mirror of
https://github.com/juanfont/headscale.git
synced 2026-07-10 09:58:18 +09:00
testdata: recapture all golden files with 19-node tailnet and netmap
Recapture all golden test data from Tailscale SaaS with: - All 19 nodes online (12 routes + 7 grant v2 topology) - All routes approved via API - Trimmed netmap data per capture (Peers with AllowedIPs, PrimaryRoutes, Tags; SelfNode with RoutableIPs) - 20-30s propagation wait for correct data Topology expanded from netmap peers to include all 19 nodes that contribute to filter rule SrcIPs. Each node has routable_ips and approved_routes derived from netmap SelfNode data. New files: b11-b16 (autogroup:internet), i8-i9 (IPv6 fd00:1::/64), pa1-pa2 (partial route approval), V31-SLOW. Updates #3157
This commit is contained in:
Kristoffer Dalby
+476
-149
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['autogroup:member'] dst=['*:*']
|
||||
//
|
||||
// Expected: Rules on 8 of 8 nodes
|
||||
// Nodes with filter rules: 1 of 8
|
||||
{
|
||||
"test_id": "ACL-A01",
|
||||
"timestamp": "2026-04-05T19:54:36Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_a01.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -67,6 +70,132 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"multi-exit-router": {
|
||||
"hostname": "multi-exit-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.105.127.107",
|
||||
"ipv6": "fd7a:115c:a1e0::ad37:7f6b",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
@@ -74,16 +203,54 @@
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
"IP": "0.0.0.0-9.255.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "11.0.0.0-100.63.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.128.0.0-169.253.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "169.255.0.0-172.15.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "172.32.0.0-192.167.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "192.169.0.0-255.255.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "2000::-3fff:ffff:ffff:ffff:ffff:ffff:ffff:ffff",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
@@ -91,168 +258,328 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "0.0.0.0-9.255.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "11.0.0.0-100.63.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.128.0.0-169.253.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "169.255.0.0-172.15.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "172.32.0.0-192.167.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "192.169.0.0-255.255.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "2000::-3fff:ffff:ffff:ffff:ffff:ffff:ffff:ffff",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-exit-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+1205
-181
File diff suppressed because it is too large
Load Diff
+482
-9
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['autogroup:member', 'tag:client'] dst=['tag:server:22']
|
||||
//
|
||||
// Expected: Rules on tagged-server
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-A03",
|
||||
"timestamp": "2026-04-05T19:55:17Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_a03.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -68,20 +71,280 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
@@ -113,16 +376,226 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+700
-69
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['*'] dst=['autogroup:self:*']
|
||||
//
|
||||
// Expected: Rules on user-kris, user-mon, user1
|
||||
// Nodes with filter rules: 1 of 8
|
||||
{
|
||||
"test_id": "ACL-A04",
|
||||
"timestamp": "2026-04-05T19:55:38Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_a04.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -67,67 +70,193 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"multi-exit-router": {
|
||||
"hostname": "multi-exit-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.105.127.107",
|
||||
"ipv6": "fd7a:115c:a1e0::ad37:7f6b",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.110.121.96",
|
||||
"fd7a:115c:a1e0::1737:7960"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.110.121.96",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::1737:7960",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.90.82",
|
||||
"IP": "0.0.0.0-9.255.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"IP": "11.0.0.0-100.63.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.128.0.0-169.253.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "169.255.0.0-172.15.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "172.32.0.0-192.167.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "192.169.0.0-255.255.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "2000::-3fff:ffff:ffff:ffff:ffff:ffff:ffff:ffff",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
@@ -135,33 +264,535 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "0.0.0.0-9.255.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "11.0.0.0-100.63.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.128.0.0-169.253.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "169.255.0.0-172.15.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "172.32.0.0-192.167.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "192.169.0.0-255.255.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "2000::-3fff:ffff:ffff:ffff:ffff:ffff:ffff:ffff",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-exit-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-exit-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-exit-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-exit-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+276
-9
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['*'] dst=['autogroup:internet:*']
|
||||
//
|
||||
// Expected: No filter rules
|
||||
// Nodes with filter rules: 0 of 8
|
||||
{
|
||||
"test_id": "ACL-A05",
|
||||
"timestamp": "2026-04-05T19:55:59Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_a05.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -67,32 +70,296 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+639
-81
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['*'] dst=['autogroup:member:*']
|
||||
//
|
||||
// Expected: Rules on user-kris, user-mon, user1
|
||||
// Nodes with filter rules: 1 of 8
|
||||
{
|
||||
"test_id": "ACL-A06",
|
||||
"timestamp": "2026-04-05T19:56:20Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_a06.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -67,107 +70,662 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"multi-exit-router": {
|
||||
"hostname": "multi-exit-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.105.127.107",
|
||||
"ipv6": "fd7a:115c:a1e0::ad37:7f6b",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "0.0.0.0-9.255.255.255",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "11.0.0.0-100.63.255.255",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.128.0.0-169.253.255.255",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "169.255.0.0-172.15.255.255",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "172.32.0.0-192.167.255.255",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "192.169.0.0-255.255.255.255",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "2000::-3fff:ffff:ffff:ffff:ffff:ffff:ffff:ffff",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
],
|
||||
"IPProto": [
|
||||
6
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "0.0.0.0-9.255.255.255",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "11.0.0.0-100.63.255.255",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.128.0.0-169.253.255.255",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "169.255.0.0-172.15.255.255",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "172.32.0.0-192.167.255.255",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "192.169.0.0-255.255.255.255",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "2000::-3fff:ffff:ffff:ffff:ffff:ffff:ffff:ffff",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
],
|
||||
"IPProto": [
|
||||
6
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.33.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.110.121.96",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::1737:7960",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-exit-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.33.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.90.82",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-exit-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.33.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-exit-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+462
-47
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['*'] dst=['autogroup:self:*', 'tag:server:22']
|
||||
//
|
||||
// Expected: Rules on tagged-server, user-kris, user-mon, user1
|
||||
// Nodes with filter rules: 1 of 8
|
||||
{
|
||||
"test_id": "ACL-A07",
|
||||
"timestamp": "2026-04-05T19:56:40Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_a07.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -68,28 +71,114 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
@@ -108,11 +197,29 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": [
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.110.121.96",
|
||||
@@ -134,11 +241,7 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": [
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
@@ -161,33 +264,345 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.110.121.96",
|
||||
"fd7a:115c:a1e0::1737:7960"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.110.121.96",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::1737:7960",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.90.82",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+3183
-9
File diff suppressed because it is too large
Load Diff
+273
-75
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['autogroup:member'] dst=['autogroup:self:*']
|
||||
//
|
||||
// Expected: Rules on user-kris, user-mon, user1
|
||||
// Nodes with filter rules: 0 of 8
|
||||
{
|
||||
"test_id": "ACL-A09",
|
||||
"timestamp": "2026-04-05T19:57:22Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_a09.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -67,101 +70,296 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.110.121.96",
|
||||
"fd7a:115c:a1e0::1737:7960"
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.110.121.96",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::1737:7960",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.90.82",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+275
-31
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['kratail2tid@passkey'] dst=['autogroup:self:*']
|
||||
//
|
||||
// Expected: Rules on user1
|
||||
// Nodes with filter rules: 0 of 8
|
||||
{
|
||||
"test_id": "ACL-A10",
|
||||
"timestamp": "2026-04-05T19:57:43Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_a10.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -67,55 +70,296 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+413
-27
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['group:admins'] dst=['autogroup:self:*']
|
||||
//
|
||||
// Expected: Rules on user1
|
||||
// Nodes with filter rules: 1 of 8
|
||||
{
|
||||
"test_id": "ACL-A11",
|
||||
"timestamp": "2026-04-05T19:58:04Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_a11.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -67,47 +70,166 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
"100.107.162.14",
|
||||
"100.116.18.24",
|
||||
"100.124.195.93",
|
||||
"100.77.135.18",
|
||||
"fd7a:115c:a1e0::4b37:8712",
|
||||
"fd7a:115c:a1e0::7837:c35d",
|
||||
"fd7a:115c:a1e0::a237:a20e",
|
||||
"fd7a:115c:a1e0::ff37:1218"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"IP": "100.124.195.93",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"IP": "fd7a:115c:a1e0::7837:c35d",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.116.18.24",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::ff37:1218",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.107.162.14",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::a237:a20e",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.77.135.18",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::4b37:8712",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
@@ -115,7 +237,271 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.107.162.14",
|
||||
"100.116.18.24",
|
||||
"100.124.195.93",
|
||||
"100.77.135.18",
|
||||
"fd7a:115c:a1e0::4b37:8712",
|
||||
"fd7a:115c:a1e0::7837:c35d",
|
||||
"fd7a:115c:a1e0::a237:a20e",
|
||||
"fd7a:115c:a1e0::ff37:1218"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.124.195.93",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::7837:c35d",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.116.18.24",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::ff37:1218",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.107.162.14",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::a237:a20e",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.77.135.18",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::4b37:8712",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+479
-9
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['*'] dst=['autogroup:self:22']
|
||||
//
|
||||
// Expected: Rules on user-kris, user-mon, user1
|
||||
// Nodes with filter rules: 4 of 8
|
||||
{
|
||||
"test_id": "ACL-A12",
|
||||
"timestamp": "2026-04-05T19:58:25Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_a12.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -67,23 +70,364 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.110.121.96",
|
||||
"fd7a:115c:a1e0::1737:7960"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.110.121.96",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::1737:7960",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.90.82",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.110.121.96",
|
||||
"fd7a:115c:a1e0::1737:7960"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.110.121.96",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::1737:7960",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.90.82",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": [
|
||||
@@ -109,7 +453,49 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.110.121.96",
|
||||
"fd7a:115c:a1e0::1737:7960"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.110.121.96",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::1737:7960",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": [
|
||||
@@ -135,7 +521,49 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.90.82",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": [
|
||||
@@ -161,7 +589,49 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+657
-45
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['*'] dst=['autogroup:self:80-443']
|
||||
//
|
||||
// Expected: Rules on user-kris, user-mon, user1
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-A13",
|
||||
"timestamp": "2026-04-05T19:58:45Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_a13.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -67,101 +70,710 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"multi-exit-router": {
|
||||
"hostname": "multi-exit-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.105.127.107",
|
||||
"ipv6": "fd7a:115c:a1e0::ad37:7f6b",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.110.121.96",
|
||||
"fd7a:115c:a1e0::1737:7960"
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.110.121.96",
|
||||
"IP": "0.0.0.0-9.255.255.255",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 443
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::1737:7960",
|
||||
"IP": "11.0.0.0-100.63.255.255",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 443
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.128.0.0-169.253.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "169.255.0.0-172.15.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "172.32.0.0-192.167.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "192.169.0.0-255.255.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "2000::-3fff:ffff:ffff:ffff:ffff:ffff:ffff:ffff",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": [
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.90.82",
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 443
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 443
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "0.0.0.0-9.255.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "11.0.0.0-100.63.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.128.0.0-169.253.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "169.255.0.0-172.15.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "172.32.0.0-192.167.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "192.169.0.0-255.255.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "2000::-3fff:ffff:ffff:ffff:ffff:ffff:ffff:ffff",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-exit-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 443
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 443
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+593
-159
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['*'] dst=['autogroup:self:22,80,443']
|
||||
//
|
||||
// Expected: Rules on user-kris, user-mon, user1
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-A14",
|
||||
"timestamp": "2026-04-05T19:59:06Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_a14.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -67,185 +70,616 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"multi-exit-router": {
|
||||
"hostname": "multi-exit-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.105.127.107",
|
||||
"ipv6": "fd7a:115c:a1e0::ad37:7f6b",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"10.33.0.0/16",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"10.33.0.0/16",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "0.0.0.0-9.255.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "11.0.0.0-100.63.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.128.0.0-169.253.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "169.255.0.0-172.15.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "172.32.0.0-192.167.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "192.169.0.0-255.255.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "2000::-3fff:ffff:ffff:ffff:ffff:ffff:ffff:ffff",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "0.0.0.0-9.255.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "11.0.0.0-100.63.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.128.0.0-169.253.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "169.255.0.0-172.15.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "172.32.0.0-192.167.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "192.169.0.0-255.255.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "2000::-3fff:ffff:ffff:ffff:ffff:ffff:ffff:ffff",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "10.33.0.0/16",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "10.33.0.0/16",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "big-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128",
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-exit-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128",
|
||||
"0.0.0.0/0",
|
||||
"10.33.0.0/16",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.110.121.96",
|
||||
"fd7a:115c:a1e0::1737:7960"
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.110.121.96",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.110.121.96",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.110.121.96",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::1737:7960",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::1737:7960",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::1737:7960",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.90.82",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.103.90.82",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.103.90.82",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+580
-241
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['autogroup:member', 'autogroup:tagged'] dst=['*:*']
|
||||
//
|
||||
// Expected: Rules on 8 of 8 nodes
|
||||
// Nodes with filter rules: 0 of 8
|
||||
{
|
||||
"test_id": "ACL-A15",
|
||||
"timestamp": "2026-04-05T19:59:27Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_a15.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -68,272 +71,608 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"exit-b": {
|
||||
"hostname": "exit-b",
|
||||
"tags": [
|
||||
"tag:exit-b"
|
||||
],
|
||||
"ipv4": "100.116.18.24",
|
||||
"ipv6": "fd7a:115c:a1e0::ff37:1218",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"exit-a": {
|
||||
"hostname": "exit-a",
|
||||
"tags": [
|
||||
"tag:exit-a"
|
||||
],
|
||||
"ipv4": "100.124.195.93",
|
||||
"ipv6": "fd7a:115c:a1e0::7837:c35d",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"100.103.90.82",
|
||||
"100.108.74.26",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.85.66.106",
|
||||
"100.90.199.68",
|
||||
"100.92.142.61",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::3e37:8e3d",
|
||||
"fd7a:115c:a1e0::5b37:80f",
|
||||
"fd7a:115c:a1e0::7c37:426a",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::b901:4a87",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "exit-b.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-a.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-a"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"100.103.90.82",
|
||||
"100.108.74.26",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.85.66.106",
|
||||
"100.90.199.68",
|
||||
"100.92.142.61",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::3e37:8e3d",
|
||||
"fd7a:115c:a1e0::5b37:80f",
|
||||
"fd7a:115c:a1e0::7c37:426a",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::b901:4a87",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "exit-b.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-a.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-a"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"100.103.90.82",
|
||||
"100.108.74.26",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.85.66.106",
|
||||
"100.90.199.68",
|
||||
"100.92.142.61",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::3e37:8e3d",
|
||||
"fd7a:115c:a1e0::5b37:80f",
|
||||
"fd7a:115c:a1e0::7c37:426a",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::b901:4a87",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "exit-b.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-a.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-a"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"100.103.90.82",
|
||||
"100.108.74.26",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.85.66.106",
|
||||
"100.90.199.68",
|
||||
"100.92.142.61",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::3e37:8e3d",
|
||||
"fd7a:115c:a1e0::5b37:80f",
|
||||
"fd7a:115c:a1e0::7c37:426a",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::b901:4a87",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "exit-b.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-a.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-a"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"100.103.90.82",
|
||||
"100.108.74.26",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.85.66.106",
|
||||
"100.90.199.68",
|
||||
"100.92.142.61",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::3e37:8e3d",
|
||||
"fd7a:115c:a1e0::5b37:80f",
|
||||
"fd7a:115c:a1e0::7c37:426a",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::b901:4a87",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "exit-b.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-a.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-a"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"100.103.90.82",
|
||||
"100.108.74.26",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.85.66.106",
|
||||
"100.90.199.68",
|
||||
"100.92.142.61",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::3e37:8e3d",
|
||||
"fd7a:115c:a1e0::5b37:80f",
|
||||
"fd7a:115c:a1e0::7c37:426a",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::b901:4a87",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "exit-b.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-a.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-a"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"100.103.90.82",
|
||||
"100.108.74.26",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.85.66.106",
|
||||
"100.90.199.68",
|
||||
"100.92.142.61",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::3e37:8e3d",
|
||||
"fd7a:115c:a1e0::5b37:80f",
|
||||
"fd7a:115c:a1e0::7c37:426a",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::b901:4a87",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "exit-b.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-a.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-a"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"100.103.90.82",
|
||||
"100.108.74.26",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.85.66.106",
|
||||
"100.90.199.68",
|
||||
"100.92.142.61",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::3e37:8e3d",
|
||||
"fd7a:115c:a1e0::5b37:80f",
|
||||
"fd7a:115c:a1e0::7c37:426a",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::b901:4a87",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "exit-b.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-a.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-a"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+308
-45
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['autogroup:member', 'autogroup:tagged'] dst=['tag:server:22']
|
||||
//
|
||||
// Expected: Rules on tagged-server
|
||||
// Nodes with filter rules: 0 of 8
|
||||
{
|
||||
"test_id": "ACL-A16",
|
||||
"timestamp": "2026-04-05T19:59:47Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_a16.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -68,69 +71,329 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "big-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128",
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"100.103.90.82",
|
||||
"100.108.74.26",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.85.66.106",
|
||||
"100.90.199.68",
|
||||
"100.92.142.61",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::3e37:8e3d",
|
||||
"fd7a:115c:a1e0::5b37:80f",
|
||||
"fd7a:115c:a1e0::7c37:426a",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::b901:4a87",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+2282
-9
File diff suppressed because it is too large
Load Diff
+462
-117
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['internal', 'subnet24'] dst=['*:*']
|
||||
//
|
||||
// Expected: Rules on 8 of 8 nodes
|
||||
// Nodes with filter rules: 1 of 8
|
||||
{
|
||||
"test_id": "ACL-AH01",
|
||||
"timestamp": "2026-04-05T20:00:29Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_ah01.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -68,6 +71,98 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
@@ -75,12 +170,99 @@
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"192.168.1.0/24"
|
||||
"100.107.162.14",
|
||||
"100.109.43.124",
|
||||
"100.116.18.24",
|
||||
"100.124.195.93",
|
||||
"100.65.172.123",
|
||||
"100.77.135.18",
|
||||
"fd7a:115c:a1e0::4b37:8712",
|
||||
"fd7a:115c:a1e0::5a37:ac7c",
|
||||
"fd7a:115c:a1e0::7837:c35d",
|
||||
"fd7a:115c:a1e0::a237:a20e",
|
||||
"fd7a:115c:a1e0::a537:2b7c",
|
||||
"fd7a:115c:a1e0::ff37:1218"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
"IP": "100.107.162.14",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::a237:a20e",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.77.135.18",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::4b37:8712",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.124.195.93",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::7837:c35d",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.116.18.24",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::ff37:1218",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.109.43.124",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::a537:2b7c",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.65.172.123",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5a37:ac7c",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
@@ -88,140 +270,303 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.107.162.14",
|
||||
"100.109.43.124",
|
||||
"100.116.18.24",
|
||||
"100.124.195.93",
|
||||
"100.65.172.123",
|
||||
"100.77.135.18",
|
||||
"fd7a:115c:a1e0::4b37:8712",
|
||||
"fd7a:115c:a1e0::5a37:ac7c",
|
||||
"fd7a:115c:a1e0::7837:c35d",
|
||||
"fd7a:115c:a1e0::a237:a20e",
|
||||
"fd7a:115c:a1e0::a537:2b7c",
|
||||
"fd7a:115c:a1e0::ff37:1218"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.107.162.14",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::a237:a20e",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.77.135.18",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::4b37:8712",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.124.195.93",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::7837:c35d",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.116.18.24",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::ff37:1218",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.109.43.124",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::a537:2b7c",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.65.172.123",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5a37:ac7c",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"192.168.1.0/24"
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"192.168.1.0/24"
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"192.168.1.0/24"
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"192.168.1.0/24"
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"192.168.1.0/24"
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"192.168.1.0/24"
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"192.168.1.0/24"
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+507
-9
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['internal', '100.108.74.26'] dst=['tag:server:22']
|
||||
//
|
||||
// Expected: Rules on tagged-server
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-AH02",
|
||||
"timestamp": "2026-04-05T20:00:50Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_ah02.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -68,20 +71,325 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"router-a": {
|
||||
"hostname": "router-a",
|
||||
"tags": [
|
||||
"tag:router-a"
|
||||
],
|
||||
"ipv4": "100.109.43.124",
|
||||
"ipv6": "fd7a:115c:a1e0::a537:2b7c",
|
||||
"routable_ips": [
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.44.0.0/16"
|
||||
]
|
||||
},
|
||||
"router-b": {
|
||||
"hostname": "router-b",
|
||||
"tags": [
|
||||
"tag:router-b"
|
||||
],
|
||||
"ipv4": "100.65.172.123",
|
||||
"ipv6": "fd7a:115c:a1e0::5a37:ac7c",
|
||||
"routable_ips": [
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.55.0.0/16"
|
||||
]
|
||||
},
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"multi-exit-router": {
|
||||
"hostname": "multi-exit-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.105.127.107",
|
||||
"ipv6": "fd7a:115c:a1e0::ad37:7f6b",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"100.108.74.26"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"100.108.74.26"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
@@ -107,16 +415,206 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"100.108.74.26"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "router-a.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.109.43.124/32",
|
||||
"fd7a:115c:a1e0::a537:2b7c/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.109.43.124/32",
|
||||
"fd7a:115c:a1e0::a537:2b7c/128",
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router-a"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "router-b.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.65.172.123/32",
|
||||
"fd7a:115c:a1e0::5a37:ac7c/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.65.172.123/32",
|
||||
"fd7a:115c:a1e0::5a37:ac7c/128",
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "big-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128",
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-exit-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128",
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+1964
-9
File diff suppressed because it is too large
Load Diff
+504
-9
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['internal', '10.0.0.0/8'] dst=['tag:server:22']
|
||||
//
|
||||
// Expected: Rules on tagged-server
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-AH04",
|
||||
"timestamp": "2026-04-05T20:01:31Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_ah04.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -68,20 +71,323 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"router-a": {
|
||||
"hostname": "router-a",
|
||||
"tags": [
|
||||
"tag:router-a"
|
||||
],
|
||||
"ipv4": "100.109.43.124",
|
||||
"ipv6": "fd7a:115c:a1e0::a537:2b7c",
|
||||
"routable_ips": [
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.44.0.0/16"
|
||||
]
|
||||
},
|
||||
"router-b": {
|
||||
"hostname": "router-b",
|
||||
"tags": [
|
||||
"tag:router-b"
|
||||
],
|
||||
"ipv4": "100.65.172.123",
|
||||
"ipv6": "fd7a:115c:a1e0::5a37:ac7c",
|
||||
"routable_ips": [
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.55.0.0/16"
|
||||
]
|
||||
},
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"multi-exit-router": {
|
||||
"hostname": "multi-exit-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.105.127.107",
|
||||
"ipv6": "fd7a:115c:a1e0::ad37:7f6b",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
@@ -106,16 +412,205 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "router-a.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.109.43.124/32",
|
||||
"fd7a:115c:a1e0::a537:2b7c/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.109.43.124/32",
|
||||
"fd7a:115c:a1e0::a537:2b7c/128",
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router-a"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "router-b.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.65.172.123/32",
|
||||
"fd7a:115c:a1e0::5a37:ac7c/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.65.172.123/32",
|
||||
"fd7a:115c:a1e0::5a37:ac7c/128",
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "big-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128",
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-exit-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128",
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+1400
-11
File diff suppressed because it is too large
Load Diff
+1400
-11
File diff suppressed because it is too large
Load Diff
+462
-10
@@ -1,13 +1,16 @@
|
||||
// ACL-AR01
|
||||
//
|
||||
// ACLs:
|
||||
// ACLs: 2 rules
|
||||
// accept: src=['tag:client'] dst=['tag:server:22']
|
||||
// accept: src=['tag:client'] dst=['tag:server:80,443']
|
||||
//
|
||||
// Expected: Rules on tagged-server
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-AR01",
|
||||
"timestamp": "2026-04-05T20:02:34Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_ar01.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -78,20 +81,324 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
@@ -145,16 +452,161 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+1072
-11
File diff suppressed because it is too large
Load Diff
+462
-10
@@ -1,14 +1,17 @@
|
||||
// ACL-AR03
|
||||
//
|
||||
// ACLs:
|
||||
// ACLs: 3 rules
|
||||
// accept: src=['tag:client'] dst=['tag:server:22']
|
||||
// accept: src=['tag:client'] dst=['tag:server:80']
|
||||
// accept: src=['tag:client'] dst=['tag:server:443']
|
||||
//
|
||||
// Expected: Rules on tagged-server
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-AR03",
|
||||
"timestamp": "2026-04-05T20:03:15Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_ar03.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -88,20 +91,324 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
@@ -155,16 +462,161 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+676
-11
@@ -1,14 +1,17 @@
|
||||
// ACL-AR04
|
||||
//
|
||||
// ACLs:
|
||||
// ACLs: 3 rules
|
||||
// accept: src=['tag:client'] dst=['tag:server:22']
|
||||
// accept: src=['tag:prod'] dst=['tag:server:22']
|
||||
// accept: src=['tag:router'] dst=['tag:server:22']
|
||||
//
|
||||
// Expected: Rules on tagged-server
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-AR04",
|
||||
"timestamp": "2026-04-05T20:03:36Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_ar04.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -88,20 +91,432 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"multi-exit-router": {
|
||||
"hostname": "multi-exit-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.105.127.107",
|
||||
"ipv6": "fd7a:115c:a1e0::ad37:7f6b",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"fd7a:115c:a1e0::5b37:80f"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.105.127.107",
|
||||
"100.119.241.111",
|
||||
"100.92.142.61",
|
||||
"100.97.174.21",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::3e37:8e3d",
|
||||
"fd7a:115c:a1e0::5137:ae15",
|
||||
"fd7a:115c:a1e0::ad37:7f6b"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"fd7a:115c:a1e0::5b37:80f"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.105.127.107",
|
||||
"100.119.241.111",
|
||||
"100.92.142.61",
|
||||
"100.97.174.21",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::3e37:8e3d",
|
||||
"fd7a:115c:a1e0::5137:ae15",
|
||||
"fd7a:115c:a1e0::ad37:7f6b"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
@@ -151,8 +566,14 @@
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.105.127.107",
|
||||
"100.119.241.111",
|
||||
"100.92.142.61",
|
||||
"fd7a:115c:a1e0::3e37:8e3d"
|
||||
"100.97.174.21",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::3e37:8e3d",
|
||||
"fd7a:115c:a1e0::5137:ae15",
|
||||
"fd7a:115c:a1e0::ad37:7f6b"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
@@ -171,16 +592,260 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"fd7a:115c:a1e0::5b37:80f"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.105.127.107",
|
||||
"100.119.241.111",
|
||||
"100.92.142.61",
|
||||
"100.97.174.21",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::3e37:8e3d",
|
||||
"fd7a:115c:a1e0::5137:ae15",
|
||||
"fd7a:115c:a1e0::ad37:7f6b"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "big-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-exit-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+560
-11
@@ -1,15 +1,18 @@
|
||||
// ACL-AR05
|
||||
//
|
||||
// ACLs:
|
||||
// ACLs: 4 rules
|
||||
// accept: src=['tag:client'] dst=['tag:server:22']
|
||||
// accept: src=['tag:client'] dst=['tag:server:80']
|
||||
// accept: src=['tag:prod'] dst=['tag:server:22']
|
||||
// accept: src=['tag:prod'] dst=['tag:server:443']
|
||||
// ... and 1 more
|
||||
//
|
||||
// Expected: Rules on tagged-server
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-AR05",
|
||||
"timestamp": "2026-04-05T20:03:57Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_ar05.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -98,20 +101,384 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"fd7a:115c:a1e0::5b37:80f"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"fd7a:115c:a1e0::5b37:80f"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
@@ -187,16 +554,198 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"fd7a:115c:a1e0::5b37:80f"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+978
-10
File diff suppressed because it is too large
Load Diff
+2574
-9
File diff suppressed because it is too large
Load Diff
+2655
-9
File diff suppressed because it is too large
Load Diff
+1136
-9
File diff suppressed because it is too large
Load Diff
+1036
-19
File diff suppressed because it is too large
Load Diff
+445
-10
@@ -1,13 +1,16 @@
|
||||
// ACL-AT05
|
||||
//
|
||||
// ACLs:
|
||||
// ACLs: 2 rules
|
||||
// accept: src=['tag:client'] dst=['tag:server:22']
|
||||
// accept: src=['tag:server'] dst=['tag:client:22']
|
||||
//
|
||||
// Expected: Rules on tagged-client, tagged-server
|
||||
// Nodes with filter rules: 3 of 8
|
||||
{
|
||||
"test_id": "ACL-AT05",
|
||||
"timestamp": "2026-04-05T20:06:02Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_at05.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -78,14 +81,248 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.108.74.26",
|
||||
"fd7a:115c:a1e0::b901:4a87"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.83.200.69",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::c537:c845",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.108.74.26",
|
||||
"fd7a:115c:a1e0::b901:4a87"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.83.200.69",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::c537:c845",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": [
|
||||
@@ -111,10 +348,91 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.108.74.26",
|
||||
"fd7a:115c:a1e0::b901:4a87"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.83.200.69",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::c537:c845",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
@@ -140,16 +458,133 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+624
-11
@@ -1,15 +1,18 @@
|
||||
// ACL-AT06
|
||||
//
|
||||
// ACLs:
|
||||
// ACLs: 4 rules
|
||||
// accept: src=['tag:client'] dst=['tag:server:22']
|
||||
// accept: src=['tag:server'] dst=['tag:prod:5432']
|
||||
// accept: src=['tag:prod'] dst=['tag:client:80']
|
||||
// accept: src=['tag:client'] dst=['tag:prod:443']
|
||||
// ... and 1 more
|
||||
//
|
||||
// Expected: Rules on tagged-client, tagged-prod, tagged-server
|
||||
// Nodes with filter rules: 4 of 8
|
||||
{
|
||||
"test_id": "ACL-AT06",
|
||||
"timestamp": "2026-04-05T20:06:23Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_at06.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -98,14 +101,320 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.108.74.26",
|
||||
"fd7a:115c:a1e0::b901:4a87"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"fd7a:115c:a1e0::5b37:80f"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.83.200.69",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::c537:c845",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.108.74.26",
|
||||
"fd7a:115c:a1e0::b901:4a87"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"fd7a:115c:a1e0::5b37:80f"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.83.200.69",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::c537:c845",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": [
|
||||
@@ -131,7 +440,82 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"fd7a:115c:a1e0::5b37:80f"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.83.200.69",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::c537:c845",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": [
|
||||
@@ -179,7 +563,104 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.108.74.26",
|
||||
"fd7a:115c:a1e0::b901:4a87"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
@@ -205,16 +686,148 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+375
-9
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['kristoffer@dalby.cc'] dst=['tag:server:22']
|
||||
//
|
||||
// Expected: Rules on tagged-server
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-AU01",
|
||||
"timestamp": "2026-04-05T20:06:44Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_au01.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -67,20 +70,252 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.110.121.96",
|
||||
"fd7a:115c:a1e0::1737:7960"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.110.121.96",
|
||||
"fd7a:115c:a1e0::1737:7960"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
@@ -106,16 +341,147 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.110.121.96",
|
||||
"fd7a:115c:a1e0::1737:7960"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+375
-9
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['monitorpasskeykradalby@passkey'] dst=['tag:prod:5432']
|
||||
//
|
||||
// Expected: Rules on tagged-prod
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-AU02",
|
||||
"timestamp": "2026-04-05T20:07:04Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_au02.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -67,17 +70,228 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": [
|
||||
@@ -103,19 +317,171 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+520
-9
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['group:developers'] dst=['tag:server:22', 'tag:prod:5432']
|
||||
//
|
||||
// Expected: Rules on tagged-prod, tagged-server
|
||||
// Nodes with filter rules: 3 of 8
|
||||
{
|
||||
"test_id": "ACL-AU03",
|
||||
"timestamp": "2026-04-05T20:07:25Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_au03.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -68,17 +71,260 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.110.121.96",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.110.121.96",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": [
|
||||
@@ -106,7 +352,80 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.110.121.96",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
@@ -134,16 +453,208 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.110.121.96",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+1318
-9
File diff suppressed because it is too large
Load Diff
+911
-21
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['*'] dst=['group:monitors:*']
|
||||
//
|
||||
// Expected: Rules on user-mon
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-AU05",
|
||||
"timestamp": "2026-04-05T20:08:07Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_au05.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -67,34 +70,250 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"router-a": {
|
||||
"hostname": "router-a",
|
||||
"tags": [
|
||||
"tag:router-a"
|
||||
],
|
||||
"ipv4": "100.109.43.124",
|
||||
"ipv6": "fd7a:115c:a1e0::a537:2b7c",
|
||||
"routable_ips": [
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.44.0.0/16"
|
||||
]
|
||||
},
|
||||
"group-b-client": {
|
||||
"hostname": "group-b-client",
|
||||
"tags": [
|
||||
"tag:group-b"
|
||||
],
|
||||
"ipv4": "100.77.135.18",
|
||||
"ipv6": "fd7a:115c:a1e0::4b37:8712",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"router-b": {
|
||||
"hostname": "router-b",
|
||||
"tags": [
|
||||
"tag:router-b"
|
||||
],
|
||||
"ipv4": "100.65.172.123",
|
||||
"ipv6": "fd7a:115c:a1e0::5a37:ac7c",
|
||||
"routable_ips": [
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.55.0.0/16"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-b": {
|
||||
"hostname": "exit-b",
|
||||
"tags": [
|
||||
"tag:exit-b"
|
||||
],
|
||||
"ipv4": "100.116.18.24",
|
||||
"ipv6": "fd7a:115c:a1e0::ff37:1218",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"exit-a": {
|
||||
"hostname": "exit-a",
|
||||
"tags": [
|
||||
"tag:exit-a"
|
||||
],
|
||||
"ipv4": "100.124.195.93",
|
||||
"ipv6": "fd7a:115c:a1e0::7837:c35d",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"multi-exit-router": {
|
||||
"hostname": "multi-exit-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.105.127.107",
|
||||
"ipv6": "fd7a:115c:a1e0::ad37:7f6b",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"group-a-client": {
|
||||
"hostname": "group-a-client",
|
||||
"tags": [
|
||||
"tag:group-a"
|
||||
],
|
||||
"ipv4": "100.107.162.14",
|
||||
"ipv6": "fd7a:115c:a1e0::a237:a20e",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
@@ -114,10 +333,681 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.90.82",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.90.82",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.90.82",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "router-a.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.109.43.124/32",
|
||||
"fd7a:115c:a1e0::a537:2b7c/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.109.43.124/32",
|
||||
"fd7a:115c:a1e0::a537:2b7c/128",
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router-a"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "group-b-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.77.135.18/32",
|
||||
"fd7a:115c:a1e0::4b37:8712/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.77.135.18/32",
|
||||
"fd7a:115c:a1e0::4b37:8712/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:group-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "router-b.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.65.172.123/32",
|
||||
"fd7a:115c:a1e0::5a37:ac7c/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.65.172.123/32",
|
||||
"fd7a:115c:a1e0::5a37:ac7c/128",
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "ha-router2.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "big-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128",
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-b.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-a.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-a"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-exit-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128",
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128",
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "group-a-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.107.162.14/32",
|
||||
"fd7a:115c:a1e0::a237:a20e/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.107.162.14/32",
|
||||
"fd7a:115c:a1e0::a237:a20e/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:group-a"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "ha-router1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128",
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+445
-9
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['group:admins', 'group:developers', 'group:monitors'] dst=['tag:server:22']
|
||||
//
|
||||
// Expected: Rules on tagged-server
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-AU06",
|
||||
"timestamp": "2026-04-05T20:08:28Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_au06.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -69,20 +72,260 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
@@ -112,16 +355,209 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+1177
-16
File diff suppressed because it is too large
Load Diff
+675
-10
@@ -1,14 +1,17 @@
|
||||
// ACL-C02
|
||||
//
|
||||
// ACLs:
|
||||
// ACLs: 3 rules
|
||||
// accept: src=['tag:client', 'autogroup:member'] dst=['tag:server:22']
|
||||
// accept: src=['tag:prod'] dst=['tag:server:80']
|
||||
// accept: src=['group:admins'] dst=['tag:prod:5432']
|
||||
//
|
||||
// Expected: Rules on tagged-prod, tagged-server
|
||||
// Nodes with filter rules: 3 of 8
|
||||
{
|
||||
"test_id": "ACL-C02",
|
||||
"timestamp": "2026-04-05T20:09:10Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_c02.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -89,17 +92,344 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"fd7a:115c:a1e0::5b37:80f"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"fd7a:115c:a1e0::5b37:80f"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": [
|
||||
@@ -125,7 +455,80 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
@@ -179,16 +582,278 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"fd7a:115c:a1e0::5b37:80f"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+682
-10
@@ -1,13 +1,16 @@
|
||||
// ACL-C03
|
||||
//
|
||||
// ACLs:
|
||||
// ACLs: 2 rules
|
||||
// accept: src=['tag:client'] dst=['tag:server:22', 'tag:prod:5432', 'webserver:80']
|
||||
// accept: src=['autogroup:member'] dst=['autogroup:self:*']
|
||||
//
|
||||
// Expected: Rules on tagged-prod, tagged-server, user-kris, user-mon, user1
|
||||
// Nodes with filter rules: 6 of 8
|
||||
{
|
||||
"test_id": "ACL-C03",
|
||||
"timestamp": "2026-04-05T20:09:31Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_c03.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -80,17 +83,433 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.110.121.96",
|
||||
"fd7a:115c:a1e0::1737:7960"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.110.121.96",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::1737:7960",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.90.82",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.110.121.96",
|
||||
"fd7a:115c:a1e0::1737:7960"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.110.121.96",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::1737:7960",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.90.82",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": [
|
||||
@@ -116,7 +535,67 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
@@ -149,7 +628,74 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": [
|
||||
@@ -175,7 +721,49 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.110.121.96",
|
||||
"fd7a:115c:a1e0::1737:7960"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.110.121.96",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::1737:7960",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": [
|
||||
@@ -201,7 +789,49 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.90.82",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": [
|
||||
@@ -227,7 +857,49 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+1876
-11
File diff suppressed because it is too large
Load Diff
+3549
-9
File diff suppressed because it is too large
Load Diff
+525
-9
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['tag:client', 'tag:prod', 'tag:server', 'autogroup:member', 'group:admins'] dst=['tag:server:22']
|
||||
//
|
||||
// Expected: Rules on tagged-server
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-C06",
|
||||
"timestamp": "2026-04-05T20:10:34Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_c06.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -71,20 +74,304 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"100.103.90.82",
|
||||
"100.108.74.26",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::5b37:80f",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::b901:4a87",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"100.103.90.82",
|
||||
"100.108.74.26",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::5b37:80f",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::b901:4a87",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
@@ -120,16 +407,245 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"100.103.90.82",
|
||||
"100.108.74.26",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::5b37:80f",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::b901:4a87",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+505
-11
@@ -1,15 +1,18 @@
|
||||
// ACL-C07
|
||||
//
|
||||
// ACLs:
|
||||
// ACLs: 4 rules
|
||||
// accept: src=['tag:client'] dst=['tag:server:22']
|
||||
// accept: src=['tag:client'] dst=['tag:server:80']
|
||||
// accept: src=['tag:client'] dst=['tag:server:443']
|
||||
// accept: src=['tag:client'] dst=['tag:server:8080']
|
||||
// ... and 1 more
|
||||
//
|
||||
// Expected: Rules on tagged-server
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-C07",
|
||||
"timestamp": "2026-04-05T20:10:54Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_c07.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -98,20 +101,352 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 8080,
|
||||
"Last": 8080
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 8080,
|
||||
"Last": 8080
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 8080,
|
||||
"Last": 8080
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 8080,
|
||||
"Last": 8080
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
@@ -179,16 +514,175 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 8080,
|
||||
"Last": 8080
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 8080,
|
||||
"Last": 8080
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+2655
-9
File diff suppressed because it is too large
Load Diff
+2199
-11
File diff suppressed because it is too large
Load Diff
+2845
-24
File diff suppressed because it is too large
Load Diff
+978
-10
File diff suppressed because it is too large
Load Diff
+398
-9
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['tag:client'] dst=['tag:server:22', 'webserver:22']
|
||||
//
|
||||
// Expected: Rules on tagged-server
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-D02",
|
||||
"timestamp": "2026-04-05T20:12:39Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_d02.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -68,20 +71,282 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
@@ -114,16 +379,140 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+970
-9
File diff suppressed because it is too large
Load Diff
+962
-9
File diff suppressed because it is too large
Load Diff
+940
-17
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['*'] dst=['100.108.74.26:22', 'tag:server:22']
|
||||
//
|
||||
// Expected: Rules on tagged-server
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-D05",
|
||||
"timestamp": "2026-04-05T20:13:42Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_d05.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -68,28 +71,250 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"router-a": {
|
||||
"hostname": "router-a",
|
||||
"tags": [
|
||||
"tag:router-a"
|
||||
],
|
||||
"ipv4": "100.109.43.124",
|
||||
"ipv6": "fd7a:115c:a1e0::a537:2b7c",
|
||||
"routable_ips": [
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.44.0.0/16"
|
||||
]
|
||||
},
|
||||
"group-b-client": {
|
||||
"hostname": "group-b-client",
|
||||
"tags": [
|
||||
"tag:group-b"
|
||||
],
|
||||
"ipv4": "100.77.135.18",
|
||||
"ipv6": "fd7a:115c:a1e0::4b37:8712",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"router-b": {
|
||||
"hostname": "router-b",
|
||||
"tags": [
|
||||
"tag:router-b"
|
||||
],
|
||||
"ipv4": "100.65.172.123",
|
||||
"ipv6": "fd7a:115c:a1e0::5a37:ac7c",
|
||||
"routable_ips": [
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.55.0.0/16"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-b": {
|
||||
"hostname": "exit-b",
|
||||
"tags": [
|
||||
"tag:exit-b"
|
||||
],
|
||||
"ipv4": "100.116.18.24",
|
||||
"ipv6": "fd7a:115c:a1e0::ff37:1218",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"exit-a": {
|
||||
"hostname": "exit-a",
|
||||
"tags": [
|
||||
"tag:exit-a"
|
||||
],
|
||||
"ipv4": "100.124.195.93",
|
||||
"ipv6": "fd7a:115c:a1e0::7837:c35d",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"multi-exit-router": {
|
||||
"hostname": "multi-exit-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.105.127.107",
|
||||
"ipv6": "fd7a:115c:a1e0::ad37:7f6b",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"group-a-client": {
|
||||
"hostname": "group-a-client",
|
||||
"tags": [
|
||||
"tag:group-a"
|
||||
],
|
||||
"ipv4": "100.107.162.14",
|
||||
"ipv6": "fd7a:115c:a1e0::a237:a20e",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
@@ -116,16 +341,714 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "router-a.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.109.43.124/32",
|
||||
"fd7a:115c:a1e0::a537:2b7c/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.109.43.124/32",
|
||||
"fd7a:115c:a1e0::a537:2b7c/128",
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router-a"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "group-b-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.77.135.18/32",
|
||||
"fd7a:115c:a1e0::4b37:8712/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.77.135.18/32",
|
||||
"fd7a:115c:a1e0::4b37:8712/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:group-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "router-b.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.65.172.123/32",
|
||||
"fd7a:115c:a1e0::5a37:ac7c/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.65.172.123/32",
|
||||
"fd7a:115c:a1e0::5a37:ac7c/128",
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "ha-router2.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "big-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128",
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-b.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-a.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-a"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-exit-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128",
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128",
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "group-a-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.107.162.14/32",
|
||||
"fd7a:115c:a1e0::a237:a20e/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.107.162.14/32",
|
||||
"fd7a:115c:a1e0::a237:a20e/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:group-a"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "ha-router1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128",
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+919
-17
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['*'] dst=['100.108.74.26:22', 'webserver:22']
|
||||
//
|
||||
// Expected: Rules on tagged-server
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-D06",
|
||||
"timestamp": "2026-04-05T20:14:02Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_d06.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -68,28 +71,250 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"router-a": {
|
||||
"hostname": "router-a",
|
||||
"tags": [
|
||||
"tag:router-a"
|
||||
],
|
||||
"ipv4": "100.109.43.124",
|
||||
"ipv6": "fd7a:115c:a1e0::a537:2b7c",
|
||||
"routable_ips": [
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.44.0.0/16"
|
||||
]
|
||||
},
|
||||
"group-b-client": {
|
||||
"hostname": "group-b-client",
|
||||
"tags": [
|
||||
"tag:group-b"
|
||||
],
|
||||
"ipv4": "100.77.135.18",
|
||||
"ipv6": "fd7a:115c:a1e0::4b37:8712",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"router-b": {
|
||||
"hostname": "router-b",
|
||||
"tags": [
|
||||
"tag:router-b"
|
||||
],
|
||||
"ipv4": "100.65.172.123",
|
||||
"ipv6": "fd7a:115c:a1e0::5a37:ac7c",
|
||||
"routable_ips": [
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.55.0.0/16"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-b": {
|
||||
"hostname": "exit-b",
|
||||
"tags": [
|
||||
"tag:exit-b"
|
||||
],
|
||||
"ipv4": "100.116.18.24",
|
||||
"ipv6": "fd7a:115c:a1e0::ff37:1218",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"exit-a": {
|
||||
"hostname": "exit-a",
|
||||
"tags": [
|
||||
"tag:exit-a"
|
||||
],
|
||||
"ipv4": "100.124.195.93",
|
||||
"ipv6": "fd7a:115c:a1e0::7837:c35d",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"multi-exit-router": {
|
||||
"hostname": "multi-exit-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.105.127.107",
|
||||
"ipv6": "fd7a:115c:a1e0::ad37:7f6b",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"group-a-client": {
|
||||
"hostname": "group-a-client",
|
||||
"tags": [
|
||||
"tag:group-a"
|
||||
],
|
||||
"ipv4": "100.107.162.14",
|
||||
"ipv6": "fd7a:115c:a1e0::a237:a20e",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
@@ -109,16 +334,693 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "router-a.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.109.43.124/32",
|
||||
"fd7a:115c:a1e0::a537:2b7c/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.109.43.124/32",
|
||||
"fd7a:115c:a1e0::a537:2b7c/128",
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router-a"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "group-b-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.77.135.18/32",
|
||||
"fd7a:115c:a1e0::4b37:8712/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.77.135.18/32",
|
||||
"fd7a:115c:a1e0::4b37:8712/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:group-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "router-b.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.65.172.123/32",
|
||||
"fd7a:115c:a1e0::5a37:ac7c/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.65.172.123/32",
|
||||
"fd7a:115c:a1e0::5a37:ac7c/128",
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "ha-router2.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "big-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128",
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-b.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-a.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-a"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-exit-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128",
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128",
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "group-a-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.107.162.14/32",
|
||||
"fd7a:115c:a1e0::a237:a20e/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.107.162.14/32",
|
||||
"fd7a:115c:a1e0::a237:a20e/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:group-a"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "ha-router1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128",
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+3417
-17
File diff suppressed because it is too large
Load Diff
+522
-10
@@ -1,13 +1,16 @@
|
||||
// ACL-D08
|
||||
//
|
||||
// ACLs:
|
||||
// ACLs: 2 rules
|
||||
// accept: src=['*'] dst=['autogroup:self:*']
|
||||
// accept: src=['kratail2tid@passkey'] dst=['kratail2tid@passkey:*']
|
||||
//
|
||||
// Expected: Rules on user-kris, user-mon, user1
|
||||
// Nodes with filter rules: 4 of 8
|
||||
{
|
||||
"test_id": "ACL-D08",
|
||||
"timestamp": "2026-04-05T20:14:44Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_d08.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -78,23 +81,392 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.110.121.96",
|
||||
"fd7a:115c:a1e0::1737:7960"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.110.121.96",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::1737:7960",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.90.82",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.110.121.96",
|
||||
"fd7a:115c:a1e0::1737:7960"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.110.121.96",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::1737:7960",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.90.82",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": [
|
||||
@@ -120,7 +492,49 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.110.121.96",
|
||||
"fd7a:115c:a1e0::1737:7960"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.110.121.96",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::1737:7960",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": [
|
||||
@@ -146,7 +560,49 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.90.82",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": [
|
||||
@@ -186,7 +642,63 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+962
-9
File diff suppressed because it is too large
Load Diff
+970
-9
File diff suppressed because it is too large
Load Diff
+962
-9
File diff suppressed because it is too large
Load Diff
+898
-17
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['*'] dst=['100.108.74.26:22']
|
||||
//
|
||||
// Expected: Rules on tagged-server
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-E04",
|
||||
"timestamp": "2026-04-05T20:16:08Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_e04.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -67,28 +70,250 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"router-a": {
|
||||
"hostname": "router-a",
|
||||
"tags": [
|
||||
"tag:router-a"
|
||||
],
|
||||
"ipv4": "100.109.43.124",
|
||||
"ipv6": "fd7a:115c:a1e0::a537:2b7c",
|
||||
"routable_ips": [
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.44.0.0/16"
|
||||
]
|
||||
},
|
||||
"group-b-client": {
|
||||
"hostname": "group-b-client",
|
||||
"tags": [
|
||||
"tag:group-b"
|
||||
],
|
||||
"ipv4": "100.77.135.18",
|
||||
"ipv6": "fd7a:115c:a1e0::4b37:8712",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"router-b": {
|
||||
"hostname": "router-b",
|
||||
"tags": [
|
||||
"tag:router-b"
|
||||
],
|
||||
"ipv4": "100.65.172.123",
|
||||
"ipv6": "fd7a:115c:a1e0::5a37:ac7c",
|
||||
"routable_ips": [
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.55.0.0/16"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-b": {
|
||||
"hostname": "exit-b",
|
||||
"tags": [
|
||||
"tag:exit-b"
|
||||
],
|
||||
"ipv4": "100.116.18.24",
|
||||
"ipv6": "fd7a:115c:a1e0::ff37:1218",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"exit-a": {
|
||||
"hostname": "exit-a",
|
||||
"tags": [
|
||||
"tag:exit-a"
|
||||
],
|
||||
"ipv4": "100.124.195.93",
|
||||
"ipv6": "fd7a:115c:a1e0::7837:c35d",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"multi-exit-router": {
|
||||
"hostname": "multi-exit-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.105.127.107",
|
||||
"ipv6": "fd7a:115c:a1e0::ad37:7f6b",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"group-a-client": {
|
||||
"hostname": "group-a-client",
|
||||
"tags": [
|
||||
"tag:group-a"
|
||||
],
|
||||
"ipv4": "100.107.162.14",
|
||||
"ipv6": "fd7a:115c:a1e0::a237:a20e",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
@@ -101,16 +326,672 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "router-a.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.109.43.124/32",
|
||||
"fd7a:115c:a1e0::a537:2b7c/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.109.43.124/32",
|
||||
"fd7a:115c:a1e0::a537:2b7c/128",
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router-a"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "group-b-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.77.135.18/32",
|
||||
"fd7a:115c:a1e0::4b37:8712/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.77.135.18/32",
|
||||
"fd7a:115c:a1e0::4b37:8712/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:group-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "router-b.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.65.172.123/32",
|
||||
"fd7a:115c:a1e0::5a37:ac7c/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.65.172.123/32",
|
||||
"fd7a:115c:a1e0::5a37:ac7c/128",
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "ha-router2.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "big-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128",
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-b.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-a.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-a"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-exit-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128",
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128",
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "group-a-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.107.162.14/32",
|
||||
"fd7a:115c:a1e0::a237:a20e/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.107.162.14/32",
|
||||
"fd7a:115c:a1e0::a237:a20e/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:group-a"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "ha-router1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128",
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+919
-17
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['*'] dst=['tag:server:22']
|
||||
//
|
||||
// Expected: Rules on tagged-server
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-E05",
|
||||
"timestamp": "2026-04-05T20:16:29Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_e05.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -67,28 +70,250 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"router-a": {
|
||||
"hostname": "router-a",
|
||||
"tags": [
|
||||
"tag:router-a"
|
||||
],
|
||||
"ipv4": "100.109.43.124",
|
||||
"ipv6": "fd7a:115c:a1e0::a537:2b7c",
|
||||
"routable_ips": [
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.44.0.0/16"
|
||||
]
|
||||
},
|
||||
"group-b-client": {
|
||||
"hostname": "group-b-client",
|
||||
"tags": [
|
||||
"tag:group-b"
|
||||
],
|
||||
"ipv4": "100.77.135.18",
|
||||
"ipv6": "fd7a:115c:a1e0::4b37:8712",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"router-b": {
|
||||
"hostname": "router-b",
|
||||
"tags": [
|
||||
"tag:router-b"
|
||||
],
|
||||
"ipv4": "100.65.172.123",
|
||||
"ipv6": "fd7a:115c:a1e0::5a37:ac7c",
|
||||
"routable_ips": [
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.55.0.0/16"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-b": {
|
||||
"hostname": "exit-b",
|
||||
"tags": [
|
||||
"tag:exit-b"
|
||||
],
|
||||
"ipv4": "100.116.18.24",
|
||||
"ipv6": "fd7a:115c:a1e0::ff37:1218",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"exit-a": {
|
||||
"hostname": "exit-a",
|
||||
"tags": [
|
||||
"tag:exit-a"
|
||||
],
|
||||
"ipv4": "100.124.195.93",
|
||||
"ipv6": "fd7a:115c:a1e0::7837:c35d",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"multi-exit-router": {
|
||||
"hostname": "multi-exit-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.105.127.107",
|
||||
"ipv6": "fd7a:115c:a1e0::ad37:7f6b",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"group-a-client": {
|
||||
"hostname": "group-a-client",
|
||||
"tags": [
|
||||
"tag:group-a"
|
||||
],
|
||||
"ipv4": "100.107.162.14",
|
||||
"ipv6": "fd7a:115c:a1e0::a237:a20e",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
@@ -108,16 +333,693 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "router-a.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.109.43.124/32",
|
||||
"fd7a:115c:a1e0::a537:2b7c/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.109.43.124/32",
|
||||
"fd7a:115c:a1e0::a537:2b7c/128",
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router-a"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "group-b-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.77.135.18/32",
|
||||
"fd7a:115c:a1e0::4b37:8712/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.77.135.18/32",
|
||||
"fd7a:115c:a1e0::4b37:8712/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:group-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "router-b.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.65.172.123/32",
|
||||
"fd7a:115c:a1e0::5a37:ac7c/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.65.172.123/32",
|
||||
"fd7a:115c:a1e0::5a37:ac7c/128",
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "ha-router2.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "big-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128",
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-b.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-a.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-a"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-exit-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128",
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128",
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "group-a-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.107.162.14/32",
|
||||
"fd7a:115c:a1e0::a237:a20e/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.107.162.14/32",
|
||||
"fd7a:115c:a1e0::a237:a20e/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:group-a"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "ha-router1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128",
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+898
-17
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['*'] dst=['webserver:22']
|
||||
//
|
||||
// Expected: Rules on tagged-server
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-E06",
|
||||
"timestamp": "2026-04-05T20:16:49Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_e06.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -67,28 +70,250 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"router-a": {
|
||||
"hostname": "router-a",
|
||||
"tags": [
|
||||
"tag:router-a"
|
||||
],
|
||||
"ipv4": "100.109.43.124",
|
||||
"ipv6": "fd7a:115c:a1e0::a537:2b7c",
|
||||
"routable_ips": [
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.44.0.0/16"
|
||||
]
|
||||
},
|
||||
"group-b-client": {
|
||||
"hostname": "group-b-client",
|
||||
"tags": [
|
||||
"tag:group-b"
|
||||
],
|
||||
"ipv4": "100.77.135.18",
|
||||
"ipv6": "fd7a:115c:a1e0::4b37:8712",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"router-b": {
|
||||
"hostname": "router-b",
|
||||
"tags": [
|
||||
"tag:router-b"
|
||||
],
|
||||
"ipv4": "100.65.172.123",
|
||||
"ipv6": "fd7a:115c:a1e0::5a37:ac7c",
|
||||
"routable_ips": [
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.55.0.0/16"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-b": {
|
||||
"hostname": "exit-b",
|
||||
"tags": [
|
||||
"tag:exit-b"
|
||||
],
|
||||
"ipv4": "100.116.18.24",
|
||||
"ipv6": "fd7a:115c:a1e0::ff37:1218",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"exit-a": {
|
||||
"hostname": "exit-a",
|
||||
"tags": [
|
||||
"tag:exit-a"
|
||||
],
|
||||
"ipv4": "100.124.195.93",
|
||||
"ipv6": "fd7a:115c:a1e0::7837:c35d",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"multi-exit-router": {
|
||||
"hostname": "multi-exit-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.105.127.107",
|
||||
"ipv6": "fd7a:115c:a1e0::ad37:7f6b",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"group-a-client": {
|
||||
"hostname": "group-a-client",
|
||||
"tags": [
|
||||
"tag:group-a"
|
||||
],
|
||||
"ipv4": "100.107.162.14",
|
||||
"ipv6": "fd7a:115c:a1e0::a237:a20e",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
@@ -101,16 +326,672 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "router-a.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.109.43.124/32",
|
||||
"fd7a:115c:a1e0::a537:2b7c/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.109.43.124/32",
|
||||
"fd7a:115c:a1e0::a537:2b7c/128",
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router-a"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "group-b-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.77.135.18/32",
|
||||
"fd7a:115c:a1e0::4b37:8712/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.77.135.18/32",
|
||||
"fd7a:115c:a1e0::4b37:8712/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:group-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "router-b.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.65.172.123/32",
|
||||
"fd7a:115c:a1e0::5a37:ac7c/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.65.172.123/32",
|
||||
"fd7a:115c:a1e0::5a37:ac7c/128",
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "ha-router2.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "big-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128",
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-b.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-a.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-a"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-exit-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128",
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128",
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "group-a-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.107.162.14/32",
|
||||
"fd7a:115c:a1e0::a237:a20e/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.107.162.14/32",
|
||||
"fd7a:115c:a1e0::a237:a20e/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:group-a"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "ha-router1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128",
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+375
-9
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['kratail2tid@passkey'] dst=['tag:server:22']
|
||||
//
|
||||
// Expected: Rules on tagged-server
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-E07",
|
||||
"timestamp": "2026-04-05T20:17:10Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_e07.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -67,20 +70,252 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
@@ -106,16 +341,147 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+375
-9
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['group:admins'] dst=['tag:server:22']
|
||||
//
|
||||
// Expected: Rules on tagged-server
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-E08",
|
||||
"timestamp": "2026-04-05T20:17:31Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_e08.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -67,20 +70,252 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
@@ -106,16 +341,147 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+375
-9
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['kratail2tid@passkey', 'group:admins'] dst=['tag:server:22']
|
||||
//
|
||||
// Expected: Rules on tagged-server
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-E09",
|
||||
"timestamp": "2026-04-05T20:17:52Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_e09.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -68,20 +71,252 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
@@ -107,16 +342,147 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
@@ -1,12 +1,12 @@
|
||||
// ACL-ERR01
|
||||
//
|
||||
// ACL: accept: src=['tag:nonexistent'] dst=['tag:server:22']
|
||||
//
|
||||
// Expected: Error — src=tag not found: "tag:nonexistent"
|
||||
{
|
||||
"test_id": "ACL-ERR01",
|
||||
"timestamp": "2026-04-05T20:18:13Z",
|
||||
"error": true,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_err01.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -69,6 +69,8 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 400,
|
||||
"api_response_body": {
|
||||
"message": "src=tag not found: \"tag:nonexistent\""
|
||||
}
|
||||
|
||||
@@ -1,12 +1,12 @@
|
||||
// ACL-ERR02
|
||||
//
|
||||
// ACL: accept: src=['autogroup:self'] dst=['tag:server:22']
|
||||
//
|
||||
// Expected: Error — "autogroup:self" not valid on the src side of a rule
|
||||
{
|
||||
"test_id": "ACL-ERR02",
|
||||
"timestamp": "2026-04-05T20:18:13Z",
|
||||
"error": true,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_err02.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -69,6 +69,8 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 400,
|
||||
"api_response_body": {
|
||||
"message": "\"autogroup:self\" not valid on the src side of a rule"
|
||||
}
|
||||
|
||||
@@ -1,12 +1,12 @@
|
||||
// ACL-ERR03
|
||||
//
|
||||
// ACL: accept: src=['*'] dst=['autogroup:self']
|
||||
//
|
||||
// Expected: Error — dst="autogroup:self": port range "self": invalid first integer
|
||||
{
|
||||
"test_id": "ACL-ERR03",
|
||||
"timestamp": "2026-04-05T20:18:13Z",
|
||||
"error": true,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_err03.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -69,6 +69,8 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 400,
|
||||
"api_response_body": {
|
||||
"message": "dst=\"autogroup:self\": port range \"self\": invalid first integer"
|
||||
}
|
||||
|
||||
@@ -1,12 +1,12 @@
|
||||
// ACL-ERR04
|
||||
//
|
||||
// ACL: accept: src=['tag:nonexistent'] dst=['*:*']
|
||||
//
|
||||
// Expected: Error — src=tag not found: "tag:nonexistent"
|
||||
{
|
||||
"test_id": "ACL-ERR04",
|
||||
"timestamp": "2026-04-05T20:18:14Z",
|
||||
"error": true,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_err04.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -69,6 +69,8 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 400,
|
||||
"api_response_body": {
|
||||
"message": "src=tag not found: \"tag:nonexistent\""
|
||||
}
|
||||
|
||||
@@ -1,12 +1,12 @@
|
||||
// ACL-ERR05
|
||||
//
|
||||
// ACL: accept: src=['*'] dst=['tag:nonexistent:22']
|
||||
//
|
||||
// Expected: Error — dst="tag:nonexistent": tag not found: "tag:nonexistent"
|
||||
{
|
||||
"test_id": "ACL-ERR05",
|
||||
"timestamp": "2026-04-05T20:18:14Z",
|
||||
"error": true,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_err05.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -69,6 +69,8 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 400,
|
||||
"api_response_body": {
|
||||
"message": "dst=\"tag:nonexistent\": tag not found: \"tag:nonexistent\""
|
||||
}
|
||||
|
||||
@@ -1,12 +1,12 @@
|
||||
// ACL-ERR06
|
||||
//
|
||||
// ACL: deny: src=['tag:client'] dst=['tag:server:22']
|
||||
//
|
||||
// Expected: Error — action="deny" is not supported
|
||||
// ACL: accept: src=['tag:client'] dst=['tag:server:22']
|
||||
{
|
||||
"test_id": "ACL-ERR06",
|
||||
"timestamp": "2026-04-05T20:18:14Z",
|
||||
"error": true,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_err06.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -69,6 +69,8 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 400,
|
||||
"api_response_body": {
|
||||
"message": "action=\"deny\" is not supported"
|
||||
}
|
||||
|
||||
@@ -1,12 +1,12 @@
|
||||
// ACL-ERR07
|
||||
//
|
||||
// ACL: accept: src=['*'] dst=['tag:server:ssh']
|
||||
//
|
||||
// Expected: Error — dst="tag:server:ssh": port range "ssh": invalid first integer
|
||||
{
|
||||
"test_id": "ACL-ERR07",
|
||||
"timestamp": "2026-04-05T20:18:18Z",
|
||||
"error": true,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_err07.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -69,6 +69,8 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 400,
|
||||
"api_response_body": {
|
||||
"message": "dst=\"tag:server:ssh\": port range \"ssh\": invalid first integer"
|
||||
}
|
||||
|
||||
@@ -1,14 +1,14 @@
|
||||
// ACL-ERR08
|
||||
//
|
||||
// ACLs:
|
||||
// ACLs: 2 rules
|
||||
// accept: src=['*'] dst=['autogroup:self:*']
|
||||
// accept: src=['tag:client'] dst=['autogroup:self:22']
|
||||
//
|
||||
// Expected: Error — autogroup:self can only be used with users, groups, or supported autogroups
|
||||
{
|
||||
"test_id": "ACL-ERR08",
|
||||
"timestamp": "2026-04-05T20:18:23Z",
|
||||
"error": true,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_err08.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -80,6 +80,8 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 400,
|
||||
"api_response_body": {
|
||||
"message": "autogroup:self can only be used with users, groups, or supported autogroups"
|
||||
}
|
||||
|
||||
@@ -1,14 +1,14 @@
|
||||
// ACL-ERR09
|
||||
//
|
||||
// ACLs:
|
||||
// ACLs: 2 rules
|
||||
// accept: src=['*'] dst=['autogroup:self:*']
|
||||
// accept: src=['autogroup:tagged'] dst=['autogroup:self:22']
|
||||
//
|
||||
// Expected: Error — autogroup:self can only be used with users, groups, or supported autogroups
|
||||
{
|
||||
"test_id": "ACL-ERR09",
|
||||
"timestamp": "2026-04-05T20:18:28Z",
|
||||
"error": true,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_err09.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -80,6 +80,8 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 400,
|
||||
"api_response_body": {
|
||||
"message": "autogroup:self can only be used with users, groups, or supported autogroups"
|
||||
}
|
||||
|
||||
+898
-17
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['*'] dst=['webserver:80']
|
||||
//
|
||||
// Expected: Rules on tagged-server
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-H01",
|
||||
"timestamp": "2026-04-05T20:18:33Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_h01.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -67,28 +70,250 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"router-a": {
|
||||
"hostname": "router-a",
|
||||
"tags": [
|
||||
"tag:router-a"
|
||||
],
|
||||
"ipv4": "100.109.43.124",
|
||||
"ipv6": "fd7a:115c:a1e0::a537:2b7c",
|
||||
"routable_ips": [
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.44.0.0/16"
|
||||
]
|
||||
},
|
||||
"group-b-client": {
|
||||
"hostname": "group-b-client",
|
||||
"tags": [
|
||||
"tag:group-b"
|
||||
],
|
||||
"ipv4": "100.77.135.18",
|
||||
"ipv6": "fd7a:115c:a1e0::4b37:8712",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"router-b": {
|
||||
"hostname": "router-b",
|
||||
"tags": [
|
||||
"tag:router-b"
|
||||
],
|
||||
"ipv4": "100.65.172.123",
|
||||
"ipv6": "fd7a:115c:a1e0::5a37:ac7c",
|
||||
"routable_ips": [
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.55.0.0/16"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-b": {
|
||||
"hostname": "exit-b",
|
||||
"tags": [
|
||||
"tag:exit-b"
|
||||
],
|
||||
"ipv4": "100.116.18.24",
|
||||
"ipv6": "fd7a:115c:a1e0::ff37:1218",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"exit-a": {
|
||||
"hostname": "exit-a",
|
||||
"tags": [
|
||||
"tag:exit-a"
|
||||
],
|
||||
"ipv4": "100.124.195.93",
|
||||
"ipv6": "fd7a:115c:a1e0::7837:c35d",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"multi-exit-router": {
|
||||
"hostname": "multi-exit-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.105.127.107",
|
||||
"ipv6": "fd7a:115c:a1e0::ad37:7f6b",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"group-a-client": {
|
||||
"hostname": "group-a-client",
|
||||
"tags": [
|
||||
"tag:group-a"
|
||||
],
|
||||
"ipv4": "100.107.162.14",
|
||||
"ipv6": "fd7a:115c:a1e0::a237:a20e",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
@@ -101,16 +326,672 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "router-a.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.109.43.124/32",
|
||||
"fd7a:115c:a1e0::a537:2b7c/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.109.43.124/32",
|
||||
"fd7a:115c:a1e0::a537:2b7c/128",
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router-a"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "group-b-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.77.135.18/32",
|
||||
"fd7a:115c:a1e0::4b37:8712/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.77.135.18/32",
|
||||
"fd7a:115c:a1e0::4b37:8712/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:group-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "router-b.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.65.172.123/32",
|
||||
"fd7a:115c:a1e0::5a37:ac7c/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.65.172.123/32",
|
||||
"fd7a:115c:a1e0::5a37:ac7c/128",
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "ha-router2.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "big-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128",
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-b.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-a.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-a"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-exit-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128",
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128",
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "group-a-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.107.162.14/32",
|
||||
"fd7a:115c:a1e0::a237:a20e/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.107.162.14/32",
|
||||
"fd7a:115c:a1e0::a237:a20e/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:group-a"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "ha-router1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128",
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+962
-9
File diff suppressed because it is too large
Load Diff
+504
-9
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['internal'] dst=['tag:server:22']
|
||||
//
|
||||
// Expected: Rules on tagged-server
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-H03",
|
||||
"timestamp": "2026-04-05T20:19:19Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_h03.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -67,20 +70,323 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"router-a": {
|
||||
"hostname": "router-a",
|
||||
"tags": [
|
||||
"tag:router-a"
|
||||
],
|
||||
"ipv4": "100.109.43.124",
|
||||
"ipv6": "fd7a:115c:a1e0::a537:2b7c",
|
||||
"routable_ips": [
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.44.0.0/16"
|
||||
]
|
||||
},
|
||||
"router-b": {
|
||||
"hostname": "router-b",
|
||||
"tags": [
|
||||
"tag:router-b"
|
||||
],
|
||||
"ipv4": "100.65.172.123",
|
||||
"ipv6": "fd7a:115c:a1e0::5a37:ac7c",
|
||||
"routable_ips": [
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.55.0.0/16"
|
||||
]
|
||||
},
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"multi-exit-router": {
|
||||
"hostname": "multi-exit-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.105.127.107",
|
||||
"ipv6": "fd7a:115c:a1e0::ad37:7f6b",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
@@ -105,16 +411,205 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "router-a.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.109.43.124/32",
|
||||
"fd7a:115c:a1e0::a537:2b7c/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.109.43.124/32",
|
||||
"fd7a:115c:a1e0::a537:2b7c/128",
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router-a"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "router-b.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.65.172.123/32",
|
||||
"fd7a:115c:a1e0::5a37:ac7c/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.65.172.123/32",
|
||||
"fd7a:115c:a1e0::5a37:ac7c/128",
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "big-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128",
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-exit-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128",
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+1400
-11
File diff suppressed because it is too large
Load Diff
+1296
-9
File diff suppressed because it is too large
Load Diff
+380
-9
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['webserver', 'tag:client'] dst=['tag:server:22']
|
||||
//
|
||||
// Expected: Rules on tagged-server
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-H06",
|
||||
"timestamp": "2026-04-05T20:20:21Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_h06.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -68,20 +71,270 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.108.74.26",
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.108.74.26",
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
@@ -108,16 +361,134 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.108.74.26",
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+354
-9
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['group:admins'] dst=['webserver:22']
|
||||
//
|
||||
// Expected: Rules on tagged-server
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-H07",
|
||||
"timestamp": "2026-04-05T20:20:42Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_h07.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -67,20 +70,238 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
@@ -99,16 +320,140 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+620
-9
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['*'] dst=['subnet24:80']
|
||||
//
|
||||
// Expected: No filter rules
|
||||
// Nodes with filter rules: 1 of 8
|
||||
{
|
||||
"test_id": "ACL-H08",
|
||||
"timestamp": "2026-04-05T20:21:03Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_h08.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -67,32 +70,640 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "192.168.1.0/24",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "192.168.1.0/24",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "ha-router2.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "ha-router1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128",
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "ha-router2.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "ha-router1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128",
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "ha-router2.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "ha-router1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128",
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "ha-router2.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "ha-router1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128",
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "ha-router2.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "ha-router1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128",
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "ha-router2.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "ha-router1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128",
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "ha-router2.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "ha-router1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128",
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "ha-router2.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "ha-router1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128",
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+1056
-18
File diff suppressed because it is too large
Load Diff
+644
-9
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['tag:client'] dst=['tag:server:22', 'tag:prod:5432', 'webserver:80', 'prodbox:443', 'group:admins:8080', 'kratail2tid@passkey:3000', '100.108.74.26:9000']
|
||||
//
|
||||
// Expected: Rules on tagged-prod, tagged-server, user1
|
||||
// Nodes with filter rules: 4 of 8
|
||||
{
|
||||
"test_id": "ACL-K02",
|
||||
"timestamp": "2026-04-05T20:21:45Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_k02.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -73,17 +76,398 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 3000,
|
||||
"Last": 3000
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 3000,
|
||||
"Last": 3000
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 8080,
|
||||
"Last": 8080
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 8080,
|
||||
"Last": 8080
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 9000,
|
||||
"Last": 9000
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 3000,
|
||||
"Last": 3000
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 3000,
|
||||
"Last": 3000
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 8080,
|
||||
"Last": 8080
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 8080,
|
||||
"Last": 8080
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 9000,
|
||||
"Last": 9000
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": [
|
||||
@@ -116,7 +500,74 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
@@ -156,13 +607,125 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 9000,
|
||||
"Last": 9000
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": [
|
||||
@@ -202,7 +765,79 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 3000,
|
||||
"Last": 3000
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 3000,
|
||||
"Last": 3000
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 8080,
|
||||
"Last": 8080
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 8080,
|
||||
"Last": 8080
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+3417
-17
File diff suppressed because it is too large
Load Diff
+1945
-9
File diff suppressed because it is too large
Load Diff
+770
-9
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['autogroup:member', 'group:admins', 'kratail2tid@passkey', 'tag:client', 'tag:prod', '100.83.200.69', '100.103.8.15'] dst=['tag:server:22', 'webserver:80', '100.108.74.26:443', 'group:admins:8080', 'kratail2tid@passkey:9000']
|
||||
//
|
||||
// Expected: Rules on tagged-server, user1
|
||||
// Nodes with filter rules: 3 of 8
|
||||
{
|
||||
"test_id": "ACL-K05",
|
||||
"timestamp": "2026-04-05T20:22:47Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_k05.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -77,20 +80,410 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::5b37:80f",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 9000,
|
||||
"Last": 9000
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 9000,
|
||||
"Last": 9000
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 8080,
|
||||
"Last": 8080
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 8080,
|
||||
"Last": 8080
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::5b37:80f",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 9000,
|
||||
"Last": 9000
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 9000,
|
||||
"Last": 9000
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 8080,
|
||||
"Last": 8080
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 8080,
|
||||
"Last": 8080
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
@@ -138,13 +531,245 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::5b37:80f",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": [
|
||||
@@ -192,7 +817,143 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::5b37:80f",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 9000,
|
||||
"Last": 9000
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 9000,
|
||||
"Last": 9000
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 8080,
|
||||
"Last": 8080
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 8080,
|
||||
"Last": 8080
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+447
-9
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['kratail2tid@passkey', 'tag:client', 'group:monitors'] dst=['tag:server:22']
|
||||
//
|
||||
// Expected: Rules on tagged-server
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-M01",
|
||||
"timestamp": "2026-04-05T20:23:08Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_m01.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -69,20 +72,276 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
@@ -112,16 +371,195 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+409
-9
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['100.90.199.68', 'tag:client'] dst=['tag:server:22']
|
||||
//
|
||||
// Expected: Rules on tagged-server
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-M02",
|
||||
"timestamp": "2026-04-05T20:23:29Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_m02.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -68,20 +71,270 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
@@ -108,16 +361,163 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+411
-9
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['webserver', 'tag:client'] dst=['tag:prod:5432']
|
||||
//
|
||||
// Expected: Rules on tagged-prod
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-M03",
|
||||
"timestamp": "2026-04-05T20:23:50Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_m03.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -68,17 +71,246 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.108.74.26",
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.108.74.26",
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": [
|
||||
@@ -105,19 +337,189 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.108.74.26",
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+412
-9
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['group:admins', 'tag:client'] dst=['tag:server:22']
|
||||
//
|
||||
// Expected: Rules on tagged-server
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-M04",
|
||||
"timestamp": "2026-04-05T20:24:11Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_m04.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -68,20 +71,272 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
@@ -109,16 +364,164 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+410
-9
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['kratail2tid@passkey', 'group:monitors'] dst=['tag:server:22']
|
||||
//
|
||||
// Expected: Rules on tagged-server
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-M05",
|
||||
"timestamp": "2026-04-05T20:24:32Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_m05.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -68,20 +71,256 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
@@ -109,16 +348,178 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+925
-17
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['*', 'tag:client'] dst=['tag:server:22']
|
||||
//
|
||||
// Expected: Rules on tagged-server
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-M06",
|
||||
"timestamp": "2026-04-05T20:24:53Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_m06.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -68,29 +71,251 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"router-a": {
|
||||
"hostname": "router-a",
|
||||
"tags": [
|
||||
"tag:router-a"
|
||||
],
|
||||
"ipv4": "100.109.43.124",
|
||||
"ipv6": "fd7a:115c:a1e0::a537:2b7c",
|
||||
"routable_ips": [
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.44.0.0/16"
|
||||
]
|
||||
},
|
||||
"group-b-client": {
|
||||
"hostname": "group-b-client",
|
||||
"tags": [
|
||||
"tag:group-b"
|
||||
],
|
||||
"ipv4": "100.77.135.18",
|
||||
"ipv6": "fd7a:115c:a1e0::4b37:8712",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"router-b": {
|
||||
"hostname": "router-b",
|
||||
"tags": [
|
||||
"tag:router-b"
|
||||
],
|
||||
"ipv4": "100.65.172.123",
|
||||
"ipv6": "fd7a:115c:a1e0::5a37:ac7c",
|
||||
"routable_ips": [
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.55.0.0/16"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-b": {
|
||||
"hostname": "exit-b",
|
||||
"tags": [
|
||||
"tag:exit-b"
|
||||
],
|
||||
"ipv4": "100.116.18.24",
|
||||
"ipv6": "fd7a:115c:a1e0::ff37:1218",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"exit-a": {
|
||||
"hostname": "exit-a",
|
||||
"tags": [
|
||||
"tag:exit-a"
|
||||
],
|
||||
"ipv4": "100.124.195.93",
|
||||
"ipv6": "fd7a:115c:a1e0::7837:c35d",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"multi-exit-router": {
|
||||
"hostname": "multi-exit-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.105.127.107",
|
||||
"ipv6": "fd7a:115c:a1e0::ad37:7f6b",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"group-a-client": {
|
||||
"hostname": "group-a-client",
|
||||
"tags": [
|
||||
"tag:group-a"
|
||||
],
|
||||
"ipv4": "100.107.162.14",
|
||||
"ipv6": "fd7a:115c:a1e0::a237:a20e",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"100.83.200.69",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
@@ -111,16 +336,699 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"100.83.200.69",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"100.83.200.69",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"100.83.200.69",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "router-a.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.109.43.124/32",
|
||||
"fd7a:115c:a1e0::a537:2b7c/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.109.43.124/32",
|
||||
"fd7a:115c:a1e0::a537:2b7c/128",
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router-a"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "group-b-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.77.135.18/32",
|
||||
"fd7a:115c:a1e0::4b37:8712/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.77.135.18/32",
|
||||
"fd7a:115c:a1e0::4b37:8712/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:group-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "router-b.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.65.172.123/32",
|
||||
"fd7a:115c:a1e0::5a37:ac7c/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.65.172.123/32",
|
||||
"fd7a:115c:a1e0::5a37:ac7c/128",
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "ha-router2.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "big-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128",
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-b.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-a.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-a"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-exit-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128",
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128",
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "group-a-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.107.162.14/32",
|
||||
"fd7a:115c:a1e0::a237:a20e/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.107.162.14/32",
|
||||
"fd7a:115c:a1e0::a237:a20e/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:group-a"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "ha-router1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128",
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+566
-9
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['autogroup:member', 'tag:client'] dst=['tag:server:22,80,443']
|
||||
//
|
||||
// Expected: Rules on tagged-server
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-M07",
|
||||
"timestamp": "2026-04-05T20:25:14Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_m07.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -68,20 +71,336 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
@@ -141,16 +460,254 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+482
-9
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['autogroup:member', 'tag:client'] dst=['tag:server:80-443']
|
||||
//
|
||||
// Expected: Rules on tagged-server
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-M08",
|
||||
"timestamp": "2026-04-05T20:25:34Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_m08.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -68,20 +71,280 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
@@ -113,16 +376,226 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+541
-9
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['tag:client', 'internal'] dst=['tag:server:22']
|
||||
//
|
||||
// Expected: Rules on tagged-server
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-M09",
|
||||
"timestamp": "2026-04-05T20:25:55Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_m09.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -68,20 +71,343 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"router-a": {
|
||||
"hostname": "router-a",
|
||||
"tags": [
|
||||
"tag:router-a"
|
||||
],
|
||||
"ipv4": "100.109.43.124",
|
||||
"ipv6": "fd7a:115c:a1e0::a537:2b7c",
|
||||
"routable_ips": [
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.44.0.0/16"
|
||||
]
|
||||
},
|
||||
"router-b": {
|
||||
"hostname": "router-b",
|
||||
"tags": [
|
||||
"tag:router-b"
|
||||
],
|
||||
"ipv4": "100.65.172.123",
|
||||
"ipv6": "fd7a:115c:a1e0::5a37:ac7c",
|
||||
"routable_ips": [
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.55.0.0/16"
|
||||
]
|
||||
},
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"multi-exit-router": {
|
||||
"hostname": "multi-exit-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.105.127.107",
|
||||
"ipv6": "fd7a:115c:a1e0::ad37:7f6b",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
@@ -108,16 +434,222 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "router-a.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.109.43.124/32",
|
||||
"fd7a:115c:a1e0::a537:2b7c/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.109.43.124/32",
|
||||
"fd7a:115c:a1e0::a537:2b7c/128",
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router-a"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "router-b.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.65.172.123/32",
|
||||
"fd7a:115c:a1e0::5a37:ac7c/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.65.172.123/32",
|
||||
"fd7a:115c:a1e0::5a37:ac7c/128",
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "big-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128",
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-exit-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128",
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+411
-9
@@ -2,10 +2,13 @@
|
||||
//
|
||||
// ACL: accept: src=['100.92.142.61', 'tag:client'] dst=['tag:server:22']
|
||||
//
|
||||
// Expected: Rules on tagged-server
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-M10",
|
||||
"timestamp": "2026-04-05T20:26:16Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_m10.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
@@ -68,20 +71,286 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"100.92.142.61",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"100.92.142.61",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
@@ -108,16 +377,149 @@
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"100.92.142.61",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
Some files were not shown because too many files have changed in this diff Show More
Reference in New Issue
Block a user