e0::137:325e/128"],
"Endpoints": ["77.164.248.136:38530", "10.65.0.27:38530", "172.17.0.1:38530"],
"Key": "nodekey:553f960191313dcc8d12b957ec6ad14d4290f56732b38bd352be24361f1f611d",
"KeyExpiry": "2027-04-28T16:41:48Z",
"DiscoKey": "discokey:b28453d6e322ae75111b4ddd70bf9fd308789be91005e9752764fc1342629f7b",
"Addresses": ["100.64.0.18/32", "fd7a:115c:a1e0::12/128"],
"AllowedIPs": ["100.64.0.18/32", "fd7a:115c:a1e0::12/128"],
"Endpoints": [
"192.0.2.1:43412",
"198.51.100.1:43412",
"198.51.100.2:43412",
"198.51.100.3:43412"
],
"Hostinfo": {"Hostname": "venusaur", "Services": [
{"Proto": "peerapi4", "Port": 54412},
{"Proto": "peerapi6", "Port": 54412},
{"Proto": "peerapi4", "Port": 42394},
{"Proto": "peerapi6", "Port": 42394},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T16:39:50.616693744Z",
"Created": "2026-10-30T16:41:48.513207375Z",
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-admin": null,
"https://tailscale.com/cap/ssh": null,
@@ -5466,6 +5552,7 @@
"ComputedNameWithHost": "venusaur"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-admin",
"https://tailscale.com/cap/ssh",
@@ -5476,8 +5563,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:8d79b27e2c5bb1ebd7b97862d14c39dc7f05b044e84e428cbccae8670144325d",
"MachineKey": "mkey:d406670082c1c7afb9066421e19f7eb67869410fe5d0f846f98ad47bca36776a",
"NodeKey": "nodekey:553f960191313dcc8d12b957ec6ad14d4290f56732b38bd352be24361f1f611d",
"MachineKey": "mkey:d8b57f79a6ae6f865568996421c23b6c601fb5f615f1f7d31f9968751e4bdd11",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -6311,24 +6398,30 @@
}}, "weedle": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 2549869155179882,
"StableID": "nsfLdrjquL11CNTRL",
"ID": 8111059347455246,
"StableID": "nuNyWxmWL621CNTRL",
"Name": "weedle.tail78f774.ts.net.",
"User": 2549869155179882,
"Key": "nodekey:9c6f7f58a933827692913e74707680b90ec2368786a6056399357455e6048b4d",
"DiscoKey": "discokey:86a75eefa18f6e2191f0d20a135db50bb642176aa6e18d366dfdbb2e50d94571",
"Addresses": ["100.68.139.78/32", "fd7a:115c:a1e0::e637:8b4e/128"],
"AllowedIPs": ["100.68.139.78/32", "fd7a:115c:a1e0::e637:8b4e/128"],
"Endpoints": ["77.164.248.136:45927", "10.65.0.27:45927", "172.17.0.1:45927"],
"User": 8111059347455246,
"Key": "nodekey:bd5b690e89b39d0be43d53ff1e0558fdd31d81cdd0767ca88f202f73048f847e",
"DiscoKey": "discokey:36f096f5533fd2bc7e361a4dd42d1b9932fcbffbb47d599bcd51171a08c88a5b",
"Addresses": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"Endpoints": [
"192.0.2.1:45254",
"198.51.100.1:45254",
"198.51.100.2:45254",
"198.51.100.3:45254"
],
"Hostinfo": {"Hostname": "weedle", "RequestTags": ["tag:client"], "Services": [
{"Proto": "peerapi4", "Port": 53529},
{"Proto": "peerapi6", "Port": 53529},
{"Proto": "peerapi4", "Port": 63957},
{"Proto": "peerapi6", "Port": 63957},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T16:39:48.489722174Z",
"Created": "2026-10-30T16:41:46.357901761Z",
"Tags": ["tag:client"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -6343,6 +6436,7 @@
"ComputedNameWithHost": "weedle"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -6353,25 +6447,30 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:9c6f7f58a933827692913e74707680b90ec2368786a6056399357455e6048b4d",
"MachineKey": "mkey:b102976d3b770b8ff97a2f338745928f4fd34779a02a24fe206c058e03ecb819",
"NodeKey": "nodekey:bd5b690e89b39d0be43d53ff1e0558fdd31d81cdd0767ca88f202f73048f847e",
"MachineKey": "mkey:d6f7a0094fe85c529acdab5b5398679c879cb00e3445101b8ca37f296d12841c",
"Peers": [{
"ID": 2623405941048973,
"StableID": "nUQaagR9VM11CNTRL",
"ID": 7230849857106755,
"StableID": "nGuSzXAsTy11CNTRL",
"Name": "beedrill.tail78f774.ts.net.",
"User": 1260082990019555,
"Key": "nodekey:4aabe90b775b404836ab1e9aa2d09f8bcce8a63568e10fd1207d04618d698977",
"DiscoKey": "discokey:2800717339d969fe2b2df59e089a63459bf9af8773a882ea135da3afd153a730",
"Addresses": ["100.105.137.120/32", "fd7a:115c:a1e0::8d37:8978/128"],
"AllowedIPs": ["100.105.137.120/32", "fd7a:115c:a1e0::8d37:8978/128"],
"Endpoints": ["77.164.248.136:58505", "10.65.0.27:58505", "172.17.0.1:58505"],
"HomeDERP": 14,
"Key": "nodekey:f5708b2222107d84e89cae93bc7537da21587607fe5c94bfae91e66fc9115a7a",
"DiscoKey": "discokey:133bcf89f1d39bf607ba7dbfe5adf54ccddbf86d89f3ae0baf240f71a9d92436",
"Addresses": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
"Endpoints": [
"192.0.2.1:36102",
"198.51.100.1:36102",
"198.51.100.2:36102",
"198.51.100.3:36102"
],
"HomeDERP": 14,
"Hostinfo": {"OS": "linux", "Hostname": "beedrill", "Services": [
{"Proto": "peerapi4", "Port": 62385},
{"Proto": "peerapi6", "Port": 62385}
{"Proto": "peerapi4", "Port": 50358},
{"Proto": "peerapi6", "Port": 50358}
]},
"Created": "2026-04-10T16:39:49.531655989Z",
"Cap": 131,
"Created": "2026-10-30T16:41:47.421892878Z",
"Cap": 142,
"Tags": ["tag:server"],
"Online": true,
"ComputedName": "beedrill",
@@ -7205,8 +7304,8 @@
"ID": 1260082990019555,
"LoginName": "tagged-devices",
"DisplayName": "Tagged Devices"
}, "2549869155179882": {
"ID": 2549869155179882,
}, "8111059347455246": {
"ID": 8111059347455246,
"LoginName": "weedle.tail78f774.ts.net",
"DisplayName": "weedle"
}}
hscontrol/policy/v2/testdata/acl_results/acl-r02.hujson
Generated Vendored
+342 -228
View File
@@ -3,26 +3,57 @@
// acl r02
//
// Nodes with filter rules: 2 of 8
// Captured at: 2026-04-10T16:42:15Z
// tscap version: tscap/dev
// Captured at: 2026-10-30T16:42:25Z
// tool version: tscap/5f80ee6150559e777612549d896d444b50768737
// schema version: 1
{
"schema_version": 1,
"test_id": "acl-r02",
"description": "acl r02",
"category": "acl",
"captured_at": "2026-04-10T16:42:15.40275899Z",
"tool_version": "tscap/dev",
"captured_at": "2026-10-30T16:42:25.157157823Z",
"tool_version": "tscap/5f80ee6150559e777612549d896d444b50768737",
"client_version": "1.102.5-ERR-BuildInfo capver 142",
"tailnet": "odin@example.com",
"input": {
"full_policy": "{\"acls\":[{\"action\":\"accept\",\"dst\":[\"tag:server:22\"],\"src\":[\"tag:client\"]},{\"action\":\"accept\",\"dst\":[\"tag:prod:5432\"],\"src\":[\"tag:client\"]}],\"autoApprovers\":{\"routes\":{\"0.0.0.0/0\":[\"tag:exit\"],\"10.33.0.0/16\":[\"tag:router\"],\"::/0\":[\"tag:exit\"]}},\"groups\":{\"group:admins\":[\"odin@example.com\"],\"group:developers\":[\"thor@example.org\",\"odin@example.com\"],\"group:empty\":[],\"group:monitors\":[\"freya@example.com\"]},\"hosts\":{\"internal\":\"10.0.0.0/8\",\"prodbox\":\"100.103.8.15\",\"subnet24\":\"192.168.1.0/24\",\"webserver\":\"100.108.74.26\"},\"tagOwners\":{\"tag:client\":[\"odin@example.com\"],\"tag:exit\":[\"odin@example.com\"],\"tag:pidgey\":[\"odin@example.com\"],\"tag:pidgeotto\":[\"odin@example.com\"],\"tag:group-a\":[\"odin@example.com\"],\"tag:group-b\":[\"odin@example.com\"],\"tag:ha\":[\"odin@example.com\"],\"tag:prod\":[\"odin@example.com\"],\"tag:router\":[\"odin@example.com\"],\"tag:spearow\":[\"odin@example.com\"],\"tag:fearow\":[\"odin@example.com\"],\"tag:server\":[\"odin@example.com\"]}}",
"api_response_code": 200,
"tailnet": {
"dns": {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
"settings": {}
},
"scenario_hujson": " \n{\n\t\"category\": \"acl\",\n\t\"description\": \"acl r02\",\n\t\"id\": \"acl-r02\",\n\t\"policy\": {\"acls\": [\n\t\t{\"action\": \"accept\", \"dst\": [\"tag:server:22\"], \"src\": [\"tag:client\"]},\n\t\t{\"action\": \"accept\", \"dst\": [\"tag:prod:5432\"], \"src\": [\"tag:client\"]}\n\t], \"autoApprovers\": {\"routes\": {\n\t\t\"0.0.0.0/0\": [\"tag:exit\"],\n\t\t\"10.33.0.0/16\": [\"tag:router\"],\n\t\t\"::/0\": [\"tag:exit\"]\n\t}}, \"groups\": {\n\t\t\"group:admins\": [\"odin@example.com\"],\n\t\t\"group:developers\": [\"thor@example.org\", \"odin@example.com\"],\n\t\t\"group:empty\": [],\n\t\t\"group:monitors\": [\"freya@example.com\"]\n\t}, \"hosts\": {\n\t\t\"internal\": \"10.0.0.0/8\",\n\t\t\"prodbox\": \"100.103.8.15\",\n\t\t\"subnet24\": \"192.168.1.0/24\",\n\t\t\"webserver\": \"100.108.74.26\"\n\t}, \"tagOwners\": {\n\t\t\"tag:client\": [\"odin@example.com\"],\n\t\t\"tag:exit\": [\"odin@example.com\"],\n\t\t\"tag:pidgey\": [\"odin@example.com\"],\n\t\t\"tag:pidgeotto\": [\"odin@example.com\"],\n\t\t\"tag:group-a\": [\"odin@example.com\"],\n\t\t\"tag:group-b\": [\"odin@example.com\"],\n\t\t\"tag:ha\": [\"odin@example.com\"],\n\t\t\"tag:prod\": [\"odin@example.com\"],\n\t\t\"tag:router\": [\"odin@example.com\"],\n\t\t\"tag:spearow\": [\"odin@example.com\"],\n\t\t\"tag:fearow\": [\"odin@example.com\"],\n\t\t\"tag:server\": [\"odin@example.com\"]\n\t}},\n\t\"tailnet\": {\n\t\t\"dns\": {\"magic_dns\": false, \"nameservers\": [], \"search_paths\": [], \"split_dns\": {}},\n\t\t\"settings\": {}\n\t},\n\t\"topology\": \"../_topologies/acl.hujson\"\n}\n",
"scenario_path": "scenarios/acl/acl-r02.hujson"
"scenario_path": "scenarios/acl/acl-r02.hujson",
"full_policy": {"acls": [
{"action": "accept", "dst": ["tag:server:22"], "src": ["tag:client"]},
{"action": "accept", "dst": ["tag:prod:5432"], "src": ["tag:client"]}
], "autoApprovers": {"routes": {
"0.0.0.0/0": ["tag:exit"],
"10.33.0.0/16": ["tag:router"],
"::/0": ["tag:exit"]
}}, "groups": {
"group:admins": ["odin@example.com"],
"group:developers": ["thor@example.org", "odin@example.com"],
"group:empty": [],
"group:monitors": ["freya@example.com"]
}, "hosts": {
"internal": "10.0.0.0/8",
"prodbox": "100.103.8.15",
"subnet24": "192.168.1.0/24",
"webserver": "100.108.74.26"
}, "tagOwners": {
"tag:client": ["odin@example.com"],
"tag:exit": ["odin@example.com"],
"tag:pidgey": ["odin@example.com"],
"tag:pidgeotto": ["odin@example.com"],
"tag:group-a": ["odin@example.com"],
"tag:group-b": ["odin@example.com"],
"tag:ha": ["odin@example.com"],
"tag:prod": ["odin@example.com"],
"tag:router": ["odin@example.com"],
"tag:spearow": ["odin@example.com"],
"tag:fearow": ["odin@example.com"],
"tag:server": ["odin@example.com"]
}}
},
"topology": {"users": [
{"id": 1, "name": "odin", "email": "odin@example.com"},
@@ -31,99 +62,105 @@
], "nodes": {"beedrill": {
"hostname": "beedrill",
"tags": ["tag:server"],
"ipv4": "100.127.139.112",
"ipv6": "fd7a:115c:a1e0::d037:8b70",
"ipv4": "100.64.0.16",
"ipv6": "fd7a:115c:a1e0::10",
"routable_ips": [],
"approved_routes": []
}, "bulbasaur": {
"hostname": "bulbasaur",
"tags": [],
"ipv4": "100.69.119.128",
"ipv6": "fd7a:115c:a1e0::3d37:7781",
"ipv4": "100.64.0.19",
"ipv6": "fd7a:115c:a1e0::13",
"user": "odin",
"routable_ips": [],
"approved_routes": []
}, "charmander": {
"hostname": "charmander",
"tags": ["tag:exit"],
"ipv4": "100.124.46.69",
"ipv6": "fd7a:115c:a1e0::de37:2e45",
"ipv4": "100.64.0.4",
"ipv6": "fd7a:115c:a1e0::4",
"routable_ips": ["0.0.0.0/0", "::/0"],
"approved_routes": []
}, "ivysaur": {
"hostname": "ivysaur",
"tags": [],
"ipv4": "100.96.180.109",
"ipv6": "fd7a:115c:a1e0::4c37:b46e",
"ipv4": "100.64.0.17",
"ipv6": "fd7a:115c:a1e0::11",
"user": "thor",
"routable_ips": [],
"approved_routes": []
}, "kakuna": {
"hostname": "kakuna",
"tags": ["tag:prod"],
"ipv4": "100.113.48.65",
"ipv6": "fd7a:115c:a1e0::8837:3041",
"ipv4": "100.64.0.15",
"ipv6": "fd7a:115c:a1e0::f",
"routable_ips": [],
"approved_routes": []
}, "squirtle": {
"hostname": "squirtle",
"tags": ["tag:router"],
"ipv4": "100.68.16.99",
"ipv6": "fd7a:115c:a1e0::3a37:1063",
"ipv4": "100.64.0.13",
"ipv6": "fd7a:115c:a1e0::d",
"routable_ips": ["10.33.0.0/16"],
"approved_routes": []
"approved_routes": ["10.33.0.0/16"]
}, "venusaur": {
"hostname": "venusaur",
"tags": [],
"ipv4": "100.95.167.42",
"ipv6": "fd7a:115c:a1e0::2f37:a72a",
"ipv4": "100.64.0.18",
"ipv6": "fd7a:115c:a1e0::12",
"user": "freya",
"routable_ips": [],
"approved_routes": []
}, "weedle": {
"hostname": "weedle",
"tags": ["tag:client"],
"ipv4": "100.116.212.52",
"ipv6": "fd7a:115c:a1e0::3937:d434",
"ipv4": "100.64.0.14",
"ipv6": "fd7a:115c:a1e0::e",
"routable_ips": [],
"approved_routes": []
}}},
"captures": {"beedrill": {
"packet_filter_rules": [{"SrcIPs": ["100.116.212.52", "fd7a:115c:a1e0::3937:d434"], "DstPorts": [
{"IP": "100.127.139.112", "Ports": {"First": 22, "Last": 22}},
{"IP": "fd7a:115c:a1e0::d037:8b70", "Ports": {"First": 22, "Last": 22}}
"packet_filter_rules": [{"SrcIPs": ["100.64.0.14", "fd7a:115c:a1e0::e"], "DstPorts": [
{"IP": "100.64.0.16", "Ports": {"First": 22, "Last": 22}},
{"IP": "fd7a:115c:a1e0::10", "Ports": {"First": 22, "Last": 22}}
]}],
"packet_filter_matches": [{
"IPProto": [6, 17, 1, 58],
"Srcs": ["100.116.212.52/32", "fd7a:115c:a1e0::3937:d434/128"],
"Srcs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"SrcCaps": null,
"Dsts": [
{"Net": "100.127.139.112/32", "Ports": {"First": 22, "Last": 22}},
{"Net": "fd7a:115c:a1e0::d037:8b70/128", "Ports": {"First": 22, "Last": 22}}
{"Net": "100.64.0.16/32", "Ports": {"First": 22, "Last": 22}},
{"Net": "fd7a:115c:a1e0::10/128", "Ports": {"First": 22, "Last": 22}}
],
"Caps": []
}],
"netmap": {
"Cached": false,
"SelfNode": {
"ID": 6485066519086660,
"StableID": "nhq2Eeh6es11CNTRL",
"ID": 3865336066119002,
"StableID": "nqvbwnpcBX11CNTRL",
"Name": "beedrill.tail78f774.ts.net.",
"User": 6485066519086660,
"Key": "nodekey:1cc3d1e125a27ceed9358b19ec5dada27d49675564671df010de3323d03f8b6f",
"DiscoKey": "discokey:9694201f77a5ca3027d2c9ac8cf55654f937c710452968b9a24a1e5aa7860d0e",
"Addresses": ["100.127.139.112/32", "fd7a:115c:a1e0::d037:8b70/128"],
"AllowedIPs": ["100.127.139.112/32", "fd7a:115c:a1e0::d037:8b70/128"],
"Endpoints": ["77.164.248.136:57579", "10.65.0.27:57579", "172.17.0.1:57579"],
"User": 3865336066119002,
"Key": "nodekey:fb184c227a714945847ab13e8a7b82cb308c12767266823604b4b3186398fa26",
"DiscoKey": "discokey:42f7a2acd0251ab35b667affe5f5955039018b78d0d56748a34c16c1ca71737f",
"Addresses": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
"Endpoints": [
"192.0.2.1:53559",
"198.51.100.1:53559",
"198.51.100.2:53559",
"198.51.100.3:53559"
],
"Hostinfo": {"Hostname": "beedrill", "RequestTags": ["tag:server"], "Services": [
{"Proto": "peerapi4", "Port": 50883},
{"Proto": "peerapi6", "Port": 50883},
{"Proto": "peerapi4", "Port": 50358},
{"Proto": "peerapi6", "Port": 50358},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T16:42:19.368137583Z",
"Created": "2026-10-30T16:42:28.762283533Z",
"Tags": ["tag:server"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -138,6 +175,7 @@
"ComputedNameWithHost": "beedrill"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -148,25 +186,30 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:1cc3d1e125a27ceed9358b19ec5dada27d49675564671df010de3323d03f8b6f",
"MachineKey": "mkey:482f59174e15ba5c0503beb2dd894683e9a4c72321b46aca17e18f8e3503b769",
"NodeKey": "nodekey:fb184c227a714945847ab13e8a7b82cb308c12767266823604b4b3186398fa26",
"MachineKey": "mkey:073d5b38460f986b613bd3ae0ed2590e5fa90d0bfb74e6bf9343dbde4eedfb44",
"Peers": [{
"ID": 2231722204147336,
"StableID": "n32Q1NZkRJ11CNTRL",
"ID": 2944225031758405,
"StableID": "ni3q2MoSzP11CNTRL",
"Name": "weedle.tail78f774.ts.net.",
"User": 1260082990019555,
"Key": "nodekey:77c67938ee130988d6ba7eef6f8c831b58a028d08550f264da2ae2523974d433",
"DiscoKey": "discokey:541722281b25a47dc76e65f71284d67fd57826ad0b6700833378b4cf4a031567",
"Addresses": ["100.116.212.52/32", "fd7a:115c:a1e0::3937:d434/128"],
"AllowedIPs": ["100.116.212.52/32", "fd7a:115c:a1e0::3937:d434/128"],
"Endpoints": ["77.164.248.136:40522", "10.65.0.27:40522", "172.17.0.1:40522"],
"HomeDERP": 14,
"Key": "nodekey:5049845330279c928c023188e9054fe2db105d577e4853d2683337378110154b",
"DiscoKey": "discokey:5c28f4e3dc3ed5cc622ce26508f9cce8e5793e3762d4098379d0d2203cbd1c33",
"Addresses": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"Endpoints": [
"192.0.2.1:41256",
"198.51.100.1:41256",
"198.51.100.2:41256",
"198.51.100.3:41256"
],
"HomeDERP": 14,
"Hostinfo": {"OS": "linux", "Hostname": "weedle", "Services": [
{"Proto": "peerapi4", "Port": 60720},
{"Proto": "peerapi6", "Port": 60720}
{"Proto": "peerapi4", "Port": 63957},
{"Proto": "peerapi6", "Port": 63957}
]},
"Created": "2026-04-10T16:42:18.301097884Z",
"Cap": 131,
"Created": "2026-10-30T16:42:27.692719981Z",
"Cap": 142,
"Tags": ["tag:client"],
"Online": true,
"ComputedName": "weedle",
@@ -175,17 +218,17 @@
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [{
"IPProto": [6, 17, 1, 58],
"Srcs": ["100.116.212.52/32", "fd7a:115c:a1e0::3937:d434/128"],
"Srcs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"SrcCaps": null,
"Dsts": [
{"Net": "100.127.139.112/32", "Ports": {"First": 22, "Last": 22}},
{"Net": "fd7a:115c:a1e0::d037:8b70/128", "Ports": {"First": 22, "Last": 22}}
{"Net": "100.64.0.16/32", "Ports": {"First": 22, "Last": 22}},
{"Net": "fd7a:115c:a1e0::10/128", "Ports": {"First": 22, "Last": 22}}
],
"Caps": []
}],
"PacketFilterRules": [{"SrcIPs": ["100.116.212.52", "fd7a:115c:a1e0::3937:d434"], "DstPorts": [
{"IP": "100.127.139.112", "Ports": {"First": 22, "Last": 22}},
{"IP": "fd7a:115c:a1e0::d037:8b70", "Ports": {"First": 22, "Last": 22}}
"PacketFilterRules": [{"SrcIPs": ["100.64.0.14", "fd7a:115c:a1e0::e"], "DstPorts": [
{"IP": "100.64.0.16", "Ports": {"First": 22, "Last": 22}},
{"IP": "fd7a:115c:a1e0::10", "Ports": {"First": 22, "Last": 22}}
]}],
"SSHPolicy": {"rules": []},
"CollectServices": false,
@@ -1012,8 +1055,8 @@
"ID": 1260082990019555,
"LoginName": "tagged-devices",
"DisplayName": "Tagged Devices"
}, "6485066519086660": {
"ID": 6485066519086660,
}, "3865336066119002": {
"ID": 3865336066119002,
"LoginName": "beedrill.tail78f774.ts.net",
"DisplayName": "beedrill"
}}
@@ -1021,24 +1064,30 @@
}, "bulbasaur": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 2350887363626269,
"StableID": "n4J76qpiMK11CNTRL",
"ID": 4037207755617176,
"StableID": "nfzXbubTXY11CNTRL",
"Name": "bulbasaur.tail78f774.ts.net.",
"User": 4156223528223174,
"Key": "nodekey:fc11fdd31f50fe94d519819517166dd1a5ce6b67d04c64fa061c42d03d05777f",
"KeyExpiry": "2026-10-07T16:42:20Z",
"DiscoKey": "discokey:c1034ef6a929656f693c2541f9825d646349d1754bc5b8f28e21698a7d030b07",
"Addresses": ["100.69.119.128/32", "fd7a:115c:a1e0::3d37:7781/128"],
"AllowedIPs": ["100.69.119.128/32", "fd7a:115c:a1e0::3d37:7781/128"],
"Endpoints": ["77.164.248.136:46893", "10.65.0.27:46893", "172.17.0.1:46893"],
"Key": "nodekey:58ae875e5f90cb9648515e9dd7837044ea2d185940ce3547c1e4ec89b75f6f11",
"KeyExpiry": "2027-04-28T16:42:30Z",
"DiscoKey": "discokey:f0a6d591f8a1dfc31aaf04af6f816a9251366575ff34f2d55658319c3d7c7c26",
"Addresses": ["100.64.0.19/32", "fd7a:115c:a1e0::13/128"],
"AllowedIPs": ["100.64.0.19/32", "fd7a:115c:a1e0::13/128"],
"Endpoints": [
"192.0.2.1:58877",
"198.51.100.1:58877",
"198.51.100.2:58877",
"198.51.100.3:58877"
],
"Hostinfo": {"Hostname": "bulbasaur", "Services": [
{"Proto": "peerapi4", "Port": 64040},
{"Proto": "peerapi6", "Port": 64040},
{"Proto": "peerapi4", "Port": 38156},
{"Proto": "peerapi6", "Port": 38156},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T16:42:20.98483016Z",
"Created": "2026-10-30T16:42:30.386509184Z",
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-admin": null,
"https://tailscale.com/cap/is-owner": null,
@@ -1054,6 +1103,7 @@
"ComputedNameWithHost": "bulbasaur"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-admin",
"https://tailscale.com/cap/is-owner",
@@ -1065,8 +1115,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:fc11fdd31f50fe94d519819517166dd1a5ce6b67d04c64fa061c42d03d05777f",
"MachineKey": "mkey:e7a364222eb8844f8f7c05c74ef64a89f45b2ea7e401a8e29282e7ae5ba7c40c",
"NodeKey": "nodekey:58ae875e5f90cb9648515e9dd7837044ea2d185940ce3547c1e4ec89b75f6f11",
"MachineKey": "mkey:873fff77af53b63b75cb3764fd508251d8b58a0adc2a50eb9081da62b7305a32",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -1900,24 +1950,35 @@
}}, "charmander": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 2955217129156548,
"StableID": "nMbC3VYR5Q11CNTRL",
"ID": 528753308991712,
"StableID": "n5bXHGTU8511CNTRL",
"Name": "charmander.tail78f774.ts.net.",
"User": 2955217129156548,
"Key": "nodekey:4c34ecd097c888fabf7a217fc4255b7648a05e65a275335dbe4cd8eadebc2e44",
"DiscoKey": "discokey:89690c92efc5dcd0abf36318decdec50ad8d6e225a3181654fbaaa2030dfbe3a",
"Addresses": ["100.124.46.69/32", "fd7a:115c:a1e0::de37:2e45/128"],
"AllowedIPs": ["100.124.46.69/32", "fd7a:115c:a1e0::de37:2e45/128"],
"Endpoints": ["77.164.248.136:46926", "10.65.0.27:46926", "172.17.0.1:46926"],
"Hostinfo": {"Hostname": "charmander", "RequestTags": ["tag:exit"], "Services": [
{"Proto": "peerapi4", "Port": 62485},
{"Proto": "peerapi6", "Port": 62485},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T16:42:17.209532824Z",
"User": 528753308991712,
"Key": "nodekey:45e86b55dc2fee7c338d52649211d583bb5b7c272cdffa19aee62ab69a071d62",
"DiscoKey": "discokey:839d11ec4d05196b4354dc16a2b05a36eed1b7cbe009fa871e13787c7197af46",
"Addresses": ["100.64.0.4/32", "fd7a:115c:a1e0::4/128"],
"AllowedIPs": ["100.64.0.4/32", "fd7a:115c:a1e0::4/128"],
"Endpoints": [
"192.0.2.1:38215",
"198.51.100.1:38215",
"198.51.100.2:38215",
"198.51.100.3:38215"
],
"Hostinfo": {
"Hostname": "charmander",
"RoutableIPs": ["0.0.0.0/0", "::/0"],
"RequestTags": ["tag:exit"],
"Services": [
{"Proto": "peerapi4", "Port": 37067},
{"Proto": "peerapi6", "Port": 37067},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]
},
"Created": "2026-10-30T16:42:26.664893224Z",
"Tags": ["tag:exit"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -1932,6 +1993,7 @@
"ComputedNameWithHost": "charmander"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -1942,8 +2004,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:4c34ecd097c888fabf7a217fc4255b7648a05e65a275335dbe4cd8eadebc2e44",
"MachineKey": "mkey:ea9b00d69bce2148cfa6c9176933e58867f662cc41e36fa867edd02f929fcd0b",
"NodeKey": "nodekey:45e86b55dc2fee7c338d52649211d583bb5b7c272cdffa19aee62ab69a071d62",
"MachineKey": "mkey:71e55613bdeb67d2cbf9f0657edacc15d65b3895d85de8a2d5bdfe70f0f5931e",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -2769,32 +2831,38 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {"2955217129156548": {
"ID": 2955217129156548,
"UserProfiles": {"528753308991712": {
"ID": 528753308991712,
"LoginName": "charmander.tail78f774.ts.net",
"DisplayName": "charmander"
}}
}}, "ivysaur": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 813814936700329,
"StableID": "nePKBEYaM711CNTRL",
"ID": 5909084275011208,
"StableID": "nDF7gBdE9o11CNTRL",
"Name": "ivysaur.tail78f774.ts.net.",
"User": 4538565228176803,
"Key": "nodekey:1d90410bbf9bc89043c383b58d5ce0f2fa095164d9cf413e19a12a0c4c60b46c",
"KeyExpiry": "2026-10-07T16:42:19Z",
"DiscoKey": "discokey:08bbd01a9a6bbe68aa68a15224e0126e0b5bd4540c082399d830f3ab53e39d53",
"Addresses": ["100.96.180.109/32", "fd7a:115c:a1e0::4c37:b46e/128"],
"AllowedIPs": ["100.96.180.109/32", "fd7a:115c:a1e0::4c37:b46e/128"],
"Endpoints": ["77.164.248.136:40276", "10.65.0.27:40276", "172.17.0.1:40276"],
"Key": "nodekey:b9d08015629e2d071ab63b506bc7b4b72823836c9b6f73a1954f234a4b2b1249",
"KeyExpiry": "2027-04-28T16:42:29Z",
"DiscoKey": "discokey:71020b34339be87b1d38a507e95a25e7d6eddb5f2e315488819d8160fdabee31",
"Addresses": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
"Endpoints": [
"192.0.2.1:37228",
"198.51.100.1:37228",
"198.51.100.2:37228",
"198.51.100.3:37228"
],
"Hostinfo": {"Hostname": "ivysaur", "Services": [
{"Proto": "peerapi4", "Port": 58475},
{"Proto": "peerapi6", "Port": 58475},
{"Proto": "peerapi4", "Port": 62496},
{"Proto": "peerapi6", "Port": 62496},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T16:42:19.913926812Z",
"Created": "2026-10-30T16:42:29.310678968Z",
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-admin": null,
"https://tailscale.com/cap/ssh": null,
@@ -2809,6 +2877,7 @@
"ComputedNameWithHost": "ivysaur"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-admin",
"https://tailscale.com/cap/ssh",
@@ -2819,8 +2888,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:1d90410bbf9bc89043c383b58d5ce0f2fa095164d9cf413e19a12a0c4c60b46c",
"MachineKey": "mkey:b521110a7b54c06565aff26b80bb6f8a190ea51dc61ee02255a9ca0b9caa3f45",
"NodeKey": "nodekey:b9d08015629e2d071ab63b506bc7b4b72823836c9b6f73a1954f234a4b2b1249",
"MachineKey": "mkey:60354c76abd0836c1be5bae622f80d09e5bea232796fc94f046c4015d1396c0e",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -3646,45 +3715,53 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {
"4538565228176803": {"ID": 4538565228176803, "LoginName": "thor@example.org", "DisplayName": "thor"}
}
"UserProfiles": {"4538565228176803": {
"ID": 4538565228176803,
"LoginName": "thor@example.org",
"DisplayName": "thor"
}}
}}, "kakuna": {
"packet_filter_rules": [{"SrcIPs": ["100.116.212.52", "fd7a:115c:a1e0::3937:d434"], "DstPorts": [
{"IP": "100.113.48.65", "Ports": {"First": 5432, "Last": 5432}},
{"IP": "fd7a:115c:a1e0::8837:3041", "Ports": {"First": 5432, "Last": 5432}}
"packet_filter_rules": [{"SrcIPs": ["100.64.0.14", "fd7a:115c:a1e0::e"], "DstPorts": [
{"IP": "100.64.0.15", "Ports": {"First": 5432, "Last": 5432}},
{"IP": "fd7a:115c:a1e0::f", "Ports": {"First": 5432, "Last": 5432}}
]}],
"packet_filter_matches": [{
"IPProto": [6, 17, 1, 58],
"Srcs": ["100.116.212.52/32", "fd7a:115c:a1e0::3937:d434/128"],
"Srcs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"SrcCaps": null,
"Dsts": [{"Net": "100.113.48.65/32", "Ports": {"First": 5432, "Last": 5432}}, {
"Net": "fd7a:115c:a1e0::8837:3041/128",
"Ports": {"First": 5432, "Last": 5432}
}],
"Dsts": [
{"Net": "100.64.0.15/32", "Ports": {"First": 5432, "Last": 5432}},
{"Net": "fd7a:115c:a1e0::f/128", "Ports": {"First": 5432, "Last": 5432}}
],
"Caps": []
}],
"netmap": {
"Cached": false,
"SelfNode": {
"ID": 8377731569359282,
"StableID": "nqkEbXoHR821CNTRL",
"ID": 6709305401716299,
"StableID": "nCHwQQ5fPu11CNTRL",
"Name": "kakuna.tail78f774.ts.net.",
"User": 8377731569359282,
"Key": "nodekey:2d6e6f9e35c30204cfd9e4a3824ddf828eb0528e8388b036b2fade7e88713040",
"DiscoKey": "discokey:fa0a18c85e468def4630ccc2349a639fa401431d4c616f1808fe5e986b4f2012",
"Addresses": ["100.113.48.65/32", "fd7a:115c:a1e0::8837:3041/128"],
"AllowedIPs": ["100.113.48.65/32", "fd7a:115c:a1e0::8837:3041/128"],
"Endpoints": ["77.164.248.136:46742", "10.65.0.27:46742", "172.17.0.1:46742"],
"User": 6709305401716299,
"Key": "nodekey:22b3cdedab69ce4a9206ba939b663a35bd957bdb2eb8ae21bd69818bd6980702",
"DiscoKey": "discokey:ed274d50060dec6c373006ad66f9e4e9e860c69f023eb2f0d19c52517727a73b",
"Addresses": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
"Endpoints": [
"192.0.2.1:43599",
"198.51.100.1:43599",
"198.51.100.2:43599",
"198.51.100.3:43599"
],
"Hostinfo": {"Hostname": "kakuna", "RequestTags": ["tag:prod"], "Services": [
{"Proto": "peerapi4", "Port": 40064},
{"Proto": "peerapi6", "Port": 40064},
{"Proto": "peerapi4", "Port": 51523},
{"Proto": "peerapi6", "Port": 51523},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T16:42:18.835242201Z",
"Created": "2026-10-30T16:42:28.222441522Z",
"Tags": ["tag:prod"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -3699,6 +3776,7 @@
"ComputedNameWithHost": "kakuna"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -3709,25 +3787,30 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:2d6e6f9e35c30204cfd9e4a3824ddf828eb0528e8388b036b2fade7e88713040",
"MachineKey": "mkey:ed4f6a2f9ad1adc99c74eb52154adbf78a2ae2b11db0b1d610fe682788b9fe59",
"NodeKey": "nodekey:22b3cdedab69ce4a9206ba939b663a35bd957bdb2eb8ae21bd69818bd6980702",
"MachineKey": "mkey:82e1fc4dcad795c369ff3ef4e004cd2849ee94045f2f7f513100dd2a4f447839",
"Peers": [{
"ID": 2231722204147336,
"StableID": "n32Q1NZkRJ11CNTRL",
"ID": 2944225031758405,
"StableID": "ni3q2MoSzP11CNTRL",
"Name": "weedle.tail78f774.ts.net.",
"User": 1260082990019555,
"Key": "nodekey:77c67938ee130988d6ba7eef6f8c831b58a028d08550f264da2ae2523974d433",
"DiscoKey": "discokey:541722281b25a47dc76e65f71284d67fd57826ad0b6700833378b4cf4a031567",
"Addresses": ["100.116.212.52/32", "fd7a:115c:a1e0::3937:d434/128"],
"AllowedIPs": ["100.116.212.52/32", "fd7a:115c:a1e0::3937:d434/128"],
"Endpoints": ["77.164.248.136:40522", "10.65.0.27:40522", "172.17.0.1:40522"],
"HomeDERP": 14,
"Key": "nodekey:5049845330279c928c023188e9054fe2db105d577e4853d2683337378110154b",
"DiscoKey": "discokey:5c28f4e3dc3ed5cc622ce26508f9cce8e5793e3762d4098379d0d2203cbd1c33",
"Addresses": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"Endpoints": [
"192.0.2.1:41256",
"198.51.100.1:41256",
"198.51.100.2:41256",
"198.51.100.3:41256"
],
"HomeDERP": 14,
"Hostinfo": {"OS": "linux", "Hostname": "weedle", "Services": [
{"Proto": "peerapi4", "Port": 60720},
{"Proto": "peerapi6", "Port": 60720}
{"Proto": "peerapi4", "Port": 63957},
{"Proto": "peerapi6", "Port": 63957}
]},
"Created": "2026-04-10T16:42:18.301097884Z",
"Cap": 131,
"Created": "2026-10-30T16:42:27.692719981Z",
"Cap": 142,
"Tags": ["tag:client"],
"Online": true,
"ComputedName": "weedle",
@@ -3736,17 +3819,17 @@
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [{
"IPProto": [6, 17, 1, 58],
"Srcs": ["100.116.212.52/32", "fd7a:115c:a1e0::3937:d434/128"],
"Srcs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"SrcCaps": null,
"Dsts": [{"Net": "100.113.48.65/32", "Ports": {"First": 5432, "Last": 5432}}, {
"Net": "fd7a:115c:a1e0::8837:3041/128",
"Ports": {"First": 5432, "Last": 5432}
}],
"Dsts": [
{"Net": "100.64.0.15/32", "Ports": {"First": 5432, "Last": 5432}},
{"Net": "fd7a:115c:a1e0::f/128", "Ports": {"First": 5432, "Last": 5432}}
],
"Caps": []
}],
"PacketFilterRules": [{"SrcIPs": ["100.116.212.52", "fd7a:115c:a1e0::3937:d434"], "DstPorts": [
{"IP": "100.113.48.65", "Ports": {"First": 5432, "Last": 5432}},
{"IP": "fd7a:115c:a1e0::8837:3041", "Ports": {"First": 5432, "Last": 5432}}
"PacketFilterRules": [{"SrcIPs": ["100.64.0.14", "fd7a:115c:a1e0::e"], "DstPorts": [
{"IP": "100.64.0.15", "Ports": {"First": 5432, "Last": 5432}},
{"IP": "fd7a:115c:a1e0::f", "Ports": {"First": 5432, "Last": 5432}}
]}],
"SSHPolicy": {"rules": []},
"CollectServices": false,
@@ -4573,8 +4656,8 @@
"ID": 1260082990019555,
"LoginName": "tagged-devices",
"DisplayName": "Tagged Devices"
}, "8377731569359282": {
"ID": 8377731569359282,
}, "6709305401716299": {
"ID": 6709305401716299,
"LoginName": "kakuna.tail78f774.ts.net",
"DisplayName": "kakuna"
}}
@@ -4582,30 +4665,36 @@
}, "squirtle": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 2724496804353621,
"StableID": "n86zzquvGN11CNTRL",
"ID": 5597215526021535,
"StableID": "nYfgGvMzhk11CNTRL",
"Name": "squirtle.tail78f774.ts.net.",
"User": 2724496804353621,
"Key": "nodekey:b79617748b6b1c8e88ca9995c9406ced899e399811373690cabbf3693a441062",
"DiscoKey": "discokey:4c349a7bb1d62353f9b033a3843b4dd2a08722718a5cae04e5b6382f31620a18",
"Addresses": ["100.68.16.99/32", "fd7a:115c:a1e0::3a37:1063/128"],
"AllowedIPs": ["100.68.16.99/32", "fd7a:115c:a1e0::3a37:1063/128", "10.33.0.0/16"],
"Endpoints": ["77.164.248.136:48182", "10.65.0.27:48182", "172.17.0.1:48182"],
"User": 5597215526021535,
"Key": "nodekey:acc6c5211796f58d81dcb191c7480ed36e654fa233560aee39a0bf1e75dd2f46",
"DiscoKey": "discokey:42e6269202b60f7e3a072ebc0613b1aadabed2abc70949d8e428adc8c9355936",
"Addresses": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128", "10.33.0.0/16"],
"Endpoints": [
"192.0.2.1:59856",
"198.51.100.1:59856",
"198.51.100.2:59856",
"198.51.100.3:59856"
],
"Hostinfo": {
"Hostname": "squirtle",
"RoutableIPs": ["10.33.0.0/16"],
"RequestTags": ["tag:router"],
"Services": [
{"Proto": "peerapi4", "Port": 57021},
{"Proto": "peerapi6", "Port": 57021},
{"Proto": "peerapi4", "Port": 43119},
{"Proto": "peerapi6", "Port": 43119},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]
},
"Created": "2026-04-10T16:42:17.753202336Z",
"Created": "2026-10-30T16:42:27.16504959Z",
"Tags": ["tag:router"],
"PrimaryRoutes": ["10.33.0.0/16"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -4620,6 +4709,7 @@
"ComputedNameWithHost": "squirtle"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -4630,8 +4720,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:b79617748b6b1c8e88ca9995c9406ced899e399811373690cabbf3693a441062",
"MachineKey": "mkey:0e94d882154053551d110853e0c2a635164e339883c3c0c2517c3fbd12c30d62",
"NodeKey": "nodekey:acc6c5211796f58d81dcb191c7480ed36e654fa233560aee39a0bf1e75dd2f46",
"MachineKey": "mkey:612716805c82e84e8e80c8a46b5844f4d24093e5d545ee07fdc39f0d14ac0247",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -5457,32 +5547,38 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {"2724496804353621": {
"ID": 2724496804353621,
"UserProfiles": {"5597215526021535": {
"ID": 5597215526021535,
"LoginName": "squirtle.tail78f774.ts.net",
"DisplayName": "squirtle"
}}
}}, "venusaur": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 3565289383368865,
"StableID": "n2mo3B7jqU11CNTRL",
"ID": 2871481288152846,
"StableID": "no5VWmwVRP11CNTRL",
"Name": "venusaur.tail78f774.ts.net.",
"User": 3982058329734709,
"Key": "nodekey:ca104588826fa99e0f4f85a18318b905e685c77b0701f329a9f4d9a82f9fa729",
"KeyExpiry": "2026-10-07T16:42:20Z",
"DiscoKey": "discokey:d7b6e52162fbabcf306711c2a7738316f5a34f58a8208ec4462f537e55ed5f0e",
"Addresses": ["100.95.167.42/32", "fd7a:115c:a1e0::2f37:a72a/128"],
"AllowedIPs": ["100.95.167.42/32", "fd7a:115c:a1e0::2f37:a72a/128"],
"Endpoints": ["77.164.248.136:60787", "10.65.0.27:60787", "172.17.0.1:60787"],
"Key": "nodekey:8817305532cc39811e3698680bef63616f5e1aaad9d98ccb85a57483d6ab8472",
"KeyExpiry": "2027-04-28T16:42:29Z",
"DiscoKey": "discokey:69b8a6af45fa5ec557aa9a397ea57d25e006ec3f83372dfc52775794faf0ec39",
"Addresses": ["100.64.0.18/32", "fd7a:115c:a1e0::12/128"],
"AllowedIPs": ["100.64.0.18/32", "fd7a:115c:a1e0::12/128"],
"Endpoints": [
"192.0.2.1:34977",
"198.51.100.1:34977",
"198.51.100.2:34977",
"198.51.100.3:34977"
],
"Hostinfo": {"Hostname": "venusaur", "Services": [
{"Proto": "peerapi4", "Port": 54119},
{"Proto": "peerapi6", "Port": 54119},
{"Proto": "peerapi4", "Port": 42394},
{"Proto": "peerapi6", "Port": 42394},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T16:42:20.450568093Z",
"Created": "2026-10-30T16:42:29.842419258Z",
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-admin": null,
"https://tailscale.com/cap/ssh": null,
@@ -5497,6 +5593,7 @@
"ComputedNameWithHost": "venusaur"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-admin",
"https://tailscale.com/cap/ssh",
@@ -5507,8 +5604,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:ca104588826fa99e0f4f85a18318b905e685c77b0701f329a9f4d9a82f9fa729",
"MachineKey": "mkey:ceddb437418204271210de11594fa51e050e98bfcc8412537cab28ab74815b6d",
"NodeKey": "nodekey:8817305532cc39811e3698680bef63616f5e1aaad9d98ccb85a57483d6ab8472",
"MachineKey": "mkey:a0409b2ed29192135cebebd8edc637e33ab94e39ee976bb2bfaa5caed2dbf74c",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -6342,24 +6439,30 @@
}}, "weedle": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 2231722204147336,
"StableID": "n32Q1NZkRJ11CNTRL",
"ID": 2944225031758405,
"StableID": "ni3q2MoSzP11CNTRL",
"Name": "weedle.tail78f774.ts.net.",
"User": 2231722204147336,
"Key": "nodekey:77c67938ee130988d6ba7eef6f8c831b58a028d08550f264da2ae2523974d433",
"DiscoKey": "discokey:541722281b25a47dc76e65f71284d67fd57826ad0b6700833378b4cf4a031567",
"Addresses": ["100.116.212.52/32", "fd7a:115c:a1e0::3937:d434/128"],
"AllowedIPs": ["100.116.212.52/32", "fd7a:115c:a1e0::3937:d434/128"],
"Endpoints": ["77.164.248.136:40522", "10.65.0.27:40522", "172.17.0.1:40522"],
"User": 2944225031758405,
"Key": "nodekey:5049845330279c928c023188e9054fe2db105d577e4853d2683337378110154b",
"DiscoKey": "discokey:5c28f4e3dc3ed5cc622ce26508f9cce8e5793e3762d4098379d0d2203cbd1c33",
"Addresses": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"Endpoints": [
"192.0.2.1:41256",
"198.51.100.1:41256",
"198.51.100.2:41256",
"198.51.100.3:41256"
],
"Hostinfo": {"Hostname": "weedle", "RequestTags": ["tag:client"], "Services": [
{"Proto": "peerapi4", "Port": 60720},
{"Proto": "peerapi6", "Port": 60720},
{"Proto": "peerapi4", "Port": 63957},
{"Proto": "peerapi6", "Port": 63957},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T16:42:18.301097884Z",
"Created": "2026-10-30T16:42:27.692719981Z",
"Tags": ["tag:client"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -6374,6 +6477,7 @@
"ComputedNameWithHost": "weedle"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -6384,50 +6488,60 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:77c67938ee130988d6ba7eef6f8c831b58a028d08550f264da2ae2523974d433",
"MachineKey": "mkey:0e31f23b1d25d63aff74fd7c472ff9b6b7284bb4383f0c6cc6e003bf4f901b6c",
"NodeKey": "nodekey:5049845330279c928c023188e9054fe2db105d577e4853d2683337378110154b",
"MachineKey": "mkey:351c0e0c35d1be06f70f5034f49a20fb3c7571fe069f26108f537c979899f101",
"Peers": [{
"ID": 6485066519086660,
"StableID": "nhq2Eeh6es11CNTRL",
"Name": "beedrill.tail78f774.ts.net.",
"User": 1260082990019555,
"Key": "nodekey:1cc3d1e125a27ceed9358b19ec5dada27d49675564671df010de3323d03f8b6f",
"DiscoKey": "discokey:9694201f77a5ca3027d2c9ac8cf55654f937c710452968b9a24a1e5aa7860d0e",
"Addresses": ["100.127.139.112/32", "fd7a:115c:a1e0::d037:8b70/128"],
"AllowedIPs": ["100.127.139.112/32", "fd7a:115c:a1e0::d037:8b70/128"],
"Endpoints": ["77.164.248.136:57579", "10.65.0.27:57579", "172.17.0.1:57579"],
"HomeDERP": 14,
"Hostinfo": {"OS": "linux", "Hostname": "beedrill", "Services": [
{"Proto": "peerapi4", "Port": 50883},
{"Proto": "peerapi6", "Port": 50883}
]},
"Created": "2026-04-10T16:42:19.368137583Z",
"Cap": 131,
"Tags": ["tag:server"],
"Online": true,
"ComputedName": "beedrill",
"ComputedNameWithHost": "beedrill"
}, {
"ID": 8377731569359282,
"StableID": "nqkEbXoHR821CNTRL",
"ID": 6709305401716299,
"StableID": "nCHwQQ5fPu11CNTRL",
"Name": "kakuna.tail78f774.ts.net.",
"User": 1260082990019555,
"Key": "nodekey:2d6e6f9e35c30204cfd9e4a3824ddf828eb0528e8388b036b2fade7e88713040",
"DiscoKey": "discokey:fa0a18c85e468def4630ccc2349a639fa401431d4c616f1808fe5e986b4f2012",
"Addresses": ["100.113.48.65/32", "fd7a:115c:a1e0::8837:3041/128"],
"AllowedIPs": ["100.113.48.65/32", "fd7a:115c:a1e0::8837:3041/128"],
"Endpoints": ["77.164.248.136:46742", "10.65.0.27:46742", "172.17.0.1:46742"],
"HomeDERP": 14,
"Key": "nodekey:22b3cdedab69ce4a9206ba939b663a35bd957bdb2eb8ae21bd69818bd6980702",
"DiscoKey": "discokey:ed274d50060dec6c373006ad66f9e4e9e860c69f023eb2f0d19c52517727a73b",
"Addresses": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
"Endpoints": [
"192.0.2.1:43599",
"198.51.100.1:43599",
"198.51.100.2:43599",
"198.51.100.3:43599"
],
"HomeDERP": 14,
"Hostinfo": {"OS": "linux", "Hostname": "kakuna", "Services": [
{"Proto": "peerapi4", "Port": 40064},
{"Proto": "peerapi6", "Port": 40064}
{"Proto": "peerapi4", "Port": 51523},
{"Proto": "peerapi6", "Port": 51523}
]},
"Created": "2026-04-10T16:42:18.835242201Z",
"Cap": 131,
"Created": "2026-10-30T16:42:28.222441522Z",
"Cap": 142,
"Tags": ["tag:prod"],
"Online": true,
"ComputedName": "kakuna",
"ComputedNameWithHost": "kakuna"
}, {
"ID": 3865336066119002,
"StableID": "nqvbwnpcBX11CNTRL",
"Name": "beedrill.tail78f774.ts.net.",
"User": 1260082990019555,
"Key": "nodekey:fb184c227a714945847ab13e8a7b82cb308c12767266823604b4b3186398fa26",
"DiscoKey": "discokey:42f7a2acd0251ab35b667affe5f5955039018b78d0d56748a34c16c1ca71737f",
"Addresses": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
"Endpoints": [
"192.0.2.1:53559",
"198.51.100.1:53559",
"198.51.100.2:53559",
"198.51.100.3:53559"
],
"HomeDERP": 14,
"Hostinfo": {"OS": "linux", "Hostname": "beedrill", "Services": [
{"Proto": "peerapi4", "Port": 50358},
{"Proto": "peerapi6", "Port": 50358}
]},
"Created": "2026-10-30T16:42:28.762283533Z",
"Cap": 142,
"Tags": ["tag:server"],
"Online": true,
"ComputedName": "beedrill",
"ComputedNameWithHost": "beedrill"
}],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -7257,8 +7371,8 @@
"ID": 1260082990019555,
"LoginName": "tagged-devices",
"DisplayName": "Tagged Devices"
}, "2231722204147336": {
"ID": 2231722204147336,
}, "2944225031758405": {
"ID": 2944225031758405,
"LoginName": "weedle.tail78f774.ts.net",
"DisplayName": "weedle"
}}
hscontrol/policy/v2/testdata/acl_results/acl-r08.hujson
Generated Vendored
+372 -252
View File
File diff suppressed because it is too large. Load diff
hscontrol/policy/v2/testdata/acl_results/acl-rs02.hujson
Generated Vendored
+276 -174
View File
@@ -3,26 +3,58 @@
// acl rs02
//
// Nodes with filter rules: 1 of 8
// Captured at: 2026-04-10T16:48:15Z
// tscap version: tscap/dev
// Captured at: 2026-10-30T16:43:48Z
// tool version: tscap/5f80ee6150559e777612549d896d444b50768737
// schema version: 1
{
"schema_version": 1,
"test_id": "acl-rs02",
"description": "acl rs02",
"category": "acl",
"captured_at": "2026-04-10T16:48:15.904848648Z",
"tool_version": "tscap/dev",
"captured_at": "2026-10-30T16:43:48.028535946Z",
"tool_version": "tscap/5f80ee6150559e777612549d896d444b50768737",
"client_version": "1.102.5-ERR-BuildInfo capver 142",
"tailnet": "odin@example.com",
"input": {
"full_policy": "{\"acls\":[{\"action\":\"accept\",\"dst\":[\"tag:client:22\"],\"src\":[\"tag:server\",\"webserver\",\"100.108.74.26\"]}],\"autoApprovers\":{\"routes\":{\"0.0.0.0/0\":[\"tag:exit\"],\"10.33.0.0/16\":[\"tag:router\"],\"::/0\":[\"tag:exit\"]}},\"groups\":{\"group:admins\":[\"odin@example.com\"],\"group:developers\":[\"thor@example.org\",\"odin@example.com\"],\"group:empty\":[],\"group:monitors\":[\"freya@example.com\"]},\"hosts\":{\"internal\":\"10.0.0.0/8\",\"prodbox\":\"100.103.8.15\",\"subnet24\":\"192.168.1.0/24\",\"webserver\":\"100.108.74.26\"},\"tagOwners\":{\"tag:client\":[\"odin@example.com\"],\"tag:exit\":[\"odin@example.com\"],\"tag:pidgey\":[\"odin@example.com\"],\"tag:pidgeotto\":[\"odin@example.com\"],\"tag:group-a\":[\"odin@example.com\"],\"tag:group-b\":[\"odin@example.com\"],\"tag:ha\":[\"odin@example.com\"],\"tag:prod\":[\"odin@example.com\"],\"tag:router\":[\"odin@example.com\"],\"tag:spearow\":[\"odin@example.com\"],\"tag:fearow\":[\"odin@example.com\"],\"tag:server\":[\"odin@example.com\"]}}",
"api_response_code": 200,
"tailnet": {
"dns": {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
"settings": {}
},
"scenario_hujson": " \n{\n\t\"category\": \"acl\",\n\t\"description\": \"acl rs02\",\n\t\"id\": \"acl-rs02\",\n\t\"policy\": {\"acls\": [{\n\t\t\"action\": \"accept\",\n\t\t\"dst\": [\"tag:client:22\"],\n\t\t\"src\": [\"tag:server\", \"webserver\", \"100.108.74.26\"]\n\t}], \"autoApprovers\": {\"routes\": {\n\t\t\"0.0.0.0/0\": [\"tag:exit\"],\n\t\t\"10.33.0.0/16\": [\"tag:router\"],\n\t\t\"::/0\": [\"tag:exit\"]\n\t}}, \"groups\": {\n\t\t\"group:admins\": [\"odin@example.com\"],\n\t\t\"group:developers\": [\"thor@example.org\", \"odin@example.com\"],\n\t\t\"group:empty\": [],\n\t\t\"group:monitors\": [\"freya@example.com\"]\n\t}, \"hosts\": {\n\t\t\"internal\": \"10.0.0.0/8\",\n\t\t\"prodbox\": \"100.103.8.15\",\n\t\t\"subnet24\": \"192.168.1.0/24\",\n\t\t\"webserver\": \"100.108.74.26\"\n\t}, \"tagOwners\": {\n\t\t\"tag:client\": [\"odin@example.com\"],\n\t\t\"tag:exit\": [\"odin@example.com\"],\n\t\t\"tag:pidgey\": [\"odin@example.com\"],\n\t\t\"tag:pidgeotto\": [\"odin@example.com\"],\n\t\t\"tag:group-a\": [\"odin@example.com\"],\n\t\t\"tag:group-b\": [\"odin@example.com\"],\n\t\t\"tag:ha\": [\"odin@example.com\"],\n\t\t\"tag:prod\": [\"odin@example.com\"],\n\t\t\"tag:router\": [\"odin@example.com\"],\n\t\t\"tag:spearow\": [\"odin@example.com\"],\n\t\t\"tag:fearow\": [\"odin@example.com\"],\n\t\t\"tag:server\": [\"odin@example.com\"]\n\t}},\n\t\"tailnet\": {\n\t\t\"dns\": {\"magic_dns\": false, \"nameservers\": [], \"search_paths\": [], \"split_dns\": {}},\n\t\t\"settings\": {}\n\t},\n\t\"topology\": \"../_topologies/acl.hujson\"\n}\n",
"scenario_path": "scenarios/acl/acl-rs02.hujson"
"scenario_path": "scenarios/acl/acl-rs02.hujson",
"full_policy": {"acls": [{
"action": "accept",
"dst": ["tag:client:22"],
"src": ["tag:server", "webserver", "100.108.74.26"]
}], "autoApprovers": {"routes": {
"0.0.0.0/0": ["tag:exit"],
"10.33.0.0/16": ["tag:router"],
"::/0": ["tag:exit"]
}}, "groups": {
"group:admins": ["odin@example.com"],
"group:developers": ["thor@example.org", "odin@example.com"],
"group:empty": [],
"group:monitors": ["freya@example.com"]
}, "hosts": {
"internal": "10.0.0.0/8",
"prodbox": "100.103.8.15",
"subnet24": "192.168.1.0/24",
"webserver": "100.108.74.26"
}, "tagOwners": {
"tag:client": ["odin@example.com"],
"tag:exit": ["odin@example.com"],
"tag:pidgey": ["odin@example.com"],
"tag:pidgeotto": ["odin@example.com"],
"tag:group-a": ["odin@example.com"],
"tag:group-b": ["odin@example.com"],
"tag:ha": ["odin@example.com"],
"tag:prod": ["odin@example.com"],
"tag:router": ["odin@example.com"],
"tag:spearow": ["odin@example.com"],
"tag:fearow": ["odin@example.com"],
"tag:server": ["odin@example.com"]
}}
},
"topology": {"users": [
{"id": 1, "name": "odin", "email": "odin@example.com"},
@@ -31,83 +63,90 @@
], "nodes": {"beedrill": {
"hostname": "beedrill",
"tags": ["tag:server"],
"ipv4": "100.80.29.12",
"ipv6": "fd7a:115c:a1e0::a437:1d0c",
"ipv4": "100.64.0.16",
"ipv6": "fd7a:115c:a1e0::10",
"routable_ips": [],
"approved_routes": []
}, "bulbasaur": {
"hostname": "bulbasaur",
"tags": [],
"ipv4": "100.79.28.61",
"ipv6": "fd7a:115c:a1e0::c337:1c3d",
"ipv4": "100.64.0.19",
"ipv6": "fd7a:115c:a1e0::13",
"user": "odin",
"routable_ips": [],
"approved_routes": []
}, "charmander": {
"hostname": "charmander",
"tags": ["tag:exit"],
"ipv4": "100.89.43.32",
"ipv6": "fd7a:115c:a1e0::c537:2b20",
"ipv4": "100.64.0.4",
"ipv6": "fd7a:115c:a1e0::4",
"routable_ips": ["0.0.0.0/0", "::/0"],
"approved_routes": []
}, "ivysaur": {
"hostname": "ivysaur",
"tags": [],
"ipv4": "100.127.185.39",
"ipv6": "fd7a:115c:a1e0::e537:b927",
"ipv4": "100.64.0.17",
"ipv6": "fd7a:115c:a1e0::11",
"user": "thor",
"routable_ips": [],
"approved_routes": []
}, "kakuna": {
"hostname": "kakuna",
"tags": ["tag:prod"],
"ipv4": "100.121.54.106",
"ipv6": "fd7a:115c:a1e0::9137:366a",
"ipv4": "100.64.0.15",
"ipv6": "fd7a:115c:a1e0::f",
"routable_ips": [],
"approved_routes": []
}, "squirtle": {
"hostname": "squirtle",
"tags": ["tag:router"],
"ipv4": "100.113.14.96",
"ipv6": "fd7a:115c:a1e0::ff37:e60",
"ipv4": "100.64.0.13",
"ipv6": "fd7a:115c:a1e0::d",
"routable_ips": ["10.33.0.0/16"],
"approved_routes": []
"approved_routes": ["10.33.0.0/16"]
}, "venusaur": {
"hostname": "venusaur",
"tags": [],
"ipv4": "100.76.138.35",
"ipv6": "fd7a:115c:a1e0::9c37:8a23",
"ipv4": "100.64.0.18",
"ipv6": "fd7a:115c:a1e0::12",
"user": "freya",
"routable_ips": [],
"approved_routes": []
}, "weedle": {
"hostname": "weedle",
"tags": ["tag:client"],
"ipv4": "100.113.99.59",
"ipv6": "fd7a:115c:a1e0::d437:633b",
"ipv4": "100.64.0.14",
"ipv6": "fd7a:115c:a1e0::e",
"routable_ips": [],
"approved_routes": []
}}},
"captures": {"beedrill": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 7762688997820152,
"StableID": "noa9fFgjc321CNTRL",
"ID": 7266514963577010,
"StableID": "nmrYKX22ky11CNTRL",
"Name": "beedrill.tail78f774.ts.net.",
"User": 7762688997820152,
"Key": "nodekey:26e02375d645fcd0867b5f4d917df353f6af732f16ec1d162139415aa4101d0b",
"DiscoKey": "discokey:1c2d12ebf98f7bd7c37ce9ba5b1003d97262dbf606bbee514a8dbf9d69094b37",
"Addresses": ["100.80.29.12/32", "fd7a:115c:a1e0::a437:1d0c/128"],
"AllowedIPs": ["100.80.29.12/32", "fd7a:115c:a1e0::a437:1d0c/128"],
"User": 7266514963577010,
"Key": "nodekey:48cdd7ed8b95440e93f41d4bf5b4f76d55594f2fa7d83f1bce36a67c42345115",
"DiscoKey": "discokey:49e9005a1c9224769c3243c2dc9ce2ea9537a023e175fc0d92238e0574928951",
"Addresses": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
"Endpoints": [
"192.0.2.1:46785",
"198.51.100.1:46785",
"198.51.100.2:46785",
"198.51.100.3:46785"
],
"Hostinfo": {"Hostname": "beedrill", "RequestTags": ["tag:server"], "Services": [
{"Proto": "peerapi4", "Port": 55189},
{"Proto": "peerapi6", "Port": 55189},
{"Proto": "peerapi4", "Port": 50358},
{"Proto": "peerapi6", "Port": 50358},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T16:48:21.125369798Z",
"Created": "2026-10-30T16:43:51.974076899Z",
"Tags": ["tag:server"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -122,6 +161,7 @@
"ComputedNameWithHost": "beedrill"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -132,25 +172,30 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:26e02375d645fcd0867b5f4d917df353f6af732f16ec1d162139415aa4101d0b",
"MachineKey": "mkey:585af4cb9511fa1c7f0b8750f5250925f81509e820ef39020fb6d0372487f468",
"NodeKey": "nodekey:48cdd7ed8b95440e93f41d4bf5b4f76d55594f2fa7d83f1bce36a67c42345115",
"MachineKey": "mkey:1b6a6e119ecbb2dd2fe61fbc58fdb8f1a7e4499d6c38bcd9acea91a24f7a296f",
"Peers": [{
"ID": 2152932371307925,
"StableID": "n6RMHCt4pH11CNTRL",
"ID": 7230601973781157,
"StableID": "nvKcPsekTy11CNTRL",
"Name": "weedle.tail78f774.ts.net.",
"User": 1260082990019555,
"Key": "nodekey:6f07d3a6f212d12efee97530c9bf14515e88f568675ac60e848ecedcd431633a",
"DiscoKey": "discokey:d896cd87fde4ed18070a8874a272b0995fc343983bfbf6872fe9f1a12f415e7a",
"Addresses": ["100.113.99.59/32", "fd7a:115c:a1e0::d437:633b/128"],
"AllowedIPs": ["100.113.99.59/32", "fd7a:115c:a1e0::d437:633b/128"],
"Endpoints": ["77.164.248.136:46503", "10.65.0.27:46503", "172.17.0.1:46503"],
"HomeDERP": 14,
"Key": "nodekey:adfc52081bad07c3367e54500c9a488d4255736e5bc9acd9f29070d02b90c318",
"DiscoKey": "discokey:515517e25a22199fb380447f0641804ab329f766167ed563ce562b19951c6872",
"Addresses": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"Endpoints": [
"192.0.2.1:36004",
"198.51.100.1:36004",
"198.51.100.2:36004",
"198.51.100.3:36004"
],
"HomeDERP": 14,
"Hostinfo": {"OS": "linux", "Hostname": "weedle", "Services": [
{"Proto": "peerapi4", "Port": 35381},
{"Proto": "peerapi6", "Port": 35381}
{"Proto": "peerapi4", "Port": 63957},
{"Proto": "peerapi6", "Port": 63957}
]},
"Created": "2026-04-10T16:48:20.069747099Z",
"Cap": 131,
"Created": "2026-10-30T16:43:50.666170957Z",
"Cap": 142,
"Tags": ["tag:client"],
"Online": true,
"ComputedName": "weedle",
@@ -984,32 +1029,38 @@
"ID": 1260082990019555,
"LoginName": "tagged-devices",
"DisplayName": "Tagged Devices"
}, "7762688997820152": {
"ID": 7762688997820152,
}, "7266514963577010": {
"ID": 7266514963577010,
"LoginName": "beedrill.tail78f774.ts.net",
"DisplayName": "beedrill"
}}
}}, "bulbasaur": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 1838276574396847,
"StableID": "nN6qzgQZMF11CNTRL",
"ID": 286677812117764,
"StableID": "n9dLaKYqE311CNTRL",
"Name": "bulbasaur.tail78f774.ts.net.",
"User": 4156223528223174,
"Key": "nodekey:99c86ddf4f30b6714c40813661470ef7288919610d0ab4a84814aec4c3cf1c3c",
"KeyExpiry": "2026-10-07T16:48:22Z",
"DiscoKey": "discokey:02aa55804e91cc9987ae27fb6ccd00d8854fea43ef87cb4a3c71df6e2b07e86d",
"Addresses": ["100.79.28.61/32", "fd7a:115c:a1e0::c337:1c3d/128"],
"AllowedIPs": ["100.79.28.61/32", "fd7a:115c:a1e0::c337:1c3d/128"],
"Endpoints": ["77.164.248.136:47408", "10.65.0.27:47408", "172.17.0.1:47408"],
"Key": "nodekey:59f2b398515a42bd0bd2cd641b87a83b0ebabef2b152353948b1e7b0502b322f",
"KeyExpiry": "2027-04-28T16:43:53Z",
"DiscoKey": "discokey:f6be92b18bd098fe042761e35d9cc7d90c6b4a9dcb0cfa341565366e2458bb4f",
"Addresses": ["100.64.0.19/32", "fd7a:115c:a1e0::13/128"],
"AllowedIPs": ["100.64.0.19/32", "fd7a:115c:a1e0::13/128"],
"Endpoints": [
"192.0.2.1:37881",
"198.51.100.1:37881",
"198.51.100.2:37881",
"198.51.100.3:37881"
],
"Hostinfo": {"Hostname": "bulbasaur", "Services": [
{"Proto": "peerapi4", "Port": 33443},
{"Proto": "peerapi6", "Port": 33443},
{"Proto": "peerapi4", "Port": 38156},
{"Proto": "peerapi6", "Port": 38156},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T16:48:22.737233622Z",
"Created": "2026-10-30T16:43:53.631634403Z",
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-admin": null,
"https://tailscale.com/cap/is-owner": null,
@@ -1025,6 +1076,7 @@
"ComputedNameWithHost": "bulbasaur"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-admin",
"https://tailscale.com/cap/is-owner",
@@ -1036,8 +1088,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:99c86ddf4f30b6714c40813661470ef7288919610d0ab4a84814aec4c3cf1c3c",
"MachineKey": "mkey:e5c98a9fabe7269cb0fc98d86026e1c417ef85b0268730816fb876ee7ffb023c",
"NodeKey": "nodekey:59f2b398515a42bd0bd2cd641b87a83b0ebabef2b152353948b1e7b0502b322f",
"MachineKey": "mkey:d53293be6ed5876bdb73318485afe38dd9e010ff992da754208d2572122bde64",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -1871,29 +1923,35 @@
}}, "charmander": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 8648972444306647,
"StableID": "nASYtiq8YA21CNTRL",
"ID": 33261135367307,
"StableID": "nU9qdPi4G111CNTRL",
"Name": "charmander.tail78f774.ts.net.",
"User": 8648972444306647,
"Key": "nodekey:1fdf11661e267c54cf191e9546cb11c8e523437bbbafddb7dd4d7652c5192b1f",
"DiscoKey": "discokey:83de05ebeffb9df9f2d40336c4c11e780c95e851252ee68ff0e69e9c73f1e578",
"Addresses": ["100.89.43.32/32", "fd7a:115c:a1e0::c537:2b20/128"],
"AllowedIPs": ["100.89.43.32/32", "fd7a:115c:a1e0::c537:2b20/128"],
"Endpoints": ["77.164.248.136:52853", "10.65.0.27:52853", "172.17.0.1:52853"],
"User": 33261135367307,
"Key": "nodekey:ba9f6731b5912088907588ead4c01dabd9f053733f98eedd92f8f1d53e96184d",
"DiscoKey": "discokey:51c07881ad19d0add48919f6acfcb1caf14da94e01a90743a0b7655b38befe3b",
"Addresses": ["100.64.0.4/32", "fd7a:115c:a1e0::4/128"],
"AllowedIPs": ["100.64.0.4/32", "fd7a:115c:a1e0::4/128"],
"Endpoints": [
"192.0.2.1:49024",
"198.51.100.1:49024",
"198.51.100.2:49024",
"198.51.100.3:49024"
],
"Hostinfo": {
"Hostname": "charmander",
"RoutableIPs": ["0.0.0.0/0", "::/0"],
"RequestTags": ["tag:exit"],
"Services": [
{"Proto": "peerapi4", "Port": 37260},
{"Proto": "peerapi6", "Port": 37260},
{"Proto": "peerapi4", "Port": 37067},
{"Proto": "peerapi6", "Port": 37067},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]
},
"Created": "2026-04-10T16:48:18.983702615Z",
"Created": "2026-10-30T16:43:49.579526126Z",
"Tags": ["tag:exit"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -1908,6 +1966,7 @@
"ComputedNameWithHost": "charmander"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -1918,8 +1977,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:1fdf11661e267c54cf191e9546cb11c8e523437bbbafddb7dd4d7652c5192b1f",
"MachineKey": "mkey:89e1ac1349f65028a0ef2b183b9ca9cd3e1c882b41b88d84e9ae2d45d97e1e1d",
"NodeKey": "nodekey:ba9f6731b5912088907588ead4c01dabd9f053733f98eedd92f8f1d53e96184d",
"MachineKey": "mkey:bd5e0e2605c9779c901911f9556ef44c1796968930e9829b43b72d22edcf3a64",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -2745,32 +2804,38 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {"8648972444306647": {
"ID": 8648972444306647,
"UserProfiles": {"33261135367307": {
"ID": 33261135367307,
"LoginName": "charmander.tail78f774.ts.net",
"DisplayName": "charmander"
}}
}}, "ivysaur": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 3165533993678321,
"StableID": "nePFACDgiR11CNTRL",
"ID": 4711384376460626,
"StableID": "n71GyY5ond11CNTRL",
"Name": "ivysaur.tail78f774.ts.net.",
"User": 4538565228176803,
"Key": "nodekey:e5f427a4fe8149bfe32e9d16787d120b11e42d3ecca529bcf7d6259ee5ffb926",
"KeyExpiry": "2026-10-07T16:48:21Z",
"DiscoKey": "discokey:8c292c6edc8666aed706527a012f9f2824e290fd91a4d3b47d44a49fd045f841",
"Addresses": ["100.127.185.39/32", "fd7a:115c:a1e0::e537:b927/128"],
"AllowedIPs": ["100.127.185.39/32", "fd7a:115c:a1e0::e537:b927/128"],
"Endpoints": ["77.164.248.136:44075", "10.65.0.27:44075", "172.17.0.1:44075"],
"Key": "nodekey:b568a09284cce4d16ef43cc04c41b0fb74301f266a5905636a34526ace45bf4f",
"KeyExpiry": "2027-04-28T16:43:52Z",
"DiscoKey": "discokey:bab67406ccf02b0e7e95a5c4db7a8886baa3f7de56edb27f7dc13da7d90a8e57",
"Addresses": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
"Endpoints": [
"192.0.2.1:40505",
"198.51.100.1:40505",
"198.51.100.2:40505",
"198.51.100.3:40505"
],
"Hostinfo": {"Hostname": "ivysaur", "Services": [
{"Proto": "peerapi4", "Port": 55013},
{"Proto": "peerapi6", "Port": 55013},
{"Proto": "peerapi4", "Port": 62496},
{"Proto": "peerapi6", "Port": 62496},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T16:48:21.671392242Z",
"Created": "2026-10-30T16:43:52.551810663Z",
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-admin": null,
"https://tailscale.com/cap/ssh": null,
@@ -2785,6 +2850,7 @@
"ComputedNameWithHost": "ivysaur"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-admin",
"https://tailscale.com/cap/ssh",
@@ -2795,8 +2861,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:e5f427a4fe8149bfe32e9d16787d120b11e42d3ecca529bcf7d6259ee5ffb926",
"MachineKey": "mkey:e2501983f5a4565563d04f062ef99aaab25a099586c630aa8474bf59bcbbc505",
"NodeKey": "nodekey:b568a09284cce4d16ef43cc04c41b0fb74301f266a5905636a34526ace45bf4f",
"MachineKey": "mkey:faebeb4f8829f0567c23ac87a90e9e3d56db0405a19233201f98853a2250223c",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -3622,30 +3688,38 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {
"4538565228176803": {"ID": 4538565228176803, "LoginName": "thor@example.org", "DisplayName": "thor"}
}
"UserProfiles": {"4538565228176803": {
"ID": 4538565228176803,
"LoginName": "thor@example.org",
"DisplayName": "thor"
}}
}}, "kakuna": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 3138148023866980,
"StableID": "nfLbnypGWR11CNTRL",
"ID": 4435726731612155,
"StableID": "nJgiq82xdb11CNTRL",
"Name": "kakuna.tail78f774.ts.net.",
"User": 3138148023866980,
"Key": "nodekey:24031c445f2328e2ecf6e7cd011af91066658b78f777f7f0ce400d1a91f93669",
"DiscoKey": "discokey:f23e6f5437a0442130f19c812db8495d20d87243312f8aabf9592ff12f746323",
"Addresses": ["100.121.54.106/32", "fd7a:115c:a1e0::9137:366a/128"],
"AllowedIPs": ["100.121.54.106/32", "fd7a:115c:a1e0::9137:366a/128"],
"Endpoints": ["77.164.248.136:36387", "10.65.0.27:36387", "172.17.0.1:36387"],
"User": 4435726731612155,
"Key": "nodekey:920f5b7f2eccfa38bde0b31a0f2f02e6d8d7cc89bda8663ed92f586a5a7f805b",
"DiscoKey": "discokey:86dee4f4f4f581cc955f93a7c0494bde33b8384d63bfd9ed28910bfdee711767",
"Addresses": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
"Endpoints": [
"192.0.2.1:45223",
"198.51.100.1:45223",
"198.51.100.2:45223",
"198.51.100.3:45223"
],
"Hostinfo": {"Hostname": "kakuna", "RequestTags": ["tag:prod"], "Services": [
{"Proto": "peerapi4", "Port": 37886},
{"Proto": "peerapi6", "Port": 37886},
{"Proto": "peerapi4", "Port": 51523},
{"Proto": "peerapi6", "Port": 51523},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T16:48:20.597579778Z",
"Created": "2026-10-30T16:43:51.42495337Z",
"Tags": ["tag:prod"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -3660,6 +3734,7 @@
"ComputedNameWithHost": "kakuna"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -3670,8 +3745,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:24031c445f2328e2ecf6e7cd011af91066658b78f777f7f0ce400d1a91f93669",
"MachineKey": "mkey:531b4e2c480d142f72a733cdb1352dc5bbfc4c4fe630a0e862791c35203c7d55",
"NodeKey": "nodekey:920f5b7f2eccfa38bde0b31a0f2f02e6d8d7cc89bda8663ed92f586a5a7f805b",
"MachineKey": "mkey:df02981417b689f9d2c27c590efdd79d869b79bdb24183583d9e9fdf5eb4854f",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -4497,38 +4572,44 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {"3138148023866980": {
"ID": 3138148023866980,
"UserProfiles": {"4435726731612155": {
"ID": 4435726731612155,
"LoginName": "kakuna.tail78f774.ts.net",
"DisplayName": "kakuna"
}}
}}, "squirtle": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 2571988303830691,
"StableID": "nNzr3kmr5M11CNTRL",
"ID": 675545090643876,
"StableID": "nMu9NbRxG611CNTRL",
"Name": "squirtle.tail78f774.ts.net.",
"User": 2571988303830691,
"Key": "nodekey:0cd0839701c4724f4cea8c402ca0dc3f5d8787b16527adf72f8f3682ff710e5f",
"DiscoKey": "discokey:54be0804a9ec3419d38132875c36403e9d5b8abe0e7d8b91f3171562dbd2b572",
"Addresses": ["100.113.14.96/32", "fd7a:115c:a1e0::ff37:e60/128"],
"AllowedIPs": ["100.113.14.96/32", "fd7a:115c:a1e0::ff37:e60/128", "10.33.0.0/16"],
"Endpoints": ["77.164.248.136:44725", "10.65.0.27:44725", "172.17.0.1:44725"],
"User": 675545090643876,
"Key": "nodekey:bc4332c42f09ee081b0d6d02403205ed3cb8a9adbac2034c3b9bd03be6ead621",
"DiscoKey": "discokey:21f9e6320d532562c640d0cd3e7d701998ad465439e413e5940e2abcf378f13b",
"Addresses": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128", "10.33.0.0/16"],
"Endpoints": [
"192.0.2.1:60887",
"198.51.100.1:60887",
"198.51.100.2:60887",
"198.51.100.3:60887"
],
"Hostinfo": {
"Hostname": "squirtle",
"RoutableIPs": ["10.33.0.0/16"],
"RequestTags": ["tag:router"],
"Services": [
{"Proto": "peerapi4", "Port": 38819},
{"Proto": "peerapi6", "Port": 38819},
{"Proto": "peerapi4", "Port": 43119},
{"Proto": "peerapi6", "Port": 43119},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]
},
"Created": "2026-04-10T16:48:19.532268635Z",
"Created": "2026-10-30T16:43:50.072273072Z",
"Tags": ["tag:router"],
"PrimaryRoutes": ["10.33.0.0/16"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -4543,6 +4624,7 @@
"ComputedNameWithHost": "squirtle"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -4553,8 +4635,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:0cd0839701c4724f4cea8c402ca0dc3f5d8787b16527adf72f8f3682ff710e5f",
"MachineKey": "mkey:5246145b61151a4bff1a5eae95313ca130fdec3613d07625053e85d5c5c0ad51",
"NodeKey": "nodekey:bc4332c42f09ee081b0d6d02403205ed3cb8a9adbac2034c3b9bd03be6ead621",
"MachineKey": "mkey:faa3955d0db78a260aa298b789bcf763322ad0cc9447d015b6ec39f2d498d120",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -5380,32 +5462,38 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {"2571988303830691": {
"ID": 2571988303830691,
"UserProfiles": {"675545090643876": {
"ID": 675545090643876,
"LoginName": "squirtle.tail78f774.ts.net",
"DisplayName": "squirtle"
}}
}}, "venusaur": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 5024526332581313,
"StableID": "nEm2LdncEg11CNTRL",
"ID": 37025070193306,
"StableID": "nwPffyamH111CNTRL",
"Name": "venusaur.tail78f774.ts.net.",
"User": 3982058329734709,
"Key": "nodekey:235fb2dc160fc1155de1ec831ad32bee50196658e8ffd2bae95c30869c8c8a22",
"KeyExpiry": "2026-10-07T16:48:22Z",
"DiscoKey": "discokey:7d4d055f7d3570f83c61f687ee99c6a3e81d1d5da0938399650d66bba6f98851",
"Addresses": ["100.76.138.35/32", "fd7a:115c:a1e0::9c37:8a23/128"],
"AllowedIPs": ["100.76.138.35/32", "fd7a:115c:a1e0::9c37:8a23/128"],
"Endpoints": ["77.164.248.136:50426", "10.65.0.27:50426", "172.17.0.1:50426"],
"Key": "nodekey:7b975c8f02395507734b8b439d9fcf0d0b2ee9153590af20455746698ed5844f",
"KeyExpiry": "2027-04-28T16:43:53Z",
"DiscoKey": "discokey:e0ad8add97a618613d6931d29bd41adc698871e7b87d73cb584a73f5467b8c14",
"Addresses": ["100.64.0.18/32", "fd7a:115c:a1e0::12/128"],
"AllowedIPs": ["100.64.0.18/32", "fd7a:115c:a1e0::12/128"],
"Endpoints": [
"192.0.2.1:57286",
"198.51.100.1:57286",
"198.51.100.2:57286",
"198.51.100.3:57286"
],
"Hostinfo": {"Hostname": "venusaur", "Services": [
{"Proto": "peerapi4", "Port": 44037},
{"Proto": "peerapi6", "Port": 44037},
{"Proto": "peerapi4", "Port": 42394},
{"Proto": "peerapi6", "Port": 42394},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T16:48:22.203886319Z",
"Created": "2026-10-30T16:43:53.092315378Z",
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-admin": null,
"https://tailscale.com/cap/ssh": null,
@@ -5420,6 +5508,7 @@
"ComputedNameWithHost": "venusaur"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-admin",
"https://tailscale.com/cap/ssh",
@@ -5430,8 +5519,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:235fb2dc160fc1155de1ec831ad32bee50196658e8ffd2bae95c30869c8c8a22",
"MachineKey": "mkey:5ad04e3a01eb83fc7dcc454e770a07f5b37416e2125dc7e06f8636a400066108",
"NodeKey": "nodekey:7b975c8f02395507734b8b439d9fcf0d0b2ee9153590af20455746698ed5844f",
"MachineKey": "mkey:3a18afbaf4af90147fd0638efd28d3f4439a36e1b5a865ace8939ec6417a9653",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -6263,41 +6352,47 @@
"DisplayName": "freya"
}}
}}, "weedle": {"packet_filter_rules": [{
"SrcIPs": ["100.108.74.26", "100.80.29.12", "fd7a:115c:a1e0::a437:1d0c"],
"SrcIPs": ["100.108.74.26", "100.64.0.16", "fd7a:115c:a1e0::10"],
"DstPorts": [
{"IP": "100.113.99.59", "Ports": {"First": 22, "Last": 22}},
{"IP": "fd7a:115c:a1e0::d437:633b", "Ports": {"First": 22, "Last": 22}}
{"IP": "100.64.0.14", "Ports": {"First": 22, "Last": 22}},
{"IP": "fd7a:115c:a1e0::e", "Ports": {"First": 22, "Last": 22}}
]
}], "packet_filter_matches": [{
"IPProto": [6, 17, 1, 58],
"Srcs": ["100.108.74.26/32", "100.80.29.12/32", "fd7a:115c:a1e0::a437:1d0c/128"],
"Srcs": ["100.108.74.26/32", "100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
"SrcCaps": null,
"Dsts": [
{"Net": "100.113.99.59/32", "Ports": {"First": 22, "Last": 22}},
{"Net": "fd7a:115c:a1e0::d437:633b/128", "Ports": {"First": 22, "Last": 22}}
{"Net": "100.64.0.14/32", "Ports": {"First": 22, "Last": 22}},
{"Net": "fd7a:115c:a1e0::e/128", "Ports": {"First": 22, "Last": 22}}
],
"Caps": []
}], "netmap": {
"Cached": false,
"SelfNode": {
"ID": 2152932371307925,
"StableID": "n6RMHCt4pH11CNTRL",
"ID": 7230601973781157,
"StableID": "nvKcPsekTy11CNTRL",
"Name": "weedle.tail78f774.ts.net.",
"User": 2152932371307925,
"Key": "nodekey:6f07d3a6f212d12efee97530c9bf14515e88f568675ac60e848ecedcd431633a",
"DiscoKey": "discokey:d896cd87fde4ed18070a8874a272b0995fc343983bfbf6872fe9f1a12f415e7a",
"Addresses": ["100.113.99.59/32", "fd7a:115c:a1e0::d437:633b/128"],
"AllowedIPs": ["100.113.99.59/32", "fd7a:115c:a1e0::d437:633b/128"],
"Endpoints": ["77.164.248.136:46503", "10.65.0.27:46503", "172.17.0.1:46503"],
"User": 7230601973781157,
"Key": "nodekey:adfc52081bad07c3367e54500c9a488d4255736e5bc9acd9f29070d02b90c318",
"DiscoKey": "discokey:515517e25a22199fb380447f0641804ab329f766167ed563ce562b19951c6872",
"Addresses": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"Endpoints": [
"192.0.2.1:36004",
"198.51.100.1:36004",
"198.51.100.2:36004",
"198.51.100.3:36004"
],
"Hostinfo": {"Hostname": "weedle", "RequestTags": ["tag:client"], "Services": [
{"Proto": "peerapi4", "Port": 35381},
{"Proto": "peerapi6", "Port": 35381},
{"Proto": "peerapi4", "Port": 63957},
{"Proto": "peerapi6", "Port": 63957},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T16:48:20.069747099Z",
"Created": "2026-10-30T16:43:50.666170957Z",
"Tags": ["tag:client"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -6312,6 +6407,7 @@
"ComputedNameWithHost": "weedle"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -6322,24 +6418,30 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:6f07d3a6f212d12efee97530c9bf14515e88f568675ac60e848ecedcd431633a",
"MachineKey": "mkey:c7e4def09e5ffc28920bf23b3f0d2b236652c3f98ad2de810ce8ec22436d841a",
"NodeKey": "nodekey:adfc52081bad07c3367e54500c9a488d4255736e5bc9acd9f29070d02b90c318",
"MachineKey": "mkey:b6565793c2d9982014e2ea05769cfec76686a46d90ceb136d18b31332453a152",
"Peers": [{
"ID": 7762688997820152,
"StableID": "noa9fFgjc321CNTRL",
"ID": 7266514963577010,
"StableID": "nmrYKX22ky11CNTRL",
"Name": "beedrill.tail78f774.ts.net.",
"User": 1260082990019555,
"Key": "nodekey:26e02375d645fcd0867b5f4d917df353f6af732f16ec1d162139415aa4101d0b",
"DiscoKey": "discokey:1c2d12ebf98f7bd7c37ce9ba5b1003d97262dbf606bbee514a8dbf9d69094b37",
"Addresses": ["100.80.29.12/32", "fd7a:115c:a1e0::a437:1d0c/128"],
"AllowedIPs": ["100.80.29.12/32", "fd7a:115c:a1e0::a437:1d0c/128"],
"HomeDERP": 4,
"Key": "nodekey:48cdd7ed8b95440e93f41d4bf5b4f76d55594f2fa7d83f1bce36a67c42345115",
"DiscoKey": "discokey:49e9005a1c9224769c3243c2dc9ce2ea9537a023e175fc0d92238e0574928951",
"Addresses": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
"Endpoints": [
"192.0.2.1:46785",
"198.51.100.1:46785",
"198.51.100.2:46785",
"198.51.100.3:46785"
],
"HomeDERP": 14,
"Hostinfo": {"OS": "linux", "Hostname": "beedrill", "Services": [
{"Proto": "peerapi4", "Port": 55189},
{"Proto": "peerapi6", "Port": 55189}
{"Proto": "peerapi4", "Port": 50358},
{"Proto": "peerapi6", "Port": 50358}
]},
"Created": "2026-04-10T16:48:21.125369798Z",
"Cap": 131,
"Created": "2026-10-30T16:43:51.974076899Z",
"Cap": 142,
"Tags": ["tag:server"],
"Online": true,
"ComputedName": "beedrill",
@@ -6348,19 +6450,19 @@
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [{
"IPProto": [6, 17, 1, 58],
"Srcs": ["100.108.74.26/32", "100.80.29.12/32", "fd7a:115c:a1e0::a437:1d0c/128"],
"Srcs": ["100.108.74.26/32", "100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
"SrcCaps": null,
"Dsts": [
{"Net": "100.113.99.59/32", "Ports": {"First": 22, "Last": 22}},
{"Net": "fd7a:115c:a1e0::d437:633b/128", "Ports": {"First": 22, "Last": 22}}
{"Net": "100.64.0.14/32", "Ports": {"First": 22, "Last": 22}},
{"Net": "fd7a:115c:a1e0::e/128", "Ports": {"First": 22, "Last": 22}}
],
"Caps": []
}],
"PacketFilterRules": [{
"SrcIPs": ["100.108.74.26", "100.80.29.12", "fd7a:115c:a1e0::a437:1d0c"],
"SrcIPs": ["100.108.74.26", "100.64.0.16", "fd7a:115c:a1e0::10"],
"DstPorts": [
{"IP": "100.113.99.59", "Ports": {"First": 22, "Last": 22}},
{"IP": "fd7a:115c:a1e0::d437:633b", "Ports": {"First": 22, "Last": 22}}
{"IP": "100.64.0.14", "Ports": {"First": 22, "Last": 22}},
{"IP": "fd7a:115c:a1e0::e", "Ports": {"First": 22, "Last": 22}}
]
}],
"SSHPolicy": {"rules": []},
@@ -7188,8 +7290,8 @@
"ID": 1260082990019555,
"LoginName": "tagged-devices",
"DisplayName": "Tagged Devices"
}, "2152932371307925": {
"ID": 2152932371307925,
}, "7230601973781157": {
"ID": 7230601973781157,
"LoginName": "weedle.tail78f774.ts.net",
"DisplayName": "weedle"
}}
hscontrol/policy/v2/testdata/acl_results/acl-rs07.hujson
Generated Vendored
+1169 -172
View File
File diff suppressed because it is too large. Load diff
hscontrol/policy/v2/testdata/acl_results/acl-t10.hujson
Generated Vendored
+244 -151
View File
@@ -3,26 +3,56 @@
// acl t10
//
// Nodes with filter rules: 1 of 8
// Captured at: 2026-04-10T17:11:26Z
// tscap version: tscap/dev
// Captured at: 2026-10-30T16:44:29Z
// tool version: tscap/5f80ee6150559e777612549d896d444b50768737
// schema version: 1
{
"schema_version": 1,
"test_id": "acl-t10",
"description": "acl t10",
"category": "acl",
"captured_at": "2026-04-10T17:11:26.000846409Z",
"tool_version": "tscap/dev",
"captured_at": "2026-10-30T16:44:29.808914082Z",
"tool_version": "tscap/5f80ee6150559e777612549d896d444b50768737",
"client_version": "1.102.5-ERR-BuildInfo capver 142",
"tailnet": "odin@example.com",
"input": {
"full_policy": "{\"acls\":[{\"action\":\"accept\",\"dst\":[\"tag:server:22\"],\"src\":[\"100.83.200.69\"]}],\"autoApprovers\":{\"routes\":{\"0.0.0.0/0\":[\"tag:exit\"],\"10.33.0.0/16\":[\"tag:router\"],\"::/0\":[\"tag:exit\"]}},\"groups\":{\"group:admins\":[\"odin@example.com\"],\"group:developers\":[\"thor@example.org\",\"odin@example.com\"],\"group:empty\":[],\"group:monitors\":[\"freya@example.com\"]},\"hosts\":{\"internal\":\"10.0.0.0/8\",\"prodbox\":\"100.103.8.15\",\"subnet24\":\"192.168.1.0/24\",\"webserver\":\"100.108.74.26\"},\"tagOwners\":{\"tag:client\":[\"odin@example.com\"],\"tag:exit\":[\"odin@example.com\"],\"tag:pidgey\":[\"odin@example.com\"],\"tag:pidgeotto\":[\"odin@example.com\"],\"tag:group-a\":[\"odin@example.com\"],\"tag:group-b\":[\"odin@example.com\"],\"tag:ha\":[\"odin@example.com\"],\"tag:prod\":[\"odin@example.com\"],\"tag:router\":[\"odin@example.com\"],\"tag:spearow\":[\"odin@example.com\"],\"tag:fearow\":[\"odin@example.com\"],\"tag:server\":[\"odin@example.com\"]}}",
"api_response_code": 200,
"tailnet": {
"dns": {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
"settings": {}
},
"scenario_hujson": " \n{\n\t\"category\": \"acl\",\n\t\"description\": \"acl t10\",\n\t\"id\": \"acl-t10\",\n\t\"policy\": {\"acls\": [\n\t\t{\"action\": \"accept\", \"dst\": [\"tag:server:22\"], \"src\": [\"100.83.200.69\"]}\n\t], \"autoApprovers\": {\"routes\": {\n\t\t\"0.0.0.0/0\": [\"tag:exit\"],\n\t\t\"10.33.0.0/16\": [\"tag:router\"],\n\t\t\"::/0\": [\"tag:exit\"]\n\t}}, \"groups\": {\n\t\t\"group:admins\": [\"odin@example.com\"],\n\t\t\"group:developers\": [\"thor@example.org\", \"odin@example.com\"],\n\t\t\"group:empty\": [],\n\t\t\"group:monitors\": [\"freya@example.com\"]\n\t}, \"hosts\": {\n\t\t\"internal\": \"10.0.0.0/8\",\n\t\t\"prodbox\": \"100.103.8.15\",\n\t\t\"subnet24\": \"192.168.1.0/24\",\n\t\t\"webserver\": \"100.108.74.26\"\n\t}, \"tagOwners\": {\n\t\t\"tag:client\": [\"odin@example.com\"],\n\t\t\"tag:exit\": [\"odin@example.com\"],\n\t\t\"tag:pidgey\": [\"odin@example.com\"],\n\t\t\"tag:pidgeotto\": [\"odin@example.com\"],\n\t\t\"tag:group-a\": [\"odin@example.com\"],\n\t\t\"tag:group-b\": [\"odin@example.com\"],\n\t\t\"tag:ha\": [\"odin@example.com\"],\n\t\t\"tag:prod\": [\"odin@example.com\"],\n\t\t\"tag:router\": [\"odin@example.com\"],\n\t\t\"tag:spearow\": [\"odin@example.com\"],\n\t\t\"tag:fearow\": [\"odin@example.com\"],\n\t\t\"tag:server\": [\"odin@example.com\"]\n\t}},\n\t\"tailnet\": {\n\t\t\"dns\": {\"magic_dns\": false, \"nameservers\": [], \"search_paths\": [], \"split_dns\": {}},\n\t\t\"settings\": {}\n\t},\n\t\"topology\": \"../_topologies/acl.hujson\"\n}\n",
"scenario_path": "scenarios/acl/acl-t10.hujson"
"scenario_path": "scenarios/acl/acl-t10.hujson",
"full_policy": {"acls": [
{"action": "accept", "dst": ["tag:server:22"], "src": ["100.83.200.69"]}
], "autoApprovers": {"routes": {
"0.0.0.0/0": ["tag:exit"],
"10.33.0.0/16": ["tag:router"],
"::/0": ["tag:exit"]
}}, "groups": {
"group:admins": ["odin@example.com"],
"group:developers": ["thor@example.org", "odin@example.com"],
"group:empty": [],
"group:monitors": ["freya@example.com"]
}, "hosts": {
"internal": "10.0.0.0/8",
"prodbox": "100.103.8.15",
"subnet24": "192.168.1.0/24",
"webserver": "100.108.74.26"
}, "tagOwners": {
"tag:client": ["odin@example.com"],
"tag:exit": ["odin@example.com"],
"tag:pidgey": ["odin@example.com"],
"tag:pidgeotto": ["odin@example.com"],
"tag:group-a": ["odin@example.com"],
"tag:group-b": ["odin@example.com"],
"tag:ha": ["odin@example.com"],
"tag:prod": ["odin@example.com"],
"tag:router": ["odin@example.com"],
"tag:spearow": ["odin@example.com"],
"tag:fearow": ["odin@example.com"],
"tag:server": ["odin@example.com"]
}}
},
"topology": {"users": [
{"id": 1, "name": "odin", "email": "odin@example.com"},
@@ -31,97 +61,103 @@
], "nodes": {"beedrill": {
"hostname": "beedrill",
"tags": ["tag:server"],
"ipv4": "100.69.82.73",
"ipv6": "fd7a:115c:a1e0::b437:5249",
"ipv4": "100.64.0.16",
"ipv6": "fd7a:115c:a1e0::10",
"routable_ips": [],
"approved_routes": []
}, "bulbasaur": {
"hostname": "bulbasaur",
"tags": [],
"ipv4": "100.123.164.81",
"ipv6": "fd7a:115c:a1e0::9b37:a451",
"ipv4": "100.64.0.19",
"ipv6": "fd7a:115c:a1e0::13",
"user": "odin",
"routable_ips": [],
"approved_routes": []
}, "charmander": {
"hostname": "charmander",
"tags": ["tag:exit"],
"ipv4": "100.108.238.11",
"ipv6": "fd7a:115c:a1e0::2e37:ee0b",
"ipv4": "100.64.0.4",
"ipv6": "fd7a:115c:a1e0::4",
"routable_ips": ["0.0.0.0/0", "::/0"],
"approved_routes": []
}, "ivysaur": {
"hostname": "ivysaur",
"tags": [],
"ipv4": "100.87.230.88",
"ipv6": "fd7a:115c:a1e0::d937:e658",
"ipv4": "100.64.0.17",
"ipv6": "fd7a:115c:a1e0::11",
"user": "thor",
"routable_ips": [],
"approved_routes": []
}, "kakuna": {
"hostname": "kakuna",
"tags": ["tag:prod"],
"ipv4": "100.82.149.106",
"ipv6": "fd7a:115c:a1e0::aa37:956a",
"ipv4": "100.64.0.15",
"ipv6": "fd7a:115c:a1e0::f",
"routable_ips": [],
"approved_routes": []
}, "squirtle": {
"hostname": "squirtle",
"tags": ["tag:router"],
"ipv4": "100.107.108.4",
"ipv6": "fd7a:115c:a1e0::fa37:6c05",
"ipv4": "100.64.0.13",
"ipv6": "fd7a:115c:a1e0::d",
"routable_ips": ["10.33.0.0/16"],
"approved_routes": []
"approved_routes": ["10.33.0.0/16"]
}, "venusaur": {
"hostname": "venusaur",
"tags": [],
"ipv4": "100.106.166.65",
"ipv6": "fd7a:115c:a1e0::6837:a641",
"ipv4": "100.64.0.18",
"ipv6": "fd7a:115c:a1e0::12",
"user": "freya",
"routable_ips": [],
"approved_routes": []
}, "weedle": {
"hostname": "weedle",
"tags": ["tag:client"],
"ipv4": "100.109.76.17",
"ipv6": "fd7a:115c:a1e0::d737:4c11",
"ipv4": "100.64.0.14",
"ipv6": "fd7a:115c:a1e0::e",
"routable_ips": [],
"approved_routes": []
}}},
"captures": {
"beedrill": {"packet_filter_rules": [{"SrcIPs": ["100.83.200.69"], "DstPorts": [
{"IP": "100.69.82.73", "Ports": {"First": 22, "Last": 22}},
{"IP": "fd7a:115c:a1e0::b437:5249", "Ports": {"First": 22, "Last": 22}}
{"IP": "100.64.0.16", "Ports": {"First": 22, "Last": 22}},
{"IP": "fd7a:115c:a1e0::10", "Ports": {"First": 22, "Last": 22}}
]}], "packet_filter_matches": [{
"IPProto": [6, 17, 1, 58],
"Srcs": ["100.83.200.69/32"],
"SrcCaps": null,
"Dsts": [
{"Net": "100.69.82.73/32", "Ports": {"First": 22, "Last": 22}},
{"Net": "fd7a:115c:a1e0::b437:5249/128", "Ports": {"First": 22, "Last": 22}}
{"Net": "100.64.0.16/32", "Ports": {"First": 22, "Last": 22}},
{"Net": "fd7a:115c:a1e0::10/128", "Ports": {"First": 22, "Last": 22}}
],
"Caps": []
}], "netmap": {
"Cached": false,
"SelfNode": {
"ID": 2321500341757516,
"StableID": "nVBcbtsQ8K11CNTRL",
"ID": 5914125694146678,
"StableID": "nHpwc64XBo11CNTRL",
"Name": "beedrill.tail78f774.ts.net.",
"User": 2321500341757516,
"Key": "nodekey:f0dd5ae8a3ce77d256a51b41035a2b7b189cef0e39704c4eb76730ceb4c55248",
"DiscoKey": "discokey:b85703102bd65de855a44e432dc7acdebe1789feb58b06c6806301e4ffae1c2c",
"Addresses": ["100.69.82.73/32", "fd7a:115c:a1e0::b437:5249/128"],
"AllowedIPs": ["100.69.82.73/32", "fd7a:115c:a1e0::b437:5249/128"],
"Endpoints": ["77.164.248.136:41635", "10.65.0.27:41635", "172.17.0.1:41635"],
"User": 5914125694146678,
"Key": "nodekey:845d5a4d7d74c3a153bf476f87c523298bf8cb6f66b88e6529c2a80cf709444f",
"DiscoKey": "discokey:437de18f03da05b1b381c7fcfefb01c70fa145b441c2f48e641f16664cdf702f",
"Addresses": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
"Endpoints": [
"192.0.2.1:53960",
"198.51.100.1:53960",
"198.51.100.2:53960",
"198.51.100.3:53960"
],
"Hostinfo": {"Hostname": "beedrill", "RequestTags": ["tag:server"], "Services": [
{"Proto": "peerapi4", "Port": 53467},
{"Proto": "peerapi6", "Port": 53467},
{"Proto": "peerapi4", "Port": 50358},
{"Proto": "peerapi6", "Port": 50358},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T17:11:30.060766321Z",
"Created": "2026-10-30T16:44:33.416823417Z",
"Tags": ["tag:server"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -136,6 +172,7 @@
"ComputedNameWithHost": "beedrill"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -146,8 +183,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:f0dd5ae8a3ce77d256a51b41035a2b7b189cef0e39704c4eb76730ceb4c55248",
"MachineKey": "mkey:e286cf5eaee0b0092bd1054e26550c389030cfb8a3b9c83e9a4ca7a9bbadd369",
"NodeKey": "nodekey:845d5a4d7d74c3a153bf476f87c523298bf8cb6f66b88e6529c2a80cf709444f",
"MachineKey": "mkey:7cf7cfaf069f1ebfe889d0b0f052a50404db3e9cb2eacf5f5e85aa84ba5f0308",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [{
@@ -155,14 +192,14 @@
"Srcs": ["100.83.200.69/32"],
"SrcCaps": null,
"Dsts": [
{"Net": "100.69.82.73/32", "Ports": {"First": 22, "Last": 22}},
{"Net": "fd7a:115c:a1e0::b437:5249/128", "Ports": {"First": 22, "Last": 22}}
{"Net": "100.64.0.16/32", "Ports": {"First": 22, "Last": 22}},
{"Net": "fd7a:115c:a1e0::10/128", "Ports": {"First": 22, "Last": 22}}
],
"Caps": []
}],
"PacketFilterRules": [{"SrcIPs": ["100.83.200.69"], "DstPorts": [
{"IP": "100.69.82.73", "Ports": {"First": 22, "Last": 22}},
{"IP": "fd7a:115c:a1e0::b437:5249", "Ports": {"First": 22, "Last": 22}}
{"IP": "100.64.0.16", "Ports": {"First": 22, "Last": 22}},
{"IP": "fd7a:115c:a1e0::10", "Ports": {"First": 22, "Last": 22}}
]}],
"SSHPolicy": {"rules": []},
"CollectServices": false,
@@ -985,8 +1022,8 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {"2321500341757516": {
"ID": 2321500341757516,
"UserProfiles": {"5914125694146678": {
"ID": 5914125694146678,
"LoginName": "beedrill.tail78f774.ts.net",
"DisplayName": "beedrill"
}}
@@ -994,24 +1031,30 @@
"bulbasaur": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 5887336339932283,
"StableID": "nixA8sLPyn11CNTRL",
"ID": 7033485691210551,
"StableID": "nzEYV4kUvw11CNTRL",
"Name": "bulbasaur.tail78f774.ts.net.",
"User": 4156223528223174,
"Key": "nodekey:e4934b1528573752a749dbca8b4729d57d5986cb28907370d9e22e369bbba450",
"KeyExpiry": "2026-10-07T17:11:31Z",
"DiscoKey": "discokey:4b09899510381572faf276c01a425ff4cd2136ac424109426088d7d2adcd5d03",
"Addresses": ["100.123.164.81/32", "fd7a:115c:a1e0::9b37:a451/128"],
"AllowedIPs": ["100.123.164.81/32", "fd7a:115c:a1e0::9b37:a451/128"],
"Endpoints": ["77.164.248.136:44152", "10.65.0.27:44152", "172.17.0.1:44152"],
"Key": "nodekey:bbc886825dc9b2ac7ac5caab3f2c7f826b6aa8d990e9c58afd240b8984c6b938",
"KeyExpiry": "2027-04-28T16:44:35Z",
"DiscoKey": "discokey:4513a105cc69af76d5225d9fda53bc7bc9282ac427fef057965d09ff3a61bb3e",
"Addresses": ["100.64.0.19/32", "fd7a:115c:a1e0::13/128"],
"AllowedIPs": ["100.64.0.19/32", "fd7a:115c:a1e0::13/128"],
"Endpoints": [
"192.0.2.1:36990",
"198.51.100.1:36990",
"198.51.100.2:36990",
"198.51.100.3:36990"
],
"Hostinfo": {"Hostname": "bulbasaur", "Services": [
{"Proto": "peerapi4", "Port": 50732},
{"Proto": "peerapi6", "Port": 50732},
{"Proto": "peerapi4", "Port": 38156},
{"Proto": "peerapi6", "Port": 38156},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T17:11:31.945018614Z",
"Created": "2026-10-30T16:44:35.071683802Z",
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-admin": null,
"https://tailscale.com/cap/is-owner": null,
@@ -1027,6 +1070,7 @@
"ComputedNameWithHost": "bulbasaur"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-admin",
"https://tailscale.com/cap/is-owner",
@@ -1038,8 +1082,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:e4934b1528573752a749dbca8b4729d57d5986cb28907370d9e22e369bbba450",
"MachineKey": "mkey:47c33860792945c835355f1daaf81cc121ac83fd968471135ffd7014fae22a79",
"NodeKey": "nodekey:bbc886825dc9b2ac7ac5caab3f2c7f826b6aa8d990e9c58afd240b8984c6b938",
"MachineKey": "mkey:a8d3b06b76dd7c7a9e6501ae9b41fe07d16fd58d273282c7e96ce213fda5d168",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -1874,24 +1918,35 @@
"charmander": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 5486618592372431,
"StableID": "nJ6zxfAuqj11CNTRL",
"ID": 894089535426787,
"StableID": "nEkdaXDwy711CNTRL",
"Name": "charmander.tail78f774.ts.net.",
"User": 5486618592372431,
"Key": "nodekey:e99ad82e10eb29e2ca072b3b6c93e179052600a9f69af84bd14472a82eecee0a",
"DiscoKey": "discokey:44933301712ce7b5eb12045c0a98637e1cf16a7171ea630183d7d7465a8e6320",
"Addresses": ["100.108.238.11/32", "fd7a:115c:a1e0::2e37:ee0b/128"],
"AllowedIPs": ["100.108.238.11/32", "fd7a:115c:a1e0::2e37:ee0b/128"],
"Endpoints": ["77.164.248.136:52166", "10.65.0.27:52166", "172.17.0.1:52166"],
"Hostinfo": {"Hostname": "charmander", "RequestTags": ["tag:exit"], "Services": [
{"Proto": "peerapi4", "Port": 60604},
{"Proto": "peerapi6", "Port": 60604},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T17:11:27.95983298Z",
"User": 894089535426787,
"Key": "nodekey:a1bbdabb6823cb9748e204afda920be281a3ad0eb1978bc4a1ba4a24b1e62d34",
"DiscoKey": "discokey:f5699f4d5bd26ac78b510bc9be296c788da7697e7240ca6e5757c634caeb664f",
"Addresses": ["100.64.0.4/32", "fd7a:115c:a1e0::4/128"],
"AllowedIPs": ["100.64.0.4/32", "fd7a:115c:a1e0::4/128"],
"Endpoints": [
"192.0.2.1:48969",
"198.51.100.1:48969",
"198.51.100.2:48969",
"198.51.100.3:48969"
],
"Hostinfo": {
"Hostname": "charmander",
"RoutableIPs": ["0.0.0.0/0", "::/0"],
"RequestTags": ["tag:exit"],
"Services": [
{"Proto": "peerapi4", "Port": 37067},
{"Proto": "peerapi6", "Port": 37067},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]
},
"Created": "2026-10-30T16:44:31.282813078Z",
"Tags": ["tag:exit"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -1906,6 +1961,7 @@
"ComputedNameWithHost": "charmander"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -1916,8 +1972,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:e99ad82e10eb29e2ca072b3b6c93e179052600a9f69af84bd14472a82eecee0a",
"MachineKey": "mkey:367af9b41265e869654c8db8ba44528426de9780513ef21086a94f52017b4d7e",
"NodeKey": "nodekey:a1bbdabb6823cb9748e204afda920be281a3ad0eb1978bc4a1ba4a24b1e62d34",
"MachineKey": "mkey:b11c18d8bfa91289b573562b83bdd6bfbd403622537f249ce8ea116c662dcb64",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -2743,8 +2799,8 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {"5486618592372431": {
"ID": 5486618592372431,
"UserProfiles": {"894089535426787": {
"ID": 894089535426787,
"LoginName": "charmander.tail78f774.ts.net",
"DisplayName": "charmander"
}}
@@ -2752,24 +2808,30 @@
"ivysaur": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 8731601139103504,
"StableID": "nV3ZhdMZBB21CNTRL",
"ID": 1533759365600142,
"StableID": "nu4W2xFeyC11CNTRL",
"Name": "ivysaur.tail78f774.ts.net.",
"User": 4538565228176803,
"Key": "nodekey:36f3990f90be2dc6971e776b6bccf48eb967df4a33fa0a745cb5d9dcd997e657",
"KeyExpiry": "2026-10-07T17:11:30Z",
"DiscoKey": "discokey:ef42eeac9baee7aef89dadc334d02ba1f82aab6737af685012858bfb7f3d4851",
"Addresses": ["100.87.230.88/32", "fd7a:115c:a1e0::d937:e658/128"],
"AllowedIPs": ["100.87.230.88/32", "fd7a:115c:a1e0::d937:e658/128"],
"Endpoints": ["77.164.248.136:51420", "10.65.0.27:51420", "172.17.0.1:51420"],
"Key": "nodekey:78530a31169a6eb60ec9aeae09d4af2bf828f50ffb6d727ab7dfbf169e705f3b",
"KeyExpiry": "2027-04-28T16:44:33Z",
"DiscoKey": "discokey:92743afde5a911515368ab78ea8b4181dcf6820918e22e932e9207717d527f38",
"Addresses": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
"Endpoints": [
"192.0.2.1:41432",
"198.51.100.1:41432",
"198.51.100.2:41432",
"198.51.100.3:41432"
],
"Hostinfo": {"Hostname": "ivysaur", "Services": [
{"Proto": "peerapi4", "Port": 60555},
{"Proto": "peerapi6", "Port": 60555},
{"Proto": "peerapi4", "Port": 62496},
{"Proto": "peerapi6", "Port": 62496},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T17:11:30.621147152Z",
"Created": "2026-10-30T16:44:33.936941968Z",
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-admin": null,
"https://tailscale.com/cap/ssh": null,
@@ -2784,6 +2846,7 @@
"ComputedNameWithHost": "ivysaur"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-admin",
"https://tailscale.com/cap/ssh",
@@ -2794,8 +2857,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:36f3990f90be2dc6971e776b6bccf48eb967df4a33fa0a745cb5d9dcd997e657",
"MachineKey": "mkey:db64ac3e061951dfd67f566facaef91cfe0fe58227e550dddeb891d8415d161f",
"NodeKey": "nodekey:78530a31169a6eb60ec9aeae09d4af2bf828f50ffb6d727ab7dfbf169e705f3b",
"MachineKey": "mkey:d6ebf6a0c207738121302e291efb181c5a66a08afd8fe3cb541dfa915aa95173",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -3621,31 +3684,39 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {
"4538565228176803": {"ID": 4538565228176803, "LoginName": "thor@example.org", "DisplayName": "thor"}
}
"UserProfiles": {"4538565228176803": {
"ID": 4538565228176803,
"LoginName": "thor@example.org",
"DisplayName": "thor"
}}
}},
"kakuna": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 3673895382522975,
"StableID": "n26pH71vgV11CNTRL",
"ID": 4340892712851067,
"StableID": "n2c4Mftzta11CNTRL",
"Name": "kakuna.tail78f774.ts.net.",
"User": 3673895382522975,
"Key": "nodekey:4cec980c62bfe66614cf1786f206ff32757ae9853db2c4c75f208c05aad29569",
"DiscoKey": "discokey:91cc3f59e6389cba5ebc6f301b4484573546c905bd4bb5d199e0b5dd9ee6d63b",
"Addresses": ["100.82.149.106/32", "fd7a:115c:a1e0::aa37:956a/128"],
"AllowedIPs": ["100.82.149.106/32", "fd7a:115c:a1e0::aa37:956a/128"],
"Endpoints": ["77.164.248.136:46745", "10.65.0.27:46745", "172.17.0.1:46745"],
"User": 4340892712851067,
"Key": "nodekey:ad57c7ede3cd0a5c10a9855488b515c9ff3b2524589ad90d622d6caa5f01686c",
"DiscoKey": "discokey:6899bd2df12945250c02cac3cc56655932490196cb24647bfd9192e33feb5a31",
"Addresses": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
"Endpoints": [
"192.0.2.1:36737",
"198.51.100.1:36737",
"198.51.100.2:36737",
"198.51.100.3:36737"
],
"Hostinfo": {"Hostname": "kakuna", "RequestTags": ["tag:prod"], "Services": [
{"Proto": "peerapi4", "Port": 54741},
{"Proto": "peerapi6", "Port": 54741},
{"Proto": "peerapi4", "Port": 51523},
{"Proto": "peerapi6", "Port": 51523},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T17:11:29.519156552Z",
"Created": "2026-10-30T16:44:32.857796787Z",
"Tags": ["tag:prod"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -3660,6 +3731,7 @@
"ComputedNameWithHost": "kakuna"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -3670,8 +3742,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:4cec980c62bfe66614cf1786f206ff32757ae9853db2c4c75f208c05aad29569",
"MachineKey": "mkey:703036b70b3784c645c5c597166f9b160af26f6fbbe8c2c35e99fe90dc1e3944",
"NodeKey": "nodekey:ad57c7ede3cd0a5c10a9855488b515c9ff3b2524589ad90d622d6caa5f01686c",
"MachineKey": "mkey:2b6b3d88491bb52c930896543dc1448e21a3f7a7a5ebd637207a4c06dfc1fe50",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -4497,8 +4569,8 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {"3673895382522975": {
"ID": 3673895382522975,
"UserProfiles": {"4340892712851067": {
"ID": 4340892712851067,
"LoginName": "kakuna.tail78f774.ts.net",
"DisplayName": "kakuna"
}}
@@ -4506,30 +4578,36 @@
"squirtle": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 8759522553693235,
"StableID": "nS6fVdoCQB21CNTRL",
"ID": 1012589109196657,
"StableID": "nkNc8wzbu811CNTRL",
"Name": "squirtle.tail78f774.ts.net.",
"User": 8759522553693235,
"Key": "nodekey:869dd40e99e2d7a5f7216a79a638e2c43c6cc61c106da3820f090de8fa2b6c03",
"DiscoKey": "discokey:a65c235d80b851cb0962ba08dcabe2b36d83a6529863609edfe3556621bf4b72",
"Addresses": ["100.107.108.4/32", "fd7a:115c:a1e0::fa37:6c05/128"],
"AllowedIPs": ["100.107.108.4/32", "fd7a:115c:a1e0::fa37:6c05/128", "10.33.0.0/16"],
"Endpoints": ["77.164.248.136:46007", "10.65.0.27:46007", "172.17.0.1:46007"],
"User": 1012589109196657,
"Key": "nodekey:3dcc6d52acae592a0bbdba0ea71cd38a30a7090c5c2f00b9f081bd361508f662",
"DiscoKey": "discokey:862fe14b5b063fb65121a854072d106f330932648d136881a630430d24fc0869",
"Addresses": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128", "10.33.0.0/16"],
"Endpoints": [
"192.0.2.1:44152",
"198.51.100.1:44152",
"198.51.100.2:44152",
"198.51.100.3:44152"
],
"Hostinfo": {
"Hostname": "squirtle",
"RoutableIPs": ["10.33.0.0/16"],
"RequestTags": ["tag:router"],
"Services": [
{"Proto": "peerapi4", "Port": 40289},
{"Proto": "peerapi6", "Port": 40289},
{"Proto": "peerapi4", "Port": 43119},
{"Proto": "peerapi6", "Port": 43119},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]
},
"Created": "2026-04-10T17:11:28.442842847Z",
"Created": "2026-10-30T16:44:31.81081423Z",
"Tags": ["tag:router"],
"PrimaryRoutes": ["10.33.0.0/16"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -4544,6 +4622,7 @@
"ComputedNameWithHost": "squirtle"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -4554,8 +4633,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:869dd40e99e2d7a5f7216a79a638e2c43c6cc61c106da3820f090de8fa2b6c03",
"MachineKey": "mkey:80ec2344df26009ce92429bfce81b1334f74ec9b5f41f3d6be5ca612a8a6fd04",
"NodeKey": "nodekey:3dcc6d52acae592a0bbdba0ea71cd38a30a7090c5c2f00b9f081bd361508f662",
"MachineKey": "mkey:e147c3485d1c7098daffe3571896626e22d848969e8f119de868f5b575cf1e11",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -5381,8 +5460,8 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {"8759522553693235": {
"ID": 8759522553693235,
"UserProfiles": {"1012589109196657": {
"ID": 1012589109196657,
"LoginName": "squirtle.tail78f774.ts.net",
"DisplayName": "squirtle"
}}
@@ -5390,24 +5469,30 @@
"venusaur": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 3283161152201954,
"StableID": "nfo3NR5xdS11CNTRL",
"ID": 7755434495074515,
"StableID": "nLPL6a7TZ321CNTRL",
"Name": "venusaur.tail78f774.ts.net.",
"User": 3982058329734709,
"Key": "nodekey:749edff43fa9d6d7716e36f6461fa0d2f03d3a4c7ec515aba2729f97686aa640",
"KeyExpiry": "2026-10-07T17:11:31Z",
"DiscoKey": "discokey:3f1acef350580da7eda17c622f3afbbf865d84dee98cbe86c5843e855d10d248",
"Addresses": ["100.106.166.65/32", "fd7a:115c:a1e0::6837:a641/128"],
"AllowedIPs": ["100.106.166.65/32", "fd7a:115c:a1e0::6837:a641/128"],
"Endpoints": ["77.164.248.136:34297", "10.65.0.27:34297", "172.17.0.1:34297"],
"Key": "nodekey:2a05f08796ff68844cffb933170b05014cee2d479ad86eeeb3fa7cf2dd945851",
"KeyExpiry": "2027-04-28T16:44:34Z",
"DiscoKey": "discokey:2533c8c51cd1ceeda0f428dd25f574b9a1f94e4b8fb953b861c359001428ec56",
"Addresses": ["100.64.0.18/32", "fd7a:115c:a1e0::12/128"],
"AllowedIPs": ["100.64.0.18/32", "fd7a:115c:a1e0::12/128"],
"Endpoints": [
"192.0.2.1:45487",
"198.51.100.1:45487",
"198.51.100.2:45487",
"198.51.100.3:45487"
],
"Hostinfo": {"Hostname": "venusaur", "Services": [
{"Proto": "peerapi4", "Port": 64909},
{"Proto": "peerapi6", "Port": 64909},
{"Proto": "peerapi4", "Port": 42394},
{"Proto": "peerapi6", "Port": 42394},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T17:11:31.148005593Z",
"Created": "2026-10-30T16:44:34.485483019Z",
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-admin": null,
"https://tailscale.com/cap/ssh": null,
@@ -5422,6 +5507,7 @@
"ComputedNameWithHost": "venusaur"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-admin",
"https://tailscale.com/cap/ssh",
@@ -5432,8 +5518,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:749edff43fa9d6d7716e36f6461fa0d2f03d3a4c7ec515aba2729f97686aa640",
"MachineKey": "mkey:b76d1444e390f95fcc62b4a401e899fefc1da9bb507222464e7e65e51a75e458",
"NodeKey": "nodekey:2a05f08796ff68844cffb933170b05014cee2d479ad86eeeb3fa7cf2dd945851",
"MachineKey": "mkey:d9d2f3191f69757e77b7b325b6fee6f6838477c9efca21e2ba1e55d6672c0b27",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -6268,24 +6354,30 @@
"weedle": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 4174011038124477,
"StableID": "nJdAD9CRbZ11CNTRL",
"ID": 2511387908118956,
"StableID": "nMybbJuQcL11CNTRL",
"Name": "weedle.tail78f774.ts.net.",
"User": 4174011038124477,
"Key": "nodekey:706820f81586246a02bcbc6346e741d6d5cccb2ac0c7d3c2ca79bb02d72d4c10",
"DiscoKey": "discokey:0530ddeae0524bd1da610727798c3dabad48f8ef28e85e3a18285db41d87be57",
"Addresses": ["100.109.76.17/32", "fd7a:115c:a1e0::d737:4c11/128"],
"AllowedIPs": ["100.109.76.17/32", "fd7a:115c:a1e0::d737:4c11/128"],
"Endpoints": ["77.164.248.136:38520", "10.65.0.27:38520", "172.17.0.1:38520"],
"User": 2511387908118956,
"Key": "nodekey:7331627cbbc5a62fdd1a88e71fe30a19f6e7d6079b92d67d956d667c0fe3fb3e",
"DiscoKey": "discokey:cce388e4006d7af50d7c3fa3a87f777a55ed3e1b5e1ff59224ba26f103e2b724",
"Addresses": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"Endpoints": [
"192.0.2.1:44458",
"198.51.100.1:44458",
"198.51.100.2:44458",
"198.51.100.3:44458"
],
"Hostinfo": {"Hostname": "weedle", "RequestTags": ["tag:client"], "Services": [
{"Proto": "peerapi4", "Port": 41370},
{"Proto": "peerapi6", "Port": 41370},
{"Proto": "peerapi4", "Port": 63957},
{"Proto": "peerapi6", "Port": 63957},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T17:11:28.985342917Z",
"Created": "2026-10-30T16:44:32.347128085Z",
"Tags": ["tag:client"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -6300,6 +6392,7 @@
"ComputedNameWithHost": "weedle"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -6310,8 +6403,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:706820f81586246a02bcbc6346e741d6d5cccb2ac0c7d3c2ca79bb02d72d4c10",
"MachineKey": "mkey:2b1e052da4eb2b62f7614be64e641f65875fd996576def050f781d4ba9c45d6a",
"NodeKey": "nodekey:7331627cbbc5a62fdd1a88e71fe30a19f6e7d6079b92d67d956d667c0fe3fb3e",
"MachineKey": "mkey:124772d93be233d2d9fc49fe5138b0c9da3607107669c7f321cd45c99acca030",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -7137,8 +7230,8 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {"4174011038124477": {
"ID": 4174011038124477,
"UserProfiles": {"2511387908118956": {
"ID": 2511387908118956,
"LoginName": "weedle.tail78f774.ts.net",
"DisplayName": "weedle"
}}
hscontrol/policy/v2/testdata/acl_results/acl-u11.hujson
Generated Vendored
+333 -227
View File
@@ -3,26 +3,58 @@
// acl u11
//
// Nodes with filter rules: 1 of 8
// Captured at: 2026-04-10T17:17:55Z
// tscap version: tscap/dev
// Captured at: 2026-10-30T16:45:11Z
// tool version: tscap/5f80ee6150559e777612549d896d444b50768737
// schema version: 1
{
"schema_version": 1,
"test_id": "acl-u11",
"description": "acl u11",
"category": "acl",
"captured_at": "2026-04-10T17:17:55.664977469Z",
"tool_version": "tscap/dev",
"captured_at": "2026-10-30T16:45:11.247157569Z",
"tool_version": "tscap/5f80ee6150559e777612549d896d444b50768737",
"client_version": "1.102.5-ERR-BuildInfo capver 142",
"tailnet": "odin@example.com",
"input": {
"full_policy": "{\"acls\":[{\"action\":\"accept\",\"dst\":[\"tag:server:22\"],\"src\":[\"odin@example.com\",\"tag:client\"]}],\"autoApprovers\":{\"routes\":{\"0.0.0.0/0\":[\"tag:exit\"],\"10.33.0.0/16\":[\"tag:router\"],\"::/0\":[\"tag:exit\"]}},\"groups\":{\"group:admins\":[\"odin@example.com\"],\"group:developers\":[\"thor@example.org\",\"odin@example.com\"],\"group:empty\":[],\"group:monitors\":[\"freya@example.com\"]},\"hosts\":{\"internal\":\"10.0.0.0/8\",\"prodbox\":\"100.103.8.15\",\"subnet24\":\"192.168.1.0/24\",\"webserver\":\"100.108.74.26\"},\"tagOwners\":{\"tag:client\":[\"odin@example.com\"],\"tag:exit\":[\"odin@example.com\"],\"tag:pidgey\":[\"odin@example.com\"],\"tag:pidgeotto\":[\"odin@example.com\"],\"tag:group-a\":[\"odin@example.com\"],\"tag:group-b\":[\"odin@example.com\"],\"tag:ha\":[\"odin@example.com\"],\"tag:prod\":[\"odin@example.com\"],\"tag:router\":[\"odin@example.com\"],\"tag:spearow\":[\"odin@example.com\"],\"tag:fearow\":[\"odin@example.com\"],\"tag:server\":[\"odin@example.com\"]}}",
"api_response_code": 200,
"tailnet": {
"dns": {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
"settings": {}
},
"scenario_hujson": " \n{\n\t\"category\": \"acl\",\n\t\"description\": \"acl u11\",\n\t\"id\": \"acl-u11\",\n\t\"policy\": {\"acls\": [{\n\t\t\"action\": \"accept\",\n\t\t\"dst\": [\"tag:server:22\"],\n\t\t\"src\": [\"odin@example.com\", \"tag:client\"]\n\t}], \"autoApprovers\": {\"routes\": {\n\t\t\"0.0.0.0/0\": [\"tag:exit\"],\n\t\t\"10.33.0.0/16\": [\"tag:router\"],\n\t\t\"::/0\": [\"tag:exit\"]\n\t}}, \"groups\": {\n\t\t\"group:admins\": [\"odin@example.com\"],\n\t\t\"group:developers\": [\"thor@example.org\", \"odin@example.com\"],\n\t\t\"group:empty\": [],\n\t\t\"group:monitors\": [\"freya@example.com\"]\n\t}, \"hosts\": {\n\t\t\"internal\": \"10.0.0.0/8\",\n\t\t\"prodbox\": \"100.103.8.15\",\n\t\t\"subnet24\": \"192.168.1.0/24\",\n\t\t\"webserver\": \"100.108.74.26\"\n\t}, \"tagOwners\": {\n\t\t\"tag:client\": [\"odin@example.com\"],\n\t\t\"tag:exit\": [\"odin@example.com\"],\n\t\t\"tag:pidgey\": [\"odin@example.com\"],\n\t\t\"tag:pidgeotto\": [\"odin@example.com\"],\n\t\t\"tag:group-a\": [\"odin@example.com\"],\n\t\t\"tag:group-b\": [\"odin@example.com\"],\n\t\t\"tag:ha\": [\"odin@example.com\"],\n\t\t\"tag:prod\": [\"odin@example.com\"],\n\t\t\"tag:router\": [\"odin@example.com\"],\n\t\t\"tag:spearow\": [\"odin@example.com\"],\n\t\t\"tag:fearow\": [\"odin@example.com\"],\n\t\t\"tag:server\": [\"odin@example.com\"]\n\t}},\n\t\"tailnet\": {\n\t\t\"dns\": {\"magic_dns\": false, \"nameservers\": [], \"search_paths\": [], \"split_dns\": {}},\n\t\t\"settings\": {}\n\t},\n\t\"topology\": \"../_topologies/acl.hujson\"\n}\n",
"scenario_path": "scenarios/acl/acl-u11.hujson"
"scenario_path": "scenarios/acl/acl-u11.hujson",
"full_policy": {"acls": [{
"action": "accept",
"dst": ["tag:server:22"],
"src": ["odin@example.com", "tag:client"]
}], "autoApprovers": {"routes": {
"0.0.0.0/0": ["tag:exit"],
"10.33.0.0/16": ["tag:router"],
"::/0": ["tag:exit"]
}}, "groups": {
"group:admins": ["odin@example.com"],
"group:developers": ["thor@example.org", "odin@example.com"],
"group:empty": [],
"group:monitors": ["freya@example.com"]
}, "hosts": {
"internal": "10.0.0.0/8",
"prodbox": "100.103.8.15",
"subnet24": "192.168.1.0/24",
"webserver": "100.108.74.26"
}, "tagOwners": {
"tag:client": ["odin@example.com"],
"tag:exit": ["odin@example.com"],
"tag:pidgey": ["odin@example.com"],
"tag:pidgeotto": ["odin@example.com"],
"tag:group-a": ["odin@example.com"],
"tag:group-b": ["odin@example.com"],
"tag:ha": ["odin@example.com"],
"tag:prod": ["odin@example.com"],
"tag:router": ["odin@example.com"],
"tag:spearow": ["odin@example.com"],
"tag:fearow": ["odin@example.com"],
"tag:server": ["odin@example.com"]
}}
},
"topology": {"users": [
{"id": 1, "name": "odin", "email": "odin@example.com"},
@@ -31,100 +63,104 @@
], "nodes": {"beedrill": {
"hostname": "beedrill",
"tags": ["tag:server"],
"ipv4": "100.106.64.89",
"ipv6": "fd7a:115c:a1e0::6037:4059",
"ipv4": "100.64.0.16",
"ipv6": "fd7a:115c:a1e0::10",
"routable_ips": [],
"approved_routes": []
}, "bulbasaur": {
"hostname": "bulbasaur",
"tags": [],
"ipv4": "100.83.101.101",
"ipv6": "fd7a:115c:a1e0::aa37:6565",
"ipv4": "100.64.0.19",
"ipv6": "fd7a:115c:a1e0::13",
"user": "odin",
"routable_ips": [],
"approved_routes": []
}, "charmander": {
"hostname": "charmander",
"tags": ["tag:exit"],
"ipv4": "100.68.112.30",
"ipv6": "fd7a:115c:a1e0::a337:701e",
"ipv4": "100.64.0.4",
"ipv6": "fd7a:115c:a1e0::4",
"routable_ips": ["0.0.0.0/0", "::/0"],
"approved_routes": []
}, "ivysaur": {
"hostname": "ivysaur",
"tags": [],
"ipv4": "100.100.75.77",
"ipv6": "fd7a:115c:a1e0::b837:4b4d",
"ipv4": "100.64.0.17",
"ipv6": "fd7a:115c:a1e0::11",
"user": "thor",
"routable_ips": [],
"approved_routes": []
}, "kakuna": {
"hostname": "kakuna",
"tags": ["tag:prod"],
"ipv4": "100.86.134.65",
"ipv6": "fd7a:115c:a1e0::337:8641",
"ipv4": "100.64.0.15",
"ipv6": "fd7a:115c:a1e0::f",
"routable_ips": [],
"approved_routes": []
}, "squirtle": {
"hostname": "squirtle",
"tags": ["tag:router"],
"ipv4": "100.107.152.68",
"ipv6": "fd7a:115c:a1e0::4637:9844",
"ipv4": "100.64.0.13",
"ipv6": "fd7a:115c:a1e0::d",
"routable_ips": ["10.33.0.0/16"],
"approved_routes": []
"approved_routes": ["10.33.0.0/16"]
}, "venusaur": {
"hostname": "venusaur",
"tags": [],
"ipv4": "100.108.18.32",
"ipv6": "fd7a:115c:a1e0::ef37:1220",
"ipv4": "100.64.0.18",
"ipv6": "fd7a:115c:a1e0::12",
"user": "freya",
"routable_ips": [],
"approved_routes": []
}, "weedle": {
"hostname": "weedle",
"tags": ["tag:client"],
"ipv4": "100.118.221.124",
"ipv6": "fd7a:115c:a1e0::a237:dd7c",
"ipv4": "100.64.0.14",
"ipv6": "fd7a:115c:a1e0::e",
"routable_ips": [],
"approved_routes": []
}}},
"captures": {"beedrill": {"packet_filter_rules": [{"SrcIPs": [
"100.118.221.124",
"100.83.101.101",
"fd7a:115c:a1e0::a237:dd7c",
"fd7a:115c:a1e0::aa37:6565"
], "DstPorts": [
{"IP": "100.106.64.89", "Ports": {"First": 22, "Last": 22}},
{"IP": "fd7a:115c:a1e0::6037:4059", "Ports": {"First": 22, "Last": 22}}
]}], "packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
"100.118.221.124/32",
"100.83.101.101/32",
"fd7a:115c:a1e0::a237:dd7c/128",
"fd7a:115c:a1e0::aa37:6565/128"
"captures": {"beedrill": {"packet_filter_rules": [{
"SrcIPs": ["100.64.0.14", "100.64.0.19", "fd7a:115c:a1e0::13", "fd7a:115c:a1e0::e"],
"DstPorts": [
{"IP": "100.64.0.16", "Ports": {"First": 22, "Last": 22}},
{"IP": "fd7a:115c:a1e0::10", "Ports": {"First": 22, "Last": 22}}
]
}], "packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
"100.64.0.14/32",
"100.64.0.19/32",
"fd7a:115c:a1e0::13/128",
"fd7a:115c:a1e0::e/128"
], "SrcCaps": null, "Dsts": [
{"Net": "100.106.64.89/32", "Ports": {"First": 22, "Last": 22}},
{"Net": "fd7a:115c:a1e0::6037:4059/128", "Ports": {"First": 22, "Last": 22}}
{"Net": "100.64.0.16/32", "Ports": {"First": 22, "Last": 22}},
{"Net": "fd7a:115c:a1e0::10/128", "Ports": {"First": 22, "Last": 22}}
], "Caps": []}], "netmap": {
"Cached": false,
"SelfNode": {
"ID": 4012249567431828,
"StableID": "n7iJyZz9LY11CNTRL",
"ID": 4084666557025682,
"StableID": "n3wvMKGxtY11CNTRL",
"Name": "beedrill.tail78f774.ts.net.",
"User": 4012249567431828,
"Key": "nodekey:94577fdaaaa7597c429e6f7bd188080513c60212649c34884d2b03ad60aa4058",
"DiscoKey": "discokey:1cbf3b48932dc27acd38fccc53273ddcc60903ff8628f1ed230d898fedf1771c",
"Addresses": ["100.106.64.89/32", "fd7a:115c:a1e0::6037:4059/128"],
"AllowedIPs": ["100.106.64.89/32", "fd7a:115c:a1e0::6037:4059/128"],
"Endpoints": ["77.164.248.136:52084", "10.65.0.27:52084", "172.17.0.1:52084"],
"User": 4084666557025682,
"Key": "nodekey:bebd42095d0ef08e4d5bb8ee39e9ec8727b838915318efc51464c573817b9c68",
"DiscoKey": "discokey:1c9a156847a3cf886d49a7b32140363dffc436f45a1110947da2d2d0c3bb7f72",
"Addresses": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
"Endpoints": [
"192.0.2.1:57095",
"198.51.100.1:57095",
"198.51.100.2:57095",
"198.51.100.3:57095"
],
"Hostinfo": {"Hostname": "beedrill", "RequestTags": ["tag:server"], "Services": [
{"Proto": "peerapi4", "Port": 45489},
{"Proto": "peerapi6", "Port": 45489},
{"Proto": "peerapi4", "Port": 50358},
{"Proto": "peerapi6", "Port": 50358},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T17:17:59.911314086Z",
"Created": "2026-10-30T16:45:15.360928431Z",
"Tags": ["tag:server"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -139,6 +175,7 @@
"ComputedNameWithHost": "beedrill"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -149,70 +186,78 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:94577fdaaaa7597c429e6f7bd188080513c60212649c34884d2b03ad60aa4058",
"MachineKey": "mkey:5b5b1c7915d0425e86f06da92c9a4fae9671b4f8614e9d98ce5cb3f30ca23252",
"NodeKey": "nodekey:bebd42095d0ef08e4d5bb8ee39e9ec8727b838915318efc51464c573817b9c68",
"MachineKey": "mkey:3d629962c47883ecc49925977fb67b2bea42846a99df76da80bb632190c78a2d",
"Peers": [{
"ID": 5266573157149446,
"StableID": "nu8ANtwE8i11CNTRL",
"Name": "bulbasaur.tail78f774.ts.net.",
"User": 4156223528223174,
"Key": "nodekey:df66cd7494d355f07cb72a82a029486b64be24926242a5aafcd230ddaa536564",
"KeyExpiry": "2026-10-07T17:18:01Z",
"DiscoKey": "discokey:3f5535895a5a1081b6232fe2d8a6dac8e061c79dd42f9db975c91827eaf3490d",
"Addresses": ["100.83.101.101/32", "fd7a:115c:a1e0::aa37:6565/128"],
"AllowedIPs": ["100.83.101.101/32", "fd7a:115c:a1e0::aa37:6565/128"],
"Endpoints": ["77.164.248.136:53476", "10.65.0.27:53476", "172.17.0.1:53476"],
"HomeDERP": 8,
"Hostinfo": {"OS": "linux", "Hostname": "bulbasaur", "Services": [
{"Proto": "peerapi4", "Port": 50126},
{"Proto": "peerapi6", "Port": 50126}
]},
"Created": "2026-04-10T17:18:01.51683922Z",
"Cap": 131,
"Online": true,
"ComputedName": "bulbasaur",
"ComputedNameWithHost": "bulbasaur"
}, {
"ID": 5817288980168211,
"StableID": "nAUpoPKfRn11CNTRL",
"ID": 871716279060807,
"StableID": "nngeXVWoo711CNTRL",
"Name": "weedle.tail78f774.ts.net.",
"User": 1260082990019555,
"Key": "nodekey:eff374276ccf8fdf7e4010c32c807e50fb03603b6f6bec922088d05aa2b6dd7b",
"DiscoKey": "discokey:6ee0477f14c93bef87ce1e03651d6db64d66403a4e9fcb33c3849f9274074c58",
"Addresses": ["100.118.221.124/32", "fd7a:115c:a1e0::a237:dd7c/128"],
"AllowedIPs": ["100.118.221.124/32", "fd7a:115c:a1e0::a237:dd7c/128"],
"Endpoints": ["77.164.248.136:40227", "10.65.0.27:40227", "172.17.0.1:40227"],
"HomeDERP": 14,
"Key": "nodekey:50352c5ed78e4108b0e9aa712f8d47177ec782fae232fa000cf54855b5c6c837",
"DiscoKey": "discokey:121e1a80d0ad307af824ef30dc7eb721c1af163b123eb350bde33bcece58d21e",
"Addresses": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"Endpoints": [
"192.0.2.1:45561",
"198.51.100.1:45561",
"198.51.100.2:45561",
"198.51.100.3:45561"
],
"HomeDERP": 14,
"Hostinfo": {"OS": "linux", "Hostname": "weedle", "Services": [
{"Proto": "peerapi4", "Port": 52149},
{"Proto": "peerapi6", "Port": 52149}
{"Proto": "peerapi4", "Port": 63957},
{"Proto": "peerapi6", "Port": 63957}
]},
"Created": "2026-04-10T17:17:58.812644804Z",
"Cap": 131,
"Created": "2026-10-30T16:45:14.305695801Z",
"Cap": 142,
"Tags": ["tag:client"],
"Online": true,
"ComputedName": "weedle",
"ComputedNameWithHost": "weedle"
}, {
"ID": 5772421485844954,
"StableID": "n9CayziL5n11CNTRL",
"Name": "bulbasaur.tail78f774.ts.net.",
"User": 4156223528223174,
"Key": "nodekey:1dadab56555ad6734680f2597d648d5b414915d1148c12468bd4d3784ad58e72",
"KeyExpiry": "2027-04-28T16:45:16Z",
"DiscoKey": "discokey:828594bd004da226d76cfe5daeba33ec296902d3b79f2f3d4565f8919f77d12c",
"Addresses": ["100.64.0.19/32", "fd7a:115c:a1e0::13/128"],
"AllowedIPs": ["100.64.0.19/32", "fd7a:115c:a1e0::13/128"],
"Endpoints": [
"192.0.2.1:39817",
"198.51.100.1:39817",
"198.51.100.2:39817",
"198.51.100.3:39817"
],
"HomeDERP": 14,
"Hostinfo": {"OS": "linux", "Hostname": "bulbasaur", "Services": [
{"Proto": "peerapi4", "Port": 38156},
{"Proto": "peerapi6", "Port": 38156}
]},
"Created": "2026-10-30T16:45:16.954645191Z",
"Cap": 142,
"Online": true,
"ComputedName": "bulbasaur",
"ComputedNameWithHost": "bulbasaur"
}],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
"100.118.221.124/32",
"100.83.101.101/32",
"fd7a:115c:a1e0::a237:dd7c/128",
"fd7a:115c:a1e0::aa37:6565/128"
"100.64.0.14/32",
"100.64.0.19/32",
"fd7a:115c:a1e0::13/128",
"fd7a:115c:a1e0::e/128"
], "SrcCaps": null, "Dsts": [
{"Net": "100.106.64.89/32", "Ports": {"First": 22, "Last": 22}},
{"Net": "fd7a:115c:a1e0::6037:4059/128", "Ports": {"First": 22, "Last": 22}}
{"Net": "100.64.0.16/32", "Ports": {"First": 22, "Last": 22}},
{"Net": "fd7a:115c:a1e0::10/128", "Ports": {"First": 22, "Last": 22}}
], "Caps": []}],
"PacketFilterRules": [{"SrcIPs": [
"100.118.221.124",
"100.83.101.101",
"fd7a:115c:a1e0::a237:dd7c",
"fd7a:115c:a1e0::aa37:6565"
], "DstPorts": [
{"IP": "100.106.64.89", "Ports": {"First": 22, "Last": 22}},
{"IP": "fd7a:115c:a1e0::6037:4059", "Ports": {"First": 22, "Last": 22}}
]}],
"PacketFilterRules": [{
"SrcIPs": ["100.64.0.14", "100.64.0.19", "fd7a:115c:a1e0::13", "fd7a:115c:a1e0::e"],
"DstPorts": [
{"IP": "100.64.0.16", "Ports": {"First": 22, "Last": 22}},
{"IP": "fd7a:115c:a1e0::10", "Ports": {"First": 22, "Last": 22}}
]
}],
"SSHPolicy": {"rules": []},
"CollectServices": false,
"DERPMap": {"Regions": {"1": {
@@ -1038,8 +1083,8 @@
"ID": 1260082990019555,
"LoginName": "tagged-devices",
"DisplayName": "Tagged Devices"
}, "4012249567431828": {
"ID": 4012249567431828,
}, "4084666557025682": {
"ID": 4084666557025682,
"LoginName": "beedrill.tail78f774.ts.net",
"DisplayName": "beedrill"
}, "4156223528223174": {
@@ -1050,24 +1095,30 @@
}}, "bulbasaur": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 5266573157149446,
"StableID": "nu8ANtwE8i11CNTRL",
"ID": 5772421485844954,
"StableID": "n9CayziL5n11CNTRL",
"Name": "bulbasaur.tail78f774.ts.net.",
"User": 4156223528223174,
"Key": "nodekey:df66cd7494d355f07cb72a82a029486b64be24926242a5aafcd230ddaa536564",
"KeyExpiry": "2026-10-07T17:18:01Z",
"DiscoKey": "discokey:3f5535895a5a1081b6232fe2d8a6dac8e061c79dd42f9db975c91827eaf3490d",
"Addresses": ["100.83.101.101/32", "fd7a:115c:a1e0::aa37:6565/128"],
"AllowedIPs": ["100.83.101.101/32", "fd7a:115c:a1e0::aa37:6565/128"],
"Endpoints": ["77.164.248.136:53476", "10.65.0.27:53476", "172.17.0.1:53476"],
"Key": "nodekey:1dadab56555ad6734680f2597d648d5b414915d1148c12468bd4d3784ad58e72",
"KeyExpiry": "2027-04-28T16:45:16Z",
"DiscoKey": "discokey:828594bd004da226d76cfe5daeba33ec296902d3b79f2f3d4565f8919f77d12c",
"Addresses": ["100.64.0.19/32", "fd7a:115c:a1e0::13/128"],
"AllowedIPs": ["100.64.0.19/32", "fd7a:115c:a1e0::13/128"],
"Endpoints": [
"192.0.2.1:39817",
"198.51.100.1:39817",
"198.51.100.2:39817",
"198.51.100.3:39817"
],
"Hostinfo": {"Hostname": "bulbasaur", "Services": [
{"Proto": "peerapi4", "Port": 50126},
{"Proto": "peerapi6", "Port": 50126},
{"Proto": "peerapi4", "Port": 38156},
{"Proto": "peerapi6", "Port": 38156},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T17:18:01.51683922Z",
"Created": "2026-10-30T16:45:16.954645191Z",
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-admin": null,
"https://tailscale.com/cap/is-owner": null,
@@ -1083,6 +1134,7 @@
"ComputedNameWithHost": "bulbasaur"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-admin",
"https://tailscale.com/cap/is-owner",
@@ -1094,25 +1146,30 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:df66cd7494d355f07cb72a82a029486b64be24926242a5aafcd230ddaa536564",
"MachineKey": "mkey:5facb298151f35560ac8e9b76b5333ba8ea3bffc341385bdd94653552534ac45",
"NodeKey": "nodekey:1dadab56555ad6734680f2597d648d5b414915d1148c12468bd4d3784ad58e72",
"MachineKey": "mkey:273757a6d23804badd009846f80d7c76a149b19c343d320b039f0ea3ce713953",
"Peers": [{
"ID": 4012249567431828,
"StableID": "n7iJyZz9LY11CNTRL",
"ID": 4084666557025682,
"StableID": "n3wvMKGxtY11CNTRL",
"Name": "beedrill.tail78f774.ts.net.",
"User": 1260082990019555,
"Key": "nodekey:94577fdaaaa7597c429e6f7bd188080513c60212649c34884d2b03ad60aa4058",
"DiscoKey": "discokey:1cbf3b48932dc27acd38fccc53273ddcc60903ff8628f1ed230d898fedf1771c",
"Addresses": ["100.106.64.89/32", "fd7a:115c:a1e0::6037:4059/128"],
"AllowedIPs": ["100.106.64.89/32", "fd7a:115c:a1e0::6037:4059/128"],
"Endpoints": ["77.164.248.136:52084", "10.65.0.27:52084", "172.17.0.1:52084"],
"HomeDERP": 14,
"Key": "nodekey:bebd42095d0ef08e4d5bb8ee39e9ec8727b838915318efc51464c573817b9c68",
"DiscoKey": "discokey:1c9a156847a3cf886d49a7b32140363dffc436f45a1110947da2d2d0c3bb7f72",
"Addresses": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
"Endpoints": [
"192.0.2.1:57095",
"198.51.100.1:57095",
"198.51.100.2:57095",
"198.51.100.3:57095"
],
"HomeDERP": 14,
"Hostinfo": {"OS": "linux", "Hostname": "beedrill", "Services": [
{"Proto": "peerapi4", "Port": 45489},
{"Proto": "peerapi6", "Port": 45489}
{"Proto": "peerapi4", "Port": 50358},
{"Proto": "peerapi6", "Port": 50358}
]},
"Created": "2026-04-10T17:17:59.911314086Z",
"Cap": 131,
"Created": "2026-10-30T16:45:15.360928431Z",
"Cap": 142,
"Tags": ["tag:server"],
"Online": true,
"ComputedName": "beedrill",
@@ -1954,29 +2011,35 @@
}}, "charmander": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 5000633697941610,
"StableID": "ndGF2jAo3g11CNTRL",
"ID": 7608086615846157,
"StableID": "nLpGazXiQ221CNTRL",
"Name": "charmander.tail78f774.ts.net.",
"User": 5000633697941610,
"Key": "nodekey:0ea08dc2357cc3a19220bcf857d7ce1fe906543790959645c3a39170a344701d",
"DiscoKey": "discokey:5a92461e93f52b46b31d20294957014ea2f30939b63d838b90b8efaa4e801076",
"Addresses": ["100.68.112.30/32", "fd7a:115c:a1e0::a337:701e/128"],
"AllowedIPs": ["100.68.112.30/32", "fd7a:115c:a1e0::a337:701e/128"],
"Endpoints": ["77.164.248.136:44936", "10.65.0.27:44936", "172.17.0.1:44936"],
"User": 7608086615846157,
"Key": "nodekey:9b72051fa9b181e22935902ea212064ed95055278937364e737e7bd208eb4412",
"DiscoKey": "discokey:cd470838817f8a0fca99ef39834d15649d4cefc690525d420ba918c8dc395d6c",
"Addresses": ["100.64.0.4/32", "fd7a:115c:a1e0::4/128"],
"AllowedIPs": ["100.64.0.4/32", "fd7a:115c:a1e0::4/128"],
"Endpoints": [
"192.0.2.1:37863",
"198.51.100.1:37863",
"198.51.100.2:37863",
"198.51.100.3:37863"
],
"Hostinfo": {
"Hostname": "charmander",
"RoutableIPs": ["0.0.0.0/0", "::/0"],
"RequestTags": ["tag:exit"],
"Services": [
{"Proto": "peerapi4", "Port": 47259},
{"Proto": "peerapi6", "Port": 47259},
{"Proto": "peerapi4", "Port": 37067},
{"Proto": "peerapi6", "Port": 37067},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]
},
"Created": "2026-04-10T17:17:57.711289455Z",
"Created": "2026-10-30T16:45:12.802254302Z",
"Tags": ["tag:exit"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -1991,6 +2054,7 @@
"ComputedNameWithHost": "charmander"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -2001,8 +2065,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:0ea08dc2357cc3a19220bcf857d7ce1fe906543790959645c3a39170a344701d",
"MachineKey": "mkey:fea91b0ce898de38c65162fd1eef971fcb967138672fa52b0fcbc9078fb86b29",
"NodeKey": "nodekey:9b72051fa9b181e22935902ea212064ed95055278937364e737e7bd208eb4412",
"MachineKey": "mkey:86635c8ed293632125c8c1c09d560f3e2ae45a88c219504f3fd640aa7ab0b214",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -2828,32 +2892,38 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {"5000633697941610": {
"ID": 5000633697941610,
"UserProfiles": {"7608086615846157": {
"ID": 7608086615846157,
"LoginName": "charmander.tail78f774.ts.net",
"DisplayName": "charmander"
}}
}}, "ivysaur": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 7074982693144644,
"StableID": "noQHTJoGFx11CNTRL",
"ID": 4413190400702983,
"StableID": "npM5Te2kTb11CNTRL",
"Name": "ivysaur.tail78f774.ts.net.",
"User": 4538565228176803,
"Key": "nodekey:120e69d573fdacc675416892a40f4553f72135fb5f34163ac9131e0eb8644b4c",
"KeyExpiry": "2026-10-07T17:18:00Z",
"DiscoKey": "discokey:f81a88a55d3d6734573d2575bb9166897ae93da3ed716b2d595f4b8ee06d8a1b",
"Addresses": ["100.100.75.77/32", "fd7a:115c:a1e0::b837:4b4d/128"],
"AllowedIPs": ["100.100.75.77/32", "fd7a:115c:a1e0::b837:4b4d/128"],
"Endpoints": ["77.164.248.136:52452", "10.65.0.27:52452", "172.17.0.1:52452"],
"Key": "nodekey:1a0a940d9e3ebef145a5f70d55926b39f677e35a4f47c217e694e5de5534ec44",
"KeyExpiry": "2027-04-28T16:45:15Z",
"DiscoKey": "discokey:1f9dcc8cbc4cd356fa1a93283f135ba90114c1a4281cdada5fbed3dac7e6db10",
"Addresses": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
"Endpoints": [
"192.0.2.1:48696",
"198.51.100.1:48696",
"198.51.100.2:48696",
"198.51.100.3:48696"
],
"Hostinfo": {"Hostname": "ivysaur", "Services": [
{"Proto": "peerapi4", "Port": 37133},
{"Proto": "peerapi6", "Port": 37133},
{"Proto": "peerapi4", "Port": 62496},
{"Proto": "peerapi6", "Port": 62496},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T17:18:00.435157645Z",
"Created": "2026-10-30T16:45:15.884738097Z",
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-admin": null,
"https://tailscale.com/cap/ssh": null,
@@ -2868,6 +2938,7 @@
"ComputedNameWithHost": "ivysaur"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-admin",
"https://tailscale.com/cap/ssh",
@@ -2878,8 +2949,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:120e69d573fdacc675416892a40f4553f72135fb5f34163ac9131e0eb8644b4c",
"MachineKey": "mkey:1f01c952c6fc9f9af751f9add8f3b436812ee2fb0b955b3d99b1e809e17c5651",
"NodeKey": "nodekey:1a0a940d9e3ebef145a5f70d55926b39f677e35a4f47c217e694e5de5534ec44",
"MachineKey": "mkey:993f7be3677774dfc0f32b87c16f1699aab194d60ba646ffd57aad57b5317001",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -3705,30 +3776,38 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {
"4538565228176803": {"ID": 4538565228176803, "LoginName": "thor@example.org", "DisplayName": "thor"}
}
"UserProfiles": {"4538565228176803": {
"ID": 4538565228176803,
"LoginName": "thor@example.org",
"DisplayName": "thor"
}}
}}, "kakuna": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 2866192204628761,
"StableID": "nxGvJX17PP11CNTRL",
"ID": 2214494485400916,
"StableID": "n5RhVs1xHJ11CNTRL",
"Name": "kakuna.tail78f774.ts.net.",
"User": 2866192204628761,
"Key": "nodekey:e486786539ad34f55618947da23bd9ac7e7e58a7cb7a7c773ee4895c03d68640",
"DiscoKey": "discokey:7b1a81c1d036f574c13bfdabefb469e0cc2d244f77ddc7345aad267ee7ad4c0d",
"Addresses": ["100.86.134.65/32", "fd7a:115c:a1e0::337:8641/128"],
"AllowedIPs": ["100.86.134.65/32", "fd7a:115c:a1e0::337:8641/128"],
"Endpoints": ["77.164.248.136:55845", "10.65.0.27:55845", "172.17.0.1:55845"],
"User": 2214494485400916,
"Key": "nodekey:34a1abec7057eb2b79239973c3f11bef2d8612b6579ef430d019c831384b1506",
"DiscoKey": "discokey:3be02a0f6cd287d9741e66627314dcf7b80d5e53819b615b01459bafe3340a07",
"Addresses": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
"Endpoints": [
"192.0.2.1:60219",
"198.51.100.1:60219",
"198.51.100.2:60219",
"198.51.100.3:60219"
],
"Hostinfo": {"Hostname": "kakuna", "RequestTags": ["tag:prod"], "Services": [
{"Proto": "peerapi4", "Port": 50651},
{"Proto": "peerapi6", "Port": 50651},
{"Proto": "peerapi4", "Port": 51523},
{"Proto": "peerapi6", "Port": 51523},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T17:17:59.381253379Z",
"Created": "2026-10-30T16:45:14.825232707Z",
"Tags": ["tag:prod"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -3743,6 +3822,7 @@
"ComputedNameWithHost": "kakuna"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -3753,8 +3833,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:e486786539ad34f55618947da23bd9ac7e7e58a7cb7a7c773ee4895c03d68640",
"MachineKey": "mkey:7c8a5550a7fe4364d51a204c3eca673ed1a7ec51d52b3085e072b05b8cbcf53c",
"NodeKey": "nodekey:34a1abec7057eb2b79239973c3f11bef2d8612b6579ef430d019c831384b1506",
"MachineKey": "mkey:a37be4d8f7f5cea6a8b7337821226359236b75531f4fde3854c9f0730f8c7d14",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -4580,38 +4660,44 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {"2866192204628761": {
"ID": 2866192204628761,
"UserProfiles": {"2214494485400916": {
"ID": 2214494485400916,
"LoginName": "kakuna.tail78f774.ts.net",
"DisplayName": "kakuna"
}}
}}, "squirtle": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 4857814408751615,
"StableID": "n6QrVjY7we11CNTRL",
"ID": 2844045741676786,
"StableID": "nTqTD2G5DP11CNTRL",
"Name": "squirtle.tail78f774.ts.net.",
"User": 4857814408751615,
"Key": "nodekey:afd68bf655b4e6cab5e25a73a12f6e697a606988f46645cf95ded847466b9843",
"DiscoKey": "discokey:06a8d2daec3c6a8db9af8022b7f7100f249c388282ad3525087437f3329a3533",
"Addresses": ["100.107.152.68/32", "fd7a:115c:a1e0::4637:9844/128"],
"AllowedIPs": ["100.107.152.68/32", "fd7a:115c:a1e0::4637:9844/128", "10.33.0.0/16"],
"Endpoints": ["77.164.248.136:39997", "10.65.0.27:39997", "172.17.0.1:39997"],
"User": 2844045741676786,
"Key": "nodekey:6ca4cef1f60661e42b3c83a6433ff16124f0cae101c9929eef0b7ee79615d76a",
"DiscoKey": "discokey:69cfb4a7bd850f9f89335407492c778333a79a9be1c976b16a039969bebfbe7c",
"Addresses": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128", "10.33.0.0/16"],
"Endpoints": [
"192.0.2.1:41073",
"198.51.100.1:41073",
"198.51.100.2:41073",
"198.51.100.3:41073"
],
"Hostinfo": {
"Hostname": "squirtle",
"RoutableIPs": ["10.33.0.0/16"],
"RequestTags": ["tag:router"],
"Services": [
{"Proto": "peerapi4", "Port": 63560},
{"Proto": "peerapi6", "Port": 63560},
{"Proto": "peerapi4", "Port": 43119},
{"Proto": "peerapi6", "Port": 43119},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]
},
"Created": "2026-04-10T17:17:58.266526614Z",
"Created": "2026-10-30T16:45:13.651885977Z",
"Tags": ["tag:router"],
"PrimaryRoutes": ["10.33.0.0/16"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -4626,6 +4712,7 @@
"ComputedNameWithHost": "squirtle"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -4636,8 +4723,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:afd68bf655b4e6cab5e25a73a12f6e697a606988f46645cf95ded847466b9843",
"MachineKey": "mkey:b5bffebbc212c09584738ec846194fa82c17bd7ecbac477601da9d88508c3745",
"NodeKey": "nodekey:6ca4cef1f60661e42b3c83a6433ff16124f0cae101c9929eef0b7ee79615d76a",
"MachineKey": "mkey:bf4aa270dbd0d712b7371c0103855a138f87b92b5f1771ea13136c6f6aba5a6b",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -5463,32 +5550,38 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {"4857814408751615": {
"ID": 4857814408751615,
"UserProfiles": {"2844045741676786": {
"ID": 2844045741676786,
"LoginName": "squirtle.tail78f774.ts.net",
"DisplayName": "squirtle"
}}
}}, "venusaur": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 2167585272966194,
"StableID": "nVzS2onhvH11CNTRL",
"ID": 5869868019089985,
"StableID": "nrhqRoUUqn11CNTRL",
"Name": "venusaur.tail78f774.ts.net.",
"User": 3982058329734709,
"Key": "nodekey:eecfb5ac5fba0d30be15dd5eb47727c667bde24ad2a73aee9b06559fef2c121f",
"KeyExpiry": "2026-10-07T17:18:00Z",
"DiscoKey": "discokey:647c8ef0080469029cdade3c2975ab63ca55edd57273cde0ed575600d904b678",
"Addresses": ["100.108.18.32/32", "fd7a:115c:a1e0::ef37:1220/128"],
"AllowedIPs": ["100.108.18.32/32", "fd7a:115c:a1e0::ef37:1220/128"],
"Endpoints": ["77.164.248.136:57521", "10.65.0.27:57521", "172.17.0.1:57521"],
"Key": "nodekey:eb018baadd46a6270e126ab3b145428cbfa7d98d51b6e3745d08bb3c4a51482b",
"KeyExpiry": "2027-04-28T16:45:16Z",
"DiscoKey": "discokey:82d9f855866a4b737e1134805dc9849dc9b2512c849456f70ab1531331a88607",
"Addresses": ["100.64.0.18/32", "fd7a:115c:a1e0::12/128"],
"AllowedIPs": ["100.64.0.18/32", "fd7a:115c:a1e0::12/128"],
"Endpoints": [
"192.0.2.1:35758",
"198.51.100.1:35758",
"198.51.100.2:35758",
"198.51.100.3:35758"
],
"Hostinfo": {"Hostname": "venusaur", "Services": [
{"Proto": "peerapi4", "Port": 47949},
{"Proto": "peerapi6", "Port": 47949},
{"Proto": "peerapi4", "Port": 42394},
{"Proto": "peerapi6", "Port": 42394},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T17:18:00.976570353Z",
"Created": "2026-10-30T16:45:16.410905187Z",
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-admin": null,
"https://tailscale.com/cap/ssh": null,
@@ -5503,6 +5596,7 @@
"ComputedNameWithHost": "venusaur"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-admin",
"https://tailscale.com/cap/ssh",
@@ -5513,8 +5607,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:eecfb5ac5fba0d30be15dd5eb47727c667bde24ad2a73aee9b06559fef2c121f",
"MachineKey": "mkey:6b8293e7910cb822ef35fb95e8961d6ed09588dff558dfe136de0a7687cf2e0c",
"NodeKey": "nodekey:eb018baadd46a6270e126ab3b145428cbfa7d98d51b6e3745d08bb3c4a51482b",
"MachineKey": "mkey:5f3fd01d0cb2de9697ae8aac8bf60f9cfbb913271715b078c35701e2ce939051",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [],
@@ -6348,24 +6442,30 @@
}}, "weedle": {"netmap": {
"Cached": false,
"SelfNode": {
"ID": 5817288980168211,
"StableID": "nAUpoPKfRn11CNTRL",
"ID": 871716279060807,
"StableID": "nngeXVWoo711CNTRL",
"Name": "weedle.tail78f774.ts.net.",
"User": 5817288980168211,
"Key": "nodekey:eff374276ccf8fdf7e4010c32c807e50fb03603b6f6bec922088d05aa2b6dd7b",
"DiscoKey": "discokey:6ee0477f14c93bef87ce1e03651d6db64d66403a4e9fcb33c3849f9274074c58",
"Addresses": ["100.118.221.124/32", "fd7a:115c:a1e0::a237:dd7c/128"],
"AllowedIPs": ["100.118.221.124/32", "fd7a:115c:a1e0::a237:dd7c/128"],
"Endpoints": ["77.164.248.136:40227", "10.65.0.27:40227", "172.17.0.1:40227"],
"User": 871716279060807,
"Key": "nodekey:50352c5ed78e4108b0e9aa712f8d47177ec782fae232fa000cf54855b5c6c837",
"DiscoKey": "discokey:121e1a80d0ad307af824ef30dc7eb721c1af163b123eb350bde33bcece58d21e",
"Addresses": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"Endpoints": [
"192.0.2.1:45561",
"198.51.100.1:45561",
"198.51.100.2:45561",
"198.51.100.3:45561"
],
"Hostinfo": {"Hostname": "weedle", "RequestTags": ["tag:client"], "Services": [
{"Proto": "peerapi4", "Port": 52149},
{"Proto": "peerapi6", "Port": 52149},
{"Proto": "peerapi4", "Port": 63957},
{"Proto": "peerapi6", "Port": 63957},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T17:17:58.812644804Z",
"Created": "2026-10-30T16:45:14.305695801Z",
"Tags": ["tag:client"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -6380,6 +6480,7 @@
"ComputedNameWithHost": "weedle"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -6390,25 +6491,30 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:eff374276ccf8fdf7e4010c32c807e50fb03603b6f6bec922088d05aa2b6dd7b",
"MachineKey": "mkey:9f326a90bae0eef7469b388decc0e1bbe86717a660ba40f102cc95a3566b5d0e",
"NodeKey": "nodekey:50352c5ed78e4108b0e9aa712f8d47177ec782fae232fa000cf54855b5c6c837",
"MachineKey": "mkey:dcfdc1de49256ffb29cb766ba8038ec8f84a7bcb4457e396ece0fc6c25b2566e",
"Peers": [{
"ID": 4012249567431828,
"StableID": "n7iJyZz9LY11CNTRL",
"ID": 4084666557025682,
"StableID": "n3wvMKGxtY11CNTRL",
"Name": "beedrill.tail78f774.ts.net.",
"User": 1260082990019555,
"Key": "nodekey:94577fdaaaa7597c429e6f7bd188080513c60212649c34884d2b03ad60aa4058",
"DiscoKey": "discokey:1cbf3b48932dc27acd38fccc53273ddcc60903ff8628f1ed230d898fedf1771c",
"Addresses": ["100.106.64.89/32", "fd7a:115c:a1e0::6037:4059/128"],
"AllowedIPs": ["100.106.64.89/32", "fd7a:115c:a1e0::6037:4059/128"],
"Endpoints": ["77.164.248.136:52084", "10.65.0.27:52084", "172.17.0.1:52084"],
"HomeDERP": 14,
"Key": "nodekey:bebd42095d0ef08e4d5bb8ee39e9ec8727b838915318efc51464c573817b9c68",
"DiscoKey": "discokey:1c9a156847a3cf886d49a7b32140363dffc436f45a1110947da2d2d0c3bb7f72",
"Addresses": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
"Endpoints": [
"192.0.2.1:57095",
"198.51.100.1:57095",
"198.51.100.2:57095",
"198.51.100.3:57095"
],
"HomeDERP": 14,
"Hostinfo": {"OS": "linux", "Hostname": "beedrill", "Services": [
{"Proto": "peerapi4", "Port": 45489},
{"Proto": "peerapi6", "Port": 45489}
{"Proto": "peerapi4", "Port": 50358},
{"Proto": "peerapi6", "Port": 50358}
]},
"Created": "2026-04-10T17:17:59.911314086Z",
"Cap": 131,
"Created": "2026-10-30T16:45:15.360928431Z",
"Cap": 142,
"Tags": ["tag:server"],
"Online": true,
"ComputedName": "beedrill",
@@ -7242,8 +7348,8 @@
"ID": 1260082990019555,
"LoginName": "tagged-devices",
"DisplayName": "Tagged Devices"
}, "5817288980168211": {
"ID": 5817288980168211,
}, "871716279060807": {
"ID": 871716279060807,
"LoginName": "weedle.tail78f774.ts.net",
"DisplayName": "weedle"
}}
hscontrol/policy/v2/testdata/acl_results/acl-w02.hujson
Generated Vendored
+240 -143
View File
@@ -3,26 +3,60 @@
// acl w02
//
// Nodes with filter rules: 8 of 8
// Captured at: 2026-04-10T17:19:45Z
// tscap version: tscap/dev
// Captured at: 2026-10-30T16:45:53Z
// tool version: tscap/5f80ee6150559e777612549d896d444b50768737
// schema version: 1
{
"schema_version": 1,
"test_id": "acl-w02",
"description": "acl w02",
"category": "acl",
"captured_at": "2026-04-10T17:19:45.556450939Z",
"tool_version": "tscap/dev",
"captured_at": "2026-10-30T16:45:53.537445956Z",
"tool_version": "tscap/5f80ee6150559e777612549d896d444b50768737",
"client_version": "1.102.5-ERR-BuildInfo capver 142",
"tailnet": "odin@example.com",
"input": {
"full_policy": "{\"acls\":[{\"action\":\"accept\",\"dst\":[\"*:*\"],\"src\":[\"100.90.199.68\"]}],\"autoApprovers\":{\"routes\":{\"0.0.0.0/0\":[\"tag:exit\"],\"10.33.0.0/16\":[\"tag:router\"],\"::/0\":[\"tag:exit\"]}},\"groups\":{\"group:admins\":[\"odin@example.com\"],\"group:developers\":[\"thor@example.org\",\"odin@example.com\"],\"group:empty\":[],\"group:monitors\":[\"freya@example.com\"]},\"hosts\":{\"internal\":\"10.0.0.0/8\",\"prodbox\":\"100.103.8.15\",\"subnet24\":\"192.168.1.0/24\",\"webserver\":\"100.108.74.26\"},\"tagOwners\":{\"tag:client\":[\"odin@example.com\"],\"tag:exit\":[\"odin@example.com\"],\"tag:pidgey\":[\"odin@example.com\"],\"tag:pidgeotto\":[\"odin@example.com\"],\"tag:group-a\":[\"odin@example.com\"],\"tag:group-b\":[\"odin@example.com\"],\"tag:ha\":[\"odin@example.com\"],\"tag:prod\":[\"odin@example.com\"],\"tag:router\":[\"odin@example.com\"],\"tag:spearow\":[\"odin@example.com\"],\"tag:fearow\":[\"odin@example.com\"],\"tag:server\":[\"odin@example.com\"]}}",
"api_response_code": 200,
"tailnet": {
"dns": {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
"settings": {}
},
"scenario_hujson": " \n{\"category\": \"acl\", \"description\": \"acl w02\", \"id\": \"acl-w02\", \"policy\": {\n\t\"acls\": [{\"action\": \"accept\", \"dst\": [\"*:*\"], \"src\": [\"100.90.199.68\"]}],\n\t\"autoApprovers\": {\"routes\": {\n\t\t\"0.0.0.0/0\": [\"tag:exit\"],\n\t\t\"10.33.0.0/16\": [\"tag:router\"],\n\t\t\"::/0\": [\"tag:exit\"]\n\t}},\n\t\"groups\": {\n\t\t\"group:admins\": [\"odin@example.com\"],\n\t\t\"group:developers\": [\"thor@example.org\", \"odin@example.com\"],\n\t\t\"group:empty\": [],\n\t\t\"group:monitors\": [\"freya@example.com\"]\n\t},\n\t\"hosts\": {\n\t\t\"internal\": \"10.0.0.0/8\",\n\t\t\"prodbox\": \"100.103.8.15\",\n\t\t\"subnet24\": \"192.168.1.0/24\",\n\t\t\"webserver\": \"100.108.74.26\"\n\t},\n\t\"tagOwners\": {\n\t\t\"tag:client\": [\"odin@example.com\"],\n\t\t\"tag:exit\": [\"odin@example.com\"],\n\t\t\"tag:pidgey\": [\"odin@example.com\"],\n\t\t\"tag:pidgeotto\": [\"odin@example.com\"],\n\t\t\"tag:group-a\": [\"odin@example.com\"],\n\t\t\"tag:group-b\": [\"odin@example.com\"],\n\t\t\"tag:ha\": [\"odin@example.com\"],\n\t\t\"tag:prod\": [\"odin@example.com\"],\n\t\t\"tag:router\": [\"odin@example.com\"],\n\t\t\"tag:spearow\": [\"odin@example.com\"],\n\t\t\"tag:fearow\": [\"odin@example.com\"],\n\t\t\"tag:server\": [\"odin@example.com\"]\n\t}\n}, \"tailnet\": {\n\t\"dns\": {\"magic_dns\": false, \"nameservers\": [], \"search_paths\": [], \"split_dns\": {}},\n\t\"settings\": {}\n}, \"topology\": \"../_topologies/acl.hujson\"}\n",
"scenario_path": "scenarios/acl/acl-w02.hujson"
"scenario_path": "scenarios/acl/acl-w02.hujson",
"full_policy": {
"acls": [{"action": "accept", "dst": ["*:*"], "src": ["100.90.199.68"]}],
"autoApprovers": {"routes": {
"0.0.0.0/0": ["tag:exit"],
"10.33.0.0/16": ["tag:router"],
"::/0": ["tag:exit"]
}},
"groups": {
"group:admins": ["odin@example.com"],
"group:developers": ["thor@example.org", "odin@example.com"],
"group:empty": [],
"group:monitors": ["freya@example.com"]
},
"hosts": {
"internal": "10.0.0.0/8",
"prodbox": "100.103.8.15",
"subnet24": "192.168.1.0/24",
"webserver": "100.108.74.26"
},
"tagOwners": {
"tag:client": ["odin@example.com"],
"tag:exit": ["odin@example.com"],
"tag:pidgey": ["odin@example.com"],
"tag:pidgeotto": ["odin@example.com"],
"tag:group-a": ["odin@example.com"],
"tag:group-b": ["odin@example.com"],
"tag:ha": ["odin@example.com"],
"tag:prod": ["odin@example.com"],
"tag:router": ["odin@example.com"],
"tag:spearow": ["odin@example.com"],
"tag:fearow": ["odin@example.com"],
"tag:server": ["odin@example.com"]
}
}
},
"topology": {"users": [
{"id": 1, "name": "odin", "email": "odin@example.com"},
@@ -31,60 +65,60 @@
], "nodes": {"beedrill": {
"hostname": "beedrill",
"tags": ["tag:server"],
"ipv4": "100.96.250.76",
"ipv6": "fd7a:115c:a1e0::c237:fa4c",
"ipv4": "100.64.0.16",
"ipv6": "fd7a:115c:a1e0::10",
"routable_ips": [],
"approved_routes": []
}, "bulbasaur": {
"hostname": "bulbasaur",
"tags": [],
"ipv4": "100.93.182.81",
"ipv6": "fd7a:115c:a1e0::2337:b651",
"ipv4": "100.64.0.19",
"ipv6": "fd7a:115c:a1e0::13",
"user": "odin",
"routable_ips": [],
"approved_routes": []
}, "charmander": {
"hostname": "charmander",
"tags": ["tag:exit"],
"ipv4": "100.107.18.36",
"ipv6": "fd7a:115c:a1e0::2f37:1224",
"ipv4": "100.64.0.4",
"ipv6": "fd7a:115c:a1e0::4",
"routable_ips": ["0.0.0.0/0", "::/0"],
"approved_routes": []
}, "ivysaur": {
"hostname": "ivysaur",
"tags": [],
"ipv4": "100.88.78.50",
"ipv6": "fd7a:115c:a1e0::c737:4e32",
"ipv4": "100.64.0.17",
"ipv6": "fd7a:115c:a1e0::11",
"user": "thor",
"routable_ips": [],
"approved_routes": []
}, "kakuna": {
"hostname": "kakuna",
"tags": ["tag:prod"],
"ipv4": "100.79.171.37",
"ipv6": "fd7a:115c:a1e0::9837:ab25",
"ipv4": "100.64.0.15",
"ipv6": "fd7a:115c:a1e0::f",
"routable_ips": [],
"approved_routes": []
}, "squirtle": {
"hostname": "squirtle",
"tags": ["tag:router"],
"ipv4": "100.119.65.31",
"ipv6": "fd7a:115c:a1e0::3c37:411f",
"ipv4": "100.64.0.13",
"ipv6": "fd7a:115c:a1e0::d",
"routable_ips": ["10.33.0.0/16"],
"approved_routes": []
"approved_routes": ["10.33.0.0/16"]
}, "venusaur": {
"hostname": "venusaur",
"tags": [],
"ipv4": "100.84.27.25",
"ipv6": "fd7a:115c:a1e0::4937:1b19",
"ipv4": "100.64.0.18",
"ipv6": "fd7a:115c:a1e0::12",
"user": "freya",
"routable_ips": [],
"approved_routes": []
}, "weedle": {
"hostname": "weedle",
"tags": ["tag:client"],
"ipv4": "100.92.253.98",
"ipv6": "fd7a:115c:a1e0::e337:fd62",
"ipv4": "100.64.0.14",
"ipv6": "fd7a:115c:a1e0::e",
"routable_ips": [],
"approved_routes": []
}}},
@@ -103,24 +137,30 @@
}], "netmap": {
"Cached": false,
"SelfNode": {
"ID": 8564560734165651,
"StableID": "nNLq7HVus921CNTRL",
"ID": 8763509876200910,
"StableID": "nwPkXZY1SB21CNTRL",
"Name": "beedrill.tail78f774.ts.net.",
"User": 8564560734165651,
"Key": "nodekey:fe266be69aa271b581fbc26e1f75ffe927abd6475ebf8b368c884dcbc260fa4b",
"DiscoKey": "discokey:83049f9c30e7af1b62d0aaceb222ce117c7e9221bbc880f64a6326f8e3ad716f",
"Addresses": ["100.96.250.76/32", "fd7a:115c:a1e0::c237:fa4c/128"],
"AllowedIPs": ["100.96.250.76/32", "fd7a:115c:a1e0::c237:fa4c/128"],
"Endpoints": ["77.164.248.136:39335", "10.65.0.27:39335", "172.17.0.1:39335"],
"User": 8763509876200910,
"Key": "nodekey:19e89eeb0709933f8b9ecf134500ef61f5a979ec5b5aed19c98986c045805b43",
"DiscoKey": "discokey:440d69b213ddc63a52b6be461e5bd8da4595b7f469342fb29d53118844413030",
"Addresses": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
"Endpoints": [
"192.0.2.1:54824",
"198.51.100.1:54824",
"198.51.100.2:54824",
"198.51.100.3:54824"
],
"Hostinfo": {"Hostname": "beedrill", "RequestTags": ["tag:server"], "Services": [
{"Proto": "peerapi4", "Port": 38590},
{"Proto": "peerapi6", "Port": 38590},
{"Proto": "peerapi4", "Port": 50358},
{"Proto": "peerapi6", "Port": 50358},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T17:19:49.582760313Z",
"Created": "2026-10-30T16:45:57.248151496Z",
"Tags": ["tag:server"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -135,6 +175,7 @@
"ComputedNameWithHost": "beedrill"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -145,8 +186,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:fe266be69aa271b581fbc26e1f75ffe927abd6475ebf8b368c884dcbc260fa4b",
"MachineKey": "mkey:dd1277dfb30c1c653ed2b0740800b69c18aa9b82763536a72cc7294dac5b0179",
"NodeKey": "nodekey:19e89eeb0709933f8b9ecf134500ef61f5a979ec5b5aed19c98986c045805b43",
"MachineKey": "mkey:84e543e10b1d99f42b65c95712c1bda50f9a094d39284f6309bd5b3662fa7977",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [{
@@ -984,8 +1025,8 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {"8564560734165651": {
"ID": 8564560734165651,
"UserProfiles": {"8763509876200910": {
"ID": 8763509876200910,
"LoginName": "beedrill.tail78f774.ts.net",
"DisplayName": "beedrill"
}}
@@ -1004,24 +1045,30 @@
}], "netmap": {
"Cached": false,
"SelfNode": {
"ID": 6304036331941991,
"StableID": "nkjjVzL7Er11CNTRL",
"ID": 4405678016325814,
"StableID": "nwZVm4hLQb11CNTRL",
"Name": "bulbasaur.tail78f774.ts.net.",
"User": 4156223528223174,
"Key": "nodekey:a4a3abeab4a4239d7170250bc6d815888efe8f5f826aa7d7fba038f1239db650",
"KeyExpiry": "2026-10-07T17:19:51Z",
"DiscoKey": "discokey:2da61ba329038f0427542059677d20e755ab64caa61e33b428d8d16e5362551e",
"Addresses": ["100.93.182.81/32", "fd7a:115c:a1e0::2337:b651/128"],
"AllowedIPs": ["100.93.182.81/32", "fd7a:115c:a1e0::2337:b651/128"],
"Endpoints": ["77.164.248.136:55270", "10.65.0.27:55270", "172.17.0.1:55270"],
"Key": "nodekey:2ddd9f6afc2368d0ad6a604157989ea4e6cf2b06973262f0bd3b18b8bc604874",
"KeyExpiry": "2027-04-28T16:45:58Z",
"DiscoKey": "discokey:03fc954a1af27cebb3369d550e7f3ba1a0dc145057719125565214dc44136c1c",
"Addresses": ["100.64.0.19/32", "fd7a:115c:a1e0::13/128"],
"AllowedIPs": ["100.64.0.19/32", "fd7a:115c:a1e0::13/128"],
"Endpoints": [
"192.0.2.1:42268",
"198.51.100.1:42268",
"198.51.100.2:42268",
"198.51.100.3:42268"
],
"Hostinfo": {"Hostname": "bulbasaur", "Services": [
{"Proto": "peerapi4", "Port": 36013},
{"Proto": "peerapi6", "Port": 36013},
{"Proto": "peerapi4", "Port": 38156},
{"Proto": "peerapi6", "Port": 38156},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T17:19:51.199693763Z",
"Created": "2026-10-30T16:45:58.870748817Z",
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-admin": null,
"https://tailscale.com/cap/is-owner": null,
@@ -1037,6 +1084,7 @@
"ComputedNameWithHost": "bulbasaur"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-admin",
"https://tailscale.com/cap/is-owner",
@@ -1048,8 +1096,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:a4a3abeab4a4239d7170250bc6d815888efe8f5f826aa7d7fba038f1239db650",
"MachineKey": "mkey:b2c6c6e722728b78278a8590b14a018c5117d6d675882d9018edaadad546a732",
"NodeKey": "nodekey:2ddd9f6afc2368d0ad6a604157989ea4e6cf2b06973262f0bd3b18b8bc604874",
"MachineKey": "mkey:c2dc595d309423f0e1bc33ee1d6b2a73144a5b72bd5bc93cce74d1e5fc530f1d",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [{
@@ -1907,24 +1955,35 @@
}], "netmap": {
"Cached": false,
"SelfNode": {
"ID": 7249483053631484,
"StableID": "nKt8mMdJcy11CNTRL",
"ID": 7000938210957064,
"StableID": "nf4i7ymjfw11CNTRL",
"Name": "charmander.tail78f774.ts.net.",
"User": 7249483053631484,
"Key": "nodekey:baaaea05e9b82b49020e01eb0f18a9118777bdeadc481d37e17eaf172f2b1223",
"DiscoKey": "discokey:455b79f95f897ce88d9baaa4e2860414edc800be24b063beee506fe9dc358c24",
"Addresses": ["100.107.18.36/32", "fd7a:115c:a1e0::2f37:1224/128"],
"AllowedIPs": ["100.107.18.36/32", "fd7a:115c:a1e0::2f37:1224/128"],
"Endpoints": ["77.164.248.136:39573", "10.65.0.27:39573", "172.17.0.1:39573"],
"Hostinfo": {"Hostname": "charmander", "RequestTags": ["tag:exit"], "Services": [
{"Proto": "peerapi4", "Port": 59857},
{"Proto": "peerapi6", "Port": 59857},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T17:19:47.440480488Z",
"User": 7000938210957064,
"Key": "nodekey:545fe2e14e711304b42eb3c6a15235b24f4062462a3fb5b39d45f40537d6db31",
"DiscoKey": "discokey:fad6413e84666c1e3c4267ff30aa7bb0b8bf3630235cb287d448d97eed16a917",
"Addresses": ["100.64.0.4/32", "fd7a:115c:a1e0::4/128"],
"AllowedIPs": ["100.64.0.4/32", "fd7a:115c:a1e0::4/128"],
"Endpoints": [
"192.0.2.1:51597",
"198.51.100.1:51597",
"198.51.100.2:51597",
"198.51.100.3:51597"
],
"Hostinfo": {
"Hostname": "charmander",
"RoutableIPs": ["0.0.0.0/0", "::/0"],
"RequestTags": ["tag:exit"],
"Services": [
{"Proto": "peerapi4", "Port": 37067},
{"Proto": "peerapi6", "Port": 37067},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]
},
"Created": "2026-10-30T16:45:55.104175922Z",
"Tags": ["tag:exit"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -1939,6 +1998,7 @@
"ComputedNameWithHost": "charmander"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -1949,8 +2009,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:baaaea05e9b82b49020e01eb0f18a9118777bdeadc481d37e17eaf172f2b1223",
"MachineKey": "mkey:4c17bde7c88988959358f4b79cfbaa2cab064ab332e4c27184bbd947b4805758",
"NodeKey": "nodekey:545fe2e14e711304b42eb3c6a15235b24f4062462a3fb5b39d45f40537d6db31",
"MachineKey": "mkey:cd790be5efbe03a726a65749ac7d5471d098eb2f4bbbd285b8e0ead30bc9b70f",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [{
@@ -2788,8 +2848,8 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {"7249483053631484": {
"ID": 7249483053631484,
"UserProfiles": {"7000938210957064": {
"ID": 7000938210957064,
"LoginName": "charmander.tail78f774.ts.net",
"DisplayName": "charmander"
}}
@@ -2808,24 +2868,30 @@
}], "netmap": {
"Cached": false,
"SelfNode": {
"ID": 7369603759423971,
"StableID": "nvSUCfzhYz11CNTRL",
"ID": 2149225259918166,
"StableID": "nZ4VYBWPnH11CNTRL",
"Name": "ivysaur.tail78f774.ts.net.",
"User": 4538565228176803,
"Key": "nodekey:a3f4dbc28e9c5d3d8466164e9cba5b922993b0dedb6c7cdcdc3ba96ec7184e31",
"KeyExpiry": "2026-10-07T17:19:50Z",
"DiscoKey": "discokey:5b0ffe88b18b1f0fe2219bb3203f95eb2f52b406516d383aebca6206281c5d6b",
"Addresses": ["100.88.78.50/32", "fd7a:115c:a1e0::c737:4e32/128"],
"AllowedIPs": ["100.88.78.50/32", "fd7a:115c:a1e0::c737:4e32/128"],
"Endpoints": ["77.164.248.136:36983", "10.65.0.27:36983", "172.17.0.1:36983"],
"Key": "nodekey:41ac8fc9613bbb175196e0ede773d5b33e5457e621723f241fd51bfd4399d815",
"KeyExpiry": "2027-04-28T16:45:57Z",
"DiscoKey": "discokey:2d4e508f1fff5f047d3cc179838943a2dd857096dad95c30c47f673da3fa9b23",
"Addresses": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
"Endpoints": [
"192.0.2.1:43512",
"198.51.100.1:43512",
"198.51.100.2:43512",
"198.51.100.3:43512"
],
"Hostinfo": {"Hostname": "ivysaur", "Services": [
{"Proto": "peerapi4", "Port": 38161},
{"Proto": "peerapi6", "Port": 38161},
{"Proto": "peerapi4", "Port": 62496},
{"Proto": "peerapi6", "Port": 62496},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T17:19:50.114365649Z",
"Created": "2026-10-30T16:45:57.803108484Z",
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-admin": null,
"https://tailscale.com/cap/ssh": null,
@@ -2840,6 +2906,7 @@
"ComputedNameWithHost": "ivysaur"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-admin",
"https://tailscale.com/cap/ssh",
@@ -2850,8 +2917,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:a3f4dbc28e9c5d3d8466164e9cba5b922993b0dedb6c7cdcdc3ba96ec7184e31",
"MachineKey": "mkey:1e744de6d1a6719f60ae29ceb1c7e0eaba7586368773ab5ce89179d229683e0c",
"NodeKey": "nodekey:41ac8fc9613bbb175196e0ede773d5b33e5457e621723f241fd51bfd4399d815",
"MachineKey": "mkey:bfefb79228107ad56d54fdd8f19b6055086d618c899e2fda71b4030ecdc30151",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [{
@@ -3689,9 +3756,11 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {
"4538565228176803": {"ID": 4538565228176803, "LoginName": "thor@example.org", "DisplayName": "thor"}
}
"UserProfiles": {"4538565228176803": {
"ID": 4538565228176803,
"LoginName": "thor@example.org",
"DisplayName": "thor"
}}
}}, "kakuna": {"packet_filter_rules": [{
"SrcIPs": ["100.90.199.68"],
"DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]
@@ -3707,24 +3776,30 @@
}], "netmap": {
"Cached": false,
"SelfNode": {
"ID": 7632609219168387,
"StableID": "n2rD4hhpb221CNTRL",
"ID": 5615643167056490,
"StableID": "n5zkoZRLrk11CNTRL",
"Name": "kakuna.tail78f774.ts.net.",
"User": 7632609219168387,
"Key": "nodekey:80afa74ee32bd7773054c42688dcda806de6dc9d3a3991e2a43de11f988fab24",
"DiscoKey": "discokey:3295cfd588657dc0b5807211a4f3c84f584e4df7c5880b8842aa215076a6626e",
"Addresses": ["100.79.171.37/32", "fd7a:115c:a1e0::9837:ab25/128"],
"AllowedIPs": ["100.79.171.37/32", "fd7a:115c:a1e0::9837:ab25/128"],
"Endpoints": ["77.164.248.136:59735", "10.65.0.27:59735", "172.17.0.1:59735"],
"User": 5615643167056490,
"Key": "nodekey:5c87c54e5823f15eefe264ad042454efb1f5de63ad9d034f6e1f0068c4a55071",
"DiscoKey": "discokey:baf1d8682b4b5e8c9b7c573545ca82439277f5010012af6b809efa382846f027",
"Addresses": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
"Endpoints": [
"192.0.2.1:54168",
"198.51.100.1:54168",
"198.51.100.2:54168",
"198.51.100.3:54168"
],
"Hostinfo": {"Hostname": "kakuna", "RequestTags": ["tag:prod"], "Services": [
{"Proto": "peerapi4", "Port": 41610},
{"Proto": "peerapi6", "Port": 41610},
{"Proto": "peerapi4", "Port": 51523},
{"Proto": "peerapi6", "Port": 51523},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T17:19:49.045490405Z",
"Created": "2026-10-30T16:45:56.702704891Z",
"Tags": ["tag:prod"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -3739,6 +3814,7 @@
"ComputedNameWithHost": "kakuna"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -3749,8 +3825,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:80afa74ee32bd7773054c42688dcda806de6dc9d3a3991e2a43de11f988fab24",
"MachineKey": "mkey:06ef30a25d8a12a6cce109a632c5ce9e7f7bc9a06cda1d6d4b166ed377fcc25c",
"NodeKey": "nodekey:5c87c54e5823f15eefe264ad042454efb1f5de63ad9d034f6e1f0068c4a55071",
"MachineKey": "mkey:a637f0e39907c5dabea493c98cee80d0543dcf77094b070872727b3d56f5ad22",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [{
@@ -4588,8 +4664,8 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {"7632609219168387": {
"ID": 7632609219168387,
"UserProfiles": {"5615643167056490": {
"ID": 5615643167056490,
"LoginName": "kakuna.tail78f774.ts.net",
"DisplayName": "kakuna"
}}
@@ -4608,30 +4684,36 @@
}], "netmap": {
"Cached": false,
"SelfNode": {
"ID": 5927131577569719,
"StableID": "n4K51NhQHo11CNTRL",
"ID": 10941247304015,
"StableID": "np9MZfQx5111CNTRL",
"Name": "squirtle.tail78f774.ts.net.",
"User": 5927131577569719,
"Key": "nodekey:a9ae141ad464ed57246630e62095259f720b2ca0670d0aa535b4ddf13cf7411e",
"DiscoKey": "discokey:2ac91af0c6a9ee2653a08b4dbedf736efcb24a9c63308be3c7c7b04b1cc8af50",
"Addresses": ["100.119.65.31/32", "fd7a:115c:a1e0::3c37:411f/128"],
"AllowedIPs": ["100.119.65.31/32", "fd7a:115c:a1e0::3c37:411f/128", "10.33.0.0/16"],
"Endpoints": ["77.164.248.136:36304", "10.65.0.27:36304", "172.17.0.1:36304"],
"User": 10941247304015,
"Key": "nodekey:5e7ced8a3d6f9433b2707c117e34f17cf17f98beb7031cfa4a7fcb80ab31e744",
"DiscoKey": "discokey:b2655b3f9e3829af8d20fc39a568debb157db71c911ed50e80ca255d5ae27562",
"Addresses": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128", "10.33.0.0/16"],
"Endpoints": [
"192.0.2.1:34319",
"198.51.100.1:34319",
"198.51.100.2:34319",
"198.51.100.3:34319"
],
"Hostinfo": {
"Hostname": "squirtle",
"RoutableIPs": ["10.33.0.0/16"],
"RequestTags": ["tag:router"],
"Services": [
{"Proto": "peerapi4", "Port": 54390},
{"Proto": "peerapi6", "Port": 54390},
{"Proto": "peerapi4", "Port": 43119},
{"Proto": "peerapi6", "Port": 43119},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]
},
"Created": "2026-04-10T17:19:47.956469683Z",
"Created": "2026-10-30T16:45:55.63152399Z",
"Tags": ["tag:router"],
"PrimaryRoutes": ["10.33.0.0/16"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -4646,6 +4728,7 @@
"ComputedNameWithHost": "squirtle"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -4656,8 +4739,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:a9ae141ad464ed57246630e62095259f720b2ca0670d0aa535b4ddf13cf7411e",
"MachineKey": "mkey:df2ae09d3e085b48fed24b3b67b2fe69e25d6be00862f563959fcb48f42b5460",
"NodeKey": "nodekey:5e7ced8a3d6f9433b2707c117e34f17cf17f98beb7031cfa4a7fcb80ab31e744",
"MachineKey": "mkey:c65e5c0ffc6205154cc68b92b5f6b7f36a35f7857ff73dc3ea61cd738cfa0b6e",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [{
@@ -5495,8 +5578,8 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {"5927131577569719": {
"ID": 5927131577569719,
"UserProfiles": {"10941247304015": {
"ID": 10941247304015,
"LoginName": "squirtle.tail78f774.ts.net",
"DisplayName": "squirtle"
}}
@@ -5515,24 +5598,30 @@
}], "netmap": {
"Cached": false,
"SelfNode": {
"ID": 1902734285981639,
"StableID": "naJCFzbkrF11CNTRL",
"ID": 5952636719758725,
"StableID": "nzHY52gxUo11CNTRL",
"Name": "venusaur.tail78f774.ts.net.",
"User": 3982058329734709,
"Key": "nodekey:ae4ecc8b6145c25364d2f53d1d5afa1dcfe5c9c7fccbe2e54dd3dd8a49d41b18",
"KeyExpiry": "2026-10-07T17:19:50Z",
"DiscoKey": "discokey:af177fc20a90683ddf7c309708196c4d7bd3e4f39a20179ee6cada6af9904e47",
"Addresses": ["100.84.27.25/32", "fd7a:115c:a1e0::4937:1b19/128"],
"AllowedIPs": ["100.84.27.25/32", "fd7a:115c:a1e0::4937:1b19/128"],
"Endpoints": ["77.164.248.136:52448", "10.65.0.27:52448", "172.17.0.1:52448"],
"Key": "nodekey:c1e1a1f935ea701ccb4c4fff09fb5db0b421d5d03411e848e70693f14be4e06e",
"KeyExpiry": "2027-04-28T16:45:58Z",
"DiscoKey": "discokey:eee3240d5e5a097bd990edea825959b17def278b62bcde381f348303f76c6543",
"Addresses": ["100.64.0.18/32", "fd7a:115c:a1e0::12/128"],
"AllowedIPs": ["100.64.0.18/32", "fd7a:115c:a1e0::12/128"],
"Endpoints": [
"192.0.2.1:40948",
"198.51.100.1:40948",
"198.51.100.2:40948",
"198.51.100.3:40948"
],
"Hostinfo": {"Hostname": "venusaur", "Services": [
{"Proto": "peerapi4", "Port": 48164},
{"Proto": "peerapi6", "Port": 48164},
{"Proto": "peerapi4", "Port": 42394},
{"Proto": "peerapi6", "Port": 42394},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T17:19:50.650817409Z",
"Created": "2026-10-30T16:45:58.339772552Z",
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-admin": null,
"https://tailscale.com/cap/ssh": null,
@@ -5547,6 +5636,7 @@
"ComputedNameWithHost": "venusaur"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-admin",
"https://tailscale.com/cap/ssh",
@@ -5557,8 +5647,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:ae4ecc8b6145c25364d2f53d1d5afa1dcfe5c9c7fccbe2e54dd3dd8a49d41b18",
"MachineKey": "mkey:a7ca4b1aa93cb84bfeb52b43b36df298ccb60fa9c0a0163b3df5d0a7da94f25d",
"NodeKey": "nodekey:c1e1a1f935ea701ccb4c4fff09fb5db0b421d5d03411e848e70693f14be4e06e",
"MachineKey": "mkey:41b7132ffba6b1a019190cd3a14b17f263344aaecb6f06e49dde990a0c01eb69",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [{
@@ -6416,24 +6506,30 @@
}], "netmap": {
"Cached": false,
"SelfNode": {
"ID": 3403573479591587,
"StableID": "nkFJQ27VaT11CNTRL",
"ID": 784823520619015,
"StableID": "ngBt12zS8711CNTRL",
"Name": "weedle.tail78f774.ts.net.",
"User": 3403573479591587,
"Key": "nodekey:b0abadc05d05ea27e4fac842ee88d216943dee5a66034e8c490df2ece35cfd61",
"DiscoKey": "discokey:372475fa85dd5e99a5420b5b870cac23c448c4ef6a632b572a56d768e59d9303",
"Addresses": ["100.92.253.98/32", "fd7a:115c:a1e0::e337:fd62/128"],
"AllowedIPs": ["100.92.253.98/32", "fd7a:115c:a1e0::e337:fd62/128"],
"Endpoints": ["77.164.248.136:47681", "10.65.0.27:47681", "172.17.0.1:47681"],
"User": 784823520619015,
"Key": "nodekey:9f241c3387e959df34faf19d125aee5dd9affae33dd25182ea225ea2ee07b54f",
"DiscoKey": "discokey:c75f9e7263e6129e8c93c16b081c1e11ae784088434fd3855be3f453652bdf06",
"Addresses": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
"Endpoints": [
"192.0.2.1:36156",
"198.51.100.1:36156",
"198.51.100.2:36156",
"198.51.100.3:36156"
],
"Hostinfo": {"Hostname": "weedle", "RequestTags": ["tag:client"], "Services": [
{"Proto": "peerapi4", "Port": 37186},
{"Proto": "peerapi6", "Port": 37186},
{"Proto": "peerapi4", "Port": 63957},
{"Proto": "peerapi6", "Port": 63957},
{"Proto": "peerapi-dns-proxy", "Port": 1}
]},
"Created": "2026-04-10T17:19:48.496141899Z",
"Created": "2026-10-30T16:45:56.170041177Z",
"Tags": ["tag:client"],
"MachineAuthorized": true,
"CapMap": {
"default-auto-update": [false],
"https://tailscale.com/cap/file-sharing": null,
"https://tailscale.com/cap/is-owner": null,
"https://tailscale.com/cap/ssh": null,
@@ -6448,6 +6544,7 @@
"ComputedNameWithHost": "weedle"
},
"AllCaps": [
"default-auto-update",
"https://tailscale.com/cap/file-sharing",
"https://tailscale.com/cap/is-owner",
"https://tailscale.com/cap/ssh",
@@ -6458,8 +6555,8 @@
"store-appc-routes",
"tailnet-display-name"
],
"NodeKey": "nodekey:b0abadc05d05ea27e4fac842ee88d216943dee5a66034e8c490df2ece35cfd61",
"MachineKey": "mkey:7785e586ae88f66fa5a424454d41b7c1da52fe244bdd02c70aeffa213ff39006",
"NodeKey": "nodekey:9f241c3387e959df34faf19d125aee5dd9affae33dd25182ea225ea2ee07b54f",
"MachineKey": "mkey:bd4306ed4e52c89db7f45f58eafe1795aee40be075f733541bd680b19db18f2c",
"Peers": [],
"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
"PacketFilter": [{
@@ -7297,8 +7394,8 @@
"TKAHead": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"Domain": "odin@example.com",
"DomainAuditLogID": "",
"UserProfiles": {"3403573479591587": {
"ID": 3403573479591587,
"UserProfiles": {"784823520619015": {
"ID": 784823520619015,
"LoginName": "weedle.tail78f774.ts.net",
"DisplayName": "weedle"
}}
hscontrol/policy/v2/testdata/issue_3212/routes-b17-autogroup-internet-with-exit-autoapprover.hujson
Vendored
+1085 -215
View File
File diff suppressed because it is too large. Load diff
hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c1-funnel.hujson
Generated Vendored
+1908 -495
View File
File diff suppressed because it is too large. Load diff
hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c5-taildrive-share.hujson
Generated Vendored
+1906 -488
View File
File diff suppressed because it is too large. Load diff
hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-target-a1-wildcard.hujson
Generated Vendored
+2933 -1514
View File
File diff suppressed because it is too large. Load diff