mirror of
https://github.com/juanfont/headscale.git
synced 2026-07-11 18:41:13 +09:00
testdata: replace legacy captures with anonymized tscap output
Drop the old testdata/{acl,grant,routes,ssh}_results/ files (mixed
uppercase ACL-*/ROUTES-*/GRANT-*/SSH-* filenames with the pre-tscap
schema) and replace with the 617 captures tscap produced for the
kradalby/3157-subnet-to-subnet branch. Files are lowercase and
anonymized (odin/thor/freya users, pokemon hostnames) per
kradalby/tscap package anonymize.
Relax pre-commit check-added-large-files: tscap captures include full
netmaps and can exceed 500 KB per file; testdata/ is now excluded
from the size check and the global ceiling is bumped to 2 MB.
Source: github.com/kradalby/tscap @ cb375ec
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Kristoffer Dalby
@@ -13,6 +13,8 @@ repos:
|
||||
rev: v6.0.0
|
||||
hooks:
|
||||
- id: check-added-large-files
|
||||
args: [--maxkb=2000]
|
||||
exclude: ^hscontrol/policy/v2/testdata/
|
||||
- id: check-case-conflict
|
||||
- id: check-executables-have-shebangs
|
||||
- id: check-json
|
||||
|
||||
@@ -1,585 +0,0 @@
|
||||
// ACL-A01
|
||||
//
|
||||
// ACL: accept: src=['autogroup:member'] dst=['*:*']
|
||||
//
|
||||
// Nodes with filter rules: 1 of 8
|
||||
{
|
||||
"test_id": "ACL-A01",
|
||||
"timestamp": "2026-04-05T19:54:36Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_a01.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"autogroup:member"
|
||||
],
|
||||
"dst": [
|
||||
"*:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"multi-exit-router": {
|
||||
"hostname": "multi-exit-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.105.127.107",
|
||||
"ipv6": "fd7a:115c:a1e0::ad37:7f6b",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "0.0.0.0-9.255.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "11.0.0.0-100.63.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.128.0.0-169.253.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "169.255.0.0-172.15.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "172.32.0.0-192.167.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "192.169.0.0-255.255.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "2000::-3fff:ffff:ffff:ffff:ffff:ffff:ffff:ffff",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "0.0.0.0-9.255.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "11.0.0.0-100.63.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.128.0.0-169.253.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "169.255.0.0-172.15.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "172.32.0.0-192.167.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "192.169.0.0-255.255.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "2000::-3fff:ffff:ffff:ffff:ffff:ffff:ffff:ffff",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-exit-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
-1314
File diff suppressed because it is too large
Load Diff
@@ -1,601 +0,0 @@
|
||||
// ACL-A03
|
||||
//
|
||||
// ACL: accept: src=['autogroup:member', 'tag:client'] dst=['tag:server:22']
|
||||
//
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-A03",
|
||||
"timestamp": "2026-04-05T19:55:17Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_a03.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"autogroup:member",
|
||||
"tag:client"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,798 +0,0 @@
|
||||
// ACL-A04
|
||||
//
|
||||
// ACL: accept: src=['*'] dst=['autogroup:self:*']
|
||||
//
|
||||
// Nodes with filter rules: 1 of 8
|
||||
{
|
||||
"test_id": "ACL-A04",
|
||||
"timestamp": "2026-04-05T19:55:38Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_a04.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"autogroup:self:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"multi-exit-router": {
|
||||
"hostname": "multi-exit-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.105.127.107",
|
||||
"ipv6": "fd7a:115c:a1e0::ad37:7f6b",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "0.0.0.0-9.255.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "11.0.0.0-100.63.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.128.0.0-169.253.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "169.255.0.0-172.15.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "172.32.0.0-192.167.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "192.169.0.0-255.255.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "2000::-3fff:ffff:ffff:ffff:ffff:ffff:ffff:ffff",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "0.0.0.0-9.255.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "11.0.0.0-100.63.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.128.0.0-169.253.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "169.255.0.0-172.15.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "172.32.0.0-192.167.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "192.169.0.0-255.255.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "2000::-3fff:ffff:ffff:ffff:ffff:ffff:ffff:ffff",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-exit-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-exit-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-exit-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-exit-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,365 +0,0 @@
|
||||
// ACL-A05
|
||||
//
|
||||
// ACL: accept: src=['*'] dst=['autogroup:internet:*']
|
||||
//
|
||||
// Nodes with filter rules: 0 of 8
|
||||
{
|
||||
"test_id": "ACL-A05",
|
||||
"timestamp": "2026-04-05T19:55:59Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_a05.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"autogroup:internet:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,731 +0,0 @@
|
||||
// ACL-A06
|
||||
//
|
||||
// ACL: accept: src=['*'] dst=['autogroup:member:*']
|
||||
//
|
||||
// Nodes with filter rules: 1 of 8
|
||||
{
|
||||
"test_id": "ACL-A06",
|
||||
"timestamp": "2026-04-05T19:56:20Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_a06.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"autogroup:member:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"multi-exit-router": {
|
||||
"hostname": "multi-exit-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.105.127.107",
|
||||
"ipv6": "fd7a:115c:a1e0::ad37:7f6b",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "0.0.0.0-9.255.255.255",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "11.0.0.0-100.63.255.255",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.128.0.0-169.253.255.255",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "169.255.0.0-172.15.255.255",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "172.32.0.0-192.167.255.255",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "192.169.0.0-255.255.255.255",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "2000::-3fff:ffff:ffff:ffff:ffff:ffff:ffff:ffff",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
],
|
||||
"IPProto": [
|
||||
6
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "0.0.0.0-9.255.255.255",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "11.0.0.0-100.63.255.255",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.128.0.0-169.253.255.255",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "169.255.0.0-172.15.255.255",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "172.32.0.0-192.167.255.255",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "192.169.0.0-255.255.255.255",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "2000::-3fff:ffff:ffff:ffff:ffff:ffff:ffff:ffff",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
],
|
||||
"IPProto": [
|
||||
6
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-exit-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-exit-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-exit-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,608 +0,0 @@
|
||||
// ACL-A07
|
||||
//
|
||||
// ACL: accept: src=['*'] dst=['autogroup:self:*', 'tag:server:22']
|
||||
//
|
||||
// Nodes with filter rules: 1 of 8
|
||||
{
|
||||
"test_id": "ACL-A07",
|
||||
"timestamp": "2026-04-05T19:56:40Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_a07.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"autogroup:self:*",
|
||||
"tag:server:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.110.121.96",
|
||||
"fd7a:115c:a1e0::1737:7960"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.110.121.96",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::1737:7960",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.90.82",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.110.121.96",
|
||||
"fd7a:115c:a1e0::1737:7960"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.110.121.96",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::1737:7960",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.90.82",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
-3397
File diff suppressed because it is too large
Load Diff
@@ -1,365 +0,0 @@
|
||||
// ACL-A09
|
||||
//
|
||||
// ACL: accept: src=['autogroup:member'] dst=['autogroup:self:*']
|
||||
//
|
||||
// Nodes with filter rules: 0 of 8
|
||||
{
|
||||
"test_id": "ACL-A09",
|
||||
"timestamp": "2026-04-05T19:57:22Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_a09.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"autogroup:member"
|
||||
],
|
||||
"dst": [
|
||||
"autogroup:self:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,365 +0,0 @@
|
||||
// ACL-A10
|
||||
//
|
||||
// ACL: accept: src=['kratail2tid@passkey'] dst=['autogroup:self:*']
|
||||
//
|
||||
// Nodes with filter rules: 0 of 8
|
||||
{
|
||||
"test_id": "ACL-A10",
|
||||
"timestamp": "2026-04-05T19:57:43Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_a10.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"dst": [
|
||||
"autogroup:self:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,507 +0,0 @@
|
||||
// ACL-A11
|
||||
//
|
||||
// ACL: accept: src=['group:admins'] dst=['autogroup:self:*']
|
||||
//
|
||||
// Nodes with filter rules: 1 of 8
|
||||
{
|
||||
"test_id": "ACL-A11",
|
||||
"timestamp": "2026-04-05T19:58:04Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_a11.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"group:admins"
|
||||
],
|
||||
"dst": [
|
||||
"autogroup:self:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.107.162.14",
|
||||
"100.116.18.24",
|
||||
"100.124.195.93",
|
||||
"100.77.135.18",
|
||||
"fd7a:115c:a1e0::4b37:8712",
|
||||
"fd7a:115c:a1e0::7837:c35d",
|
||||
"fd7a:115c:a1e0::a237:a20e",
|
||||
"fd7a:115c:a1e0::ff37:1218"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.124.195.93",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::7837:c35d",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.116.18.24",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::ff37:1218",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.107.162.14",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::a237:a20e",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.77.135.18",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::4b37:8712",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.107.162.14",
|
||||
"100.116.18.24",
|
||||
"100.124.195.93",
|
||||
"100.77.135.18",
|
||||
"fd7a:115c:a1e0::4b37:8712",
|
||||
"fd7a:115c:a1e0::7837:c35d",
|
||||
"fd7a:115c:a1e0::a237:a20e",
|
||||
"fd7a:115c:a1e0::ff37:1218"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.124.195.93",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::7837:c35d",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.116.18.24",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::ff37:1218",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.107.162.14",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::a237:a20e",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.77.135.18",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::4b37:8712",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,637 +0,0 @@
|
||||
// ACL-A12
|
||||
//
|
||||
// ACL: accept: src=['*'] dst=['autogroup:self:22']
|
||||
//
|
||||
// Nodes with filter rules: 4 of 8
|
||||
{
|
||||
"test_id": "ACL-A12",
|
||||
"timestamp": "2026-04-05T19:58:25Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_a12.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"autogroup:self:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.110.121.96",
|
||||
"fd7a:115c:a1e0::1737:7960"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.110.121.96",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::1737:7960",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.90.82",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.110.121.96",
|
||||
"fd7a:115c:a1e0::1737:7960"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.110.121.96",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::1737:7960",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.90.82",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.110.121.96",
|
||||
"fd7a:115c:a1e0::1737:7960"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.110.121.96",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::1737:7960",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.110.121.96",
|
||||
"fd7a:115c:a1e0::1737:7960"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.110.121.96",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::1737:7960",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.90.82",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.90.82",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,779 +0,0 @@
|
||||
// ACL-A13
|
||||
//
|
||||
// ACL: accept: src=['*'] dst=['autogroup:self:80-443']
|
||||
//
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-A13",
|
||||
"timestamp": "2026-04-05T19:58:45Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_a13.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"autogroup:self:80-443"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"multi-exit-router": {
|
||||
"hostname": "multi-exit-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.105.127.107",
|
||||
"ipv6": "fd7a:115c:a1e0::ad37:7f6b",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "0.0.0.0-9.255.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "11.0.0.0-100.63.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.128.0.0-169.253.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "169.255.0.0-172.15.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "172.32.0.0-192.167.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "192.169.0.0-255.255.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "2000::-3fff:ffff:ffff:ffff:ffff:ffff:ffff:ffff",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "0.0.0.0-9.255.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "11.0.0.0-100.63.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.128.0.0-169.253.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "169.255.0.0-172.15.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "172.32.0.0-192.167.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "192.169.0.0-255.255.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "2000::-3fff:ffff:ffff:ffff:ffff:ffff:ffff:ffff",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-exit-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,685 +0,0 @@
|
||||
// ACL-A14
|
||||
//
|
||||
// ACL: accept: src=['*'] dst=['autogroup:self:22,80,443']
|
||||
//
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-A14",
|
||||
"timestamp": "2026-04-05T19:59:06Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_a14.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"autogroup:self:22,80,443"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"multi-exit-router": {
|
||||
"hostname": "multi-exit-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.105.127.107",
|
||||
"ipv6": "fd7a:115c:a1e0::ad37:7f6b",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"10.33.0.0/16",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"10.33.0.0/16",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "0.0.0.0-9.255.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "11.0.0.0-100.63.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.128.0.0-169.253.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "169.255.0.0-172.15.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "172.32.0.0-192.167.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "192.169.0.0-255.255.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "2000::-3fff:ffff:ffff:ffff:ffff:ffff:ffff:ffff",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "0.0.0.0-9.255.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "11.0.0.0-100.63.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.128.0.0-169.253.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "169.255.0.0-172.15.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "172.32.0.0-192.167.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "192.169.0.0-255.255.255.255",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "2000::-3fff:ffff:ffff:ffff:ffff:ffff:ffff:ffff",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "10.33.0.0/16",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "10.33.0.0/16",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "big-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128",
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-exit-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128",
|
||||
"0.0.0.0/0",
|
||||
"10.33.0.0/16",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,678 +0,0 @@
|
||||
// ACL-A15
|
||||
//
|
||||
// ACL: accept: src=['autogroup:member', 'autogroup:tagged'] dst=['*:*']
|
||||
//
|
||||
// Nodes with filter rules: 0 of 8
|
||||
{
|
||||
"test_id": "ACL-A15",
|
||||
"timestamp": "2026-04-05T19:59:27Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_a15.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"autogroup:member",
|
||||
"autogroup:tagged"
|
||||
],
|
||||
"dst": [
|
||||
"*:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"exit-b": {
|
||||
"hostname": "exit-b",
|
||||
"tags": [
|
||||
"tag:exit-b"
|
||||
],
|
||||
"ipv4": "100.116.18.24",
|
||||
"ipv6": "fd7a:115c:a1e0::ff37:1218",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"exit-a": {
|
||||
"hostname": "exit-a",
|
||||
"tags": [
|
||||
"tag:exit-a"
|
||||
],
|
||||
"ipv4": "100.124.195.93",
|
||||
"ipv6": "fd7a:115c:a1e0::7837:c35d",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "exit-b.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-a.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-a"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "exit-b.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-a.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-a"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "exit-b.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-a.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-a"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "exit-b.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-a.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-a"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "exit-b.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-a.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-a"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "exit-b.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-a.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-a"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "exit-b.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-a.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-a"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "exit-b.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-a.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-a"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,399 +0,0 @@
|
||||
// ACL-A16
|
||||
//
|
||||
// ACL: accept: src=['autogroup:member', 'autogroup:tagged'] dst=['tag:server:22']
|
||||
//
|
||||
// Nodes with filter rules: 0 of 8
|
||||
{
|
||||
"test_id": "ACL-A16",
|
||||
"timestamp": "2026-04-05T19:59:47Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_a16.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"autogroup:member",
|
||||
"autogroup:tagged"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "big-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128",
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
-2539
File diff suppressed because it is too large
Load Diff
@@ -1,572 +0,0 @@
|
||||
// ACL-AH01
|
||||
//
|
||||
// ACL: accept: src=['internal', 'subnet24'] dst=['*:*']
|
||||
//
|
||||
// Nodes with filter rules: 1 of 8
|
||||
{
|
||||
"test_id": "ACL-AH01",
|
||||
"timestamp": "2026-04-05T20:00:29Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_ah01.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"internal",
|
||||
"subnet24"
|
||||
],
|
||||
"dst": [
|
||||
"*:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.107.162.14",
|
||||
"100.109.43.124",
|
||||
"100.116.18.24",
|
||||
"100.124.195.93",
|
||||
"100.65.172.123",
|
||||
"100.77.135.18",
|
||||
"fd7a:115c:a1e0::4b37:8712",
|
||||
"fd7a:115c:a1e0::5a37:ac7c",
|
||||
"fd7a:115c:a1e0::7837:c35d",
|
||||
"fd7a:115c:a1e0::a237:a20e",
|
||||
"fd7a:115c:a1e0::a537:2b7c",
|
||||
"fd7a:115c:a1e0::ff37:1218"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.107.162.14",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::a237:a20e",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.77.135.18",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::4b37:8712",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.124.195.93",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::7837:c35d",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.116.18.24",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::ff37:1218",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.109.43.124",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::a537:2b7c",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.65.172.123",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5a37:ac7c",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.107.162.14",
|
||||
"100.109.43.124",
|
||||
"100.116.18.24",
|
||||
"100.124.195.93",
|
||||
"100.65.172.123",
|
||||
"100.77.135.18",
|
||||
"fd7a:115c:a1e0::4b37:8712",
|
||||
"fd7a:115c:a1e0::5a37:ac7c",
|
||||
"fd7a:115c:a1e0::7837:c35d",
|
||||
"fd7a:115c:a1e0::a237:a20e",
|
||||
"fd7a:115c:a1e0::a537:2b7c",
|
||||
"fd7a:115c:a1e0::ff37:1218"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.107.162.14",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::a237:a20e",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.77.135.18",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::4b37:8712",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.124.195.93",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::7837:c35d",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.116.18.24",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::ff37:1218",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.109.43.124",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::a537:2b7c",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.65.172.123",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5a37:ac7c",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,620 +0,0 @@
|
||||
// ACL-AH02
|
||||
//
|
||||
// ACL: accept: src=['internal', '100.108.74.26'] dst=['tag:server:22']
|
||||
//
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-AH02",
|
||||
"timestamp": "2026-04-05T20:00:50Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_ah02.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"internal",
|
||||
"100.108.74.26"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"router-a": {
|
||||
"hostname": "router-a",
|
||||
"tags": [
|
||||
"tag:router-a"
|
||||
],
|
||||
"ipv4": "100.109.43.124",
|
||||
"ipv6": "fd7a:115c:a1e0::a537:2b7c",
|
||||
"routable_ips": [
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.44.0.0/16"
|
||||
]
|
||||
},
|
||||
"router-b": {
|
||||
"hostname": "router-b",
|
||||
"tags": [
|
||||
"tag:router-b"
|
||||
],
|
||||
"ipv4": "100.65.172.123",
|
||||
"ipv6": "fd7a:115c:a1e0::5a37:ac7c",
|
||||
"routable_ips": [
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.55.0.0/16"
|
||||
]
|
||||
},
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"multi-exit-router": {
|
||||
"hostname": "multi-exit-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.105.127.107",
|
||||
"ipv6": "fd7a:115c:a1e0::ad37:7f6b",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"100.108.74.26"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"100.108.74.26"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"100.108.74.26"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"100.108.74.26"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "router-a.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.109.43.124/32",
|
||||
"fd7a:115c:a1e0::a537:2b7c/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.109.43.124/32",
|
||||
"fd7a:115c:a1e0::a537:2b7c/128",
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router-a"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "router-b.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.65.172.123/32",
|
||||
"fd7a:115c:a1e0::5a37:ac7c/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.65.172.123/32",
|
||||
"fd7a:115c:a1e0::5a37:ac7c/128",
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "big-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128",
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-exit-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128",
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
File diff suppressed because it is too large
Load Diff
@@ -1,616 +0,0 @@
|
||||
// ACL-AH04
|
||||
//
|
||||
// ACL: accept: src=['internal', '10.0.0.0/8'] dst=['tag:server:22']
|
||||
//
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-AH04",
|
||||
"timestamp": "2026-04-05T20:01:31Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_ah04.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"internal",
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"router-a": {
|
||||
"hostname": "router-a",
|
||||
"tags": [
|
||||
"tag:router-a"
|
||||
],
|
||||
"ipv4": "100.109.43.124",
|
||||
"ipv6": "fd7a:115c:a1e0::a537:2b7c",
|
||||
"routable_ips": [
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.44.0.0/16"
|
||||
]
|
||||
},
|
||||
"router-b": {
|
||||
"hostname": "router-b",
|
||||
"tags": [
|
||||
"tag:router-b"
|
||||
],
|
||||
"ipv4": "100.65.172.123",
|
||||
"ipv6": "fd7a:115c:a1e0::5a37:ac7c",
|
||||
"routable_ips": [
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.55.0.0/16"
|
||||
]
|
||||
},
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"multi-exit-router": {
|
||||
"hostname": "multi-exit-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.105.127.107",
|
||||
"ipv6": "fd7a:115c:a1e0::ad37:7f6b",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "router-a.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.109.43.124/32",
|
||||
"fd7a:115c:a1e0::a537:2b7c/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.109.43.124/32",
|
||||
"fd7a:115c:a1e0::a537:2b7c/128",
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router-a"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "router-b.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.65.172.123/32",
|
||||
"fd7a:115c:a1e0::5a37:ac7c/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.65.172.123/32",
|
||||
"fd7a:115c:a1e0::5a37:ac7c/128",
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "big-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128",
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-exit-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128",
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
@@ -1,612 +0,0 @@
|
||||
// ACL-AR01
|
||||
//
|
||||
// ACLs: 2 rules
|
||||
// accept: src=['tag:client'] dst=['tag:server:22']
|
||||
// accept: src=['tag:client'] dst=['tag:server:80,443']
|
||||
//
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-AR01",
|
||||
"timestamp": "2026-04-05T20:02:34Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_ar01.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"tag:client"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:22"
|
||||
]
|
||||
},
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"tag:client"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:80,443"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
File diff suppressed because it is too large
Load Diff
@@ -1,622 +0,0 @@
|
||||
// ACL-AR03
|
||||
//
|
||||
// ACLs: 3 rules
|
||||
// accept: src=['tag:client'] dst=['tag:server:22']
|
||||
// accept: src=['tag:client'] dst=['tag:server:80']
|
||||
// accept: src=['tag:client'] dst=['tag:server:443']
|
||||
//
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-AR03",
|
||||
"timestamp": "2026-04-05T20:03:15Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_ar03.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"tag:client"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:22"
|
||||
]
|
||||
},
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"tag:client"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:80"
|
||||
]
|
||||
},
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"tag:client"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:443"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,851 +0,0 @@
|
||||
// ACL-AR04
|
||||
//
|
||||
// ACLs: 3 rules
|
||||
// accept: src=['tag:client'] dst=['tag:server:22']
|
||||
// accept: src=['tag:prod'] dst=['tag:server:22']
|
||||
// accept: src=['tag:router'] dst=['tag:server:22']
|
||||
//
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-AR04",
|
||||
"timestamp": "2026-04-05T20:03:36Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_ar04.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"tag:client"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:22"
|
||||
]
|
||||
},
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"tag:prod"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:22"
|
||||
]
|
||||
},
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"tag:router"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"multi-exit-router": {
|
||||
"hostname": "multi-exit-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.105.127.107",
|
||||
"ipv6": "fd7a:115c:a1e0::ad37:7f6b",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"fd7a:115c:a1e0::5b37:80f"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.105.127.107",
|
||||
"100.119.241.111",
|
||||
"100.92.142.61",
|
||||
"100.97.174.21",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::3e37:8e3d",
|
||||
"fd7a:115c:a1e0::5137:ae15",
|
||||
"fd7a:115c:a1e0::ad37:7f6b"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"fd7a:115c:a1e0::5b37:80f"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.105.127.107",
|
||||
"100.119.241.111",
|
||||
"100.92.142.61",
|
||||
"100.97.174.21",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::3e37:8e3d",
|
||||
"fd7a:115c:a1e0::5137:ae15",
|
||||
"fd7a:115c:a1e0::ad37:7f6b"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"fd7a:115c:a1e0::5b37:80f"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.105.127.107",
|
||||
"100.119.241.111",
|
||||
"100.92.142.61",
|
||||
"100.97.174.21",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::3e37:8e3d",
|
||||
"fd7a:115c:a1e0::5137:ae15",
|
||||
"fd7a:115c:a1e0::ad37:7f6b"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"fd7a:115c:a1e0::5b37:80f"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.105.127.107",
|
||||
"100.119.241.111",
|
||||
"100.92.142.61",
|
||||
"100.97.174.21",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::3e37:8e3d",
|
||||
"fd7a:115c:a1e0::5137:ae15",
|
||||
"fd7a:115c:a1e0::ad37:7f6b"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "big-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-exit-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,751 +0,0 @@
|
||||
// ACL-AR05
|
||||
//
|
||||
// ACLs: 4 rules
|
||||
// accept: src=['tag:client'] dst=['tag:server:22']
|
||||
// accept: src=['tag:client'] dst=['tag:server:80']
|
||||
// accept: src=['tag:prod'] dst=['tag:server:22']
|
||||
// ... and 1 more
|
||||
//
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-AR05",
|
||||
"timestamp": "2026-04-05T20:03:57Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_ar05.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"tag:client"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:22"
|
||||
]
|
||||
},
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"tag:client"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:80"
|
||||
]
|
||||
},
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"tag:prod"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:22"
|
||||
]
|
||||
},
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"tag:prod"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:443"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"fd7a:115c:a1e0::5b37:80f"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"fd7a:115c:a1e0::5b37:80f"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"fd7a:115c:a1e0::5b37:80f"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"fd7a:115c:a1e0::5b37:80f"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
@@ -1,590 +0,0 @@
|
||||
// ACL-AT05
|
||||
//
|
||||
// ACLs: 2 rules
|
||||
// accept: src=['tag:client'] dst=['tag:server:22']
|
||||
// accept: src=['tag:server'] dst=['tag:client:22']
|
||||
//
|
||||
// Nodes with filter rules: 3 of 8
|
||||
{
|
||||
"test_id": "ACL-AT05",
|
||||
"timestamp": "2026-04-05T20:06:02Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_at05.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"tag:client"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:22"
|
||||
]
|
||||
},
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"tag:server"
|
||||
],
|
||||
"dst": [
|
||||
"tag:client:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.108.74.26",
|
||||
"fd7a:115c:a1e0::b901:4a87"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.83.200.69",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::c537:c845",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.108.74.26",
|
||||
"fd7a:115c:a1e0::b901:4a87"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.83.200.69",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::c537:c845",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.108.74.26",
|
||||
"fd7a:115c:a1e0::b901:4a87"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.83.200.69",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::c537:c845",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.108.74.26",
|
||||
"fd7a:115c:a1e0::b901:4a87"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.83.200.69",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::c537:c845",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,833 +0,0 @@
|
||||
// ACL-AT06
|
||||
//
|
||||
// ACLs: 4 rules
|
||||
// accept: src=['tag:client'] dst=['tag:server:22']
|
||||
// accept: src=['tag:server'] dst=['tag:prod:5432']
|
||||
// accept: src=['tag:prod'] dst=['tag:client:80']
|
||||
// ... and 1 more
|
||||
//
|
||||
// Nodes with filter rules: 4 of 8
|
||||
{
|
||||
"test_id": "ACL-AT06",
|
||||
"timestamp": "2026-04-05T20:06:23Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_at06.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"tag:client"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:22"
|
||||
]
|
||||
},
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"tag:server"
|
||||
],
|
||||
"dst": [
|
||||
"tag:prod:5432"
|
||||
]
|
||||
},
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"tag:prod"
|
||||
],
|
||||
"dst": [
|
||||
"tag:client:80"
|
||||
]
|
||||
},
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"tag:client"
|
||||
],
|
||||
"dst": [
|
||||
"tag:prod:443"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.108.74.26",
|
||||
"fd7a:115c:a1e0::b901:4a87"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"fd7a:115c:a1e0::5b37:80f"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.83.200.69",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::c537:c845",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.108.74.26",
|
||||
"fd7a:115c:a1e0::b901:4a87"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"fd7a:115c:a1e0::5b37:80f"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.83.200.69",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::c537:c845",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"fd7a:115c:a1e0::5b37:80f"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.83.200.69",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::c537:c845",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"fd7a:115c:a1e0::5b37:80f"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.83.200.69",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::c537:c845",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.108.74.26",
|
||||
"fd7a:115c:a1e0::b901:4a87"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.108.74.26",
|
||||
"fd7a:115c:a1e0::b901:4a87"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,487 +0,0 @@
|
||||
// ACL-AU01
|
||||
//
|
||||
// ACL: accept: src=['kristoffer@dalby.cc'] dst=['tag:server:22']
|
||||
//
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-AU01",
|
||||
"timestamp": "2026-04-05T20:06:44Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_au01.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"kristoffer@dalby.cc"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.110.121.96",
|
||||
"fd7a:115c:a1e0::1737:7960"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.110.121.96",
|
||||
"fd7a:115c:a1e0::1737:7960"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.110.121.96",
|
||||
"fd7a:115c:a1e0::1737:7960"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.110.121.96",
|
||||
"fd7a:115c:a1e0::1737:7960"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,487 +0,0 @@
|
||||
// ACL-AU02
|
||||
//
|
||||
// ACL: accept: src=['monitorpasskeykradalby@passkey'] dst=['tag:prod:5432']
|
||||
//
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-AU02",
|
||||
"timestamp": "2026-04-05T20:07:04Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_au02.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"dst": [
|
||||
"tag:prod:5432"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,660 +0,0 @@
|
||||
// ACL-AU03
|
||||
//
|
||||
// ACL: accept: src=['group:developers'] dst=['tag:server:22', 'tag:prod:5432']
|
||||
//
|
||||
// Nodes with filter rules: 3 of 8
|
||||
{
|
||||
"test_id": "ACL-AU03",
|
||||
"timestamp": "2026-04-05T20:07:25Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_au03.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"group:developers"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:22",
|
||||
"tag:prod:5432"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.110.121.96",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.110.121.96",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.110.121.96",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.110.121.96",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.110.121.96",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.110.121.96",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
@@ -1,563 +0,0 @@
|
||||
// ACL-AU06
|
||||
//
|
||||
// ACL: accept: src=['group:admins', 'group:developers', 'group:monitors'] dst=['tag:server:22']
|
||||
//
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-AU06",
|
||||
"timestamp": "2026-04-05T20:08:28Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_au06.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"group:admins",
|
||||
"group:developers",
|
||||
"group:monitors"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
-1354
File diff suppressed because it is too large
Load Diff
@@ -1,859 +0,0 @@
|
||||
// ACL-C02
|
||||
//
|
||||
// ACLs: 3 rules
|
||||
// accept: src=['tag:client', 'autogroup:member'] dst=['tag:server:22']
|
||||
// accept: src=['tag:prod'] dst=['tag:server:80']
|
||||
// accept: src=['group:admins'] dst=['tag:prod:5432']
|
||||
//
|
||||
// Nodes with filter rules: 3 of 8
|
||||
{
|
||||
"test_id": "ACL-C02",
|
||||
"timestamp": "2026-04-05T20:09:10Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_c02.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"tag:client",
|
||||
"autogroup:member"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:22"
|
||||
]
|
||||
},
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"tag:prod"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:80"
|
||||
]
|
||||
},
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"group:admins"
|
||||
],
|
||||
"dst": [
|
||||
"tag:prod:5432"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"fd7a:115c:a1e0::5b37:80f"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"fd7a:115c:a1e0::5b37:80f"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"fd7a:115c:a1e0::5b37:80f"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"fd7a:115c:a1e0::5b37:80f"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,905 +0,0 @@
|
||||
// ACL-C03
|
||||
//
|
||||
// ACLs: 2 rules
|
||||
// accept: src=['tag:client'] dst=['tag:server:22', 'tag:prod:5432', 'webserver:80']
|
||||
// accept: src=['autogroup:member'] dst=['autogroup:self:*']
|
||||
//
|
||||
// Nodes with filter rules: 6 of 8
|
||||
{
|
||||
"test_id": "ACL-C03",
|
||||
"timestamp": "2026-04-05T20:09:31Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_c03.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"tag:client"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:22",
|
||||
"tag:prod:5432",
|
||||
"webserver:80"
|
||||
]
|
||||
},
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"autogroup:member"
|
||||
],
|
||||
"dst": [
|
||||
"autogroup:self:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.110.121.96",
|
||||
"fd7a:115c:a1e0::1737:7960"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.110.121.96",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::1737:7960",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.90.82",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.110.121.96",
|
||||
"fd7a:115c:a1e0::1737:7960"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.110.121.96",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::1737:7960",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.90.82",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.110.121.96",
|
||||
"fd7a:115c:a1e0::1737:7960"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.110.121.96",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::1737:7960",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.110.121.96",
|
||||
"fd7a:115c:a1e0::1737:7960"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.110.121.96",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::1737:7960",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.90.82",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.90.82",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
-2109
File diff suppressed because it is too large
Load Diff
-3910
File diff suppressed because it is too large
Load Diff
@@ -1,651 +0,0 @@
|
||||
// ACL-C06
|
||||
//
|
||||
// ACL: accept: src=['tag:client', 'tag:prod', 'tag:server', 'autogroup:member', 'group:admins'] dst=['tag:server:22']
|
||||
//
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-C06",
|
||||
"timestamp": "2026-04-05T20:10:34Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_c06.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"tag:client",
|
||||
"tag:prod",
|
||||
"tag:server",
|
||||
"autogroup:member",
|
||||
"group:admins"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"100.103.90.82",
|
||||
"100.108.74.26",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::5b37:80f",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::b901:4a87",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"100.103.90.82",
|
||||
"100.108.74.26",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::5b37:80f",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::b901:4a87",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"100.103.90.82",
|
||||
"100.108.74.26",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::5b37:80f",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::b901:4a87",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"100.103.90.82",
|
||||
"100.108.74.26",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::5b37:80f",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::b901:4a87",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,688 +0,0 @@
|
||||
// ACL-C07
|
||||
//
|
||||
// ACLs: 4 rules
|
||||
// accept: src=['tag:client'] dst=['tag:server:22']
|
||||
// accept: src=['tag:client'] dst=['tag:server:80']
|
||||
// accept: src=['tag:client'] dst=['tag:server:443']
|
||||
// ... and 1 more
|
||||
//
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-C07",
|
||||
"timestamp": "2026-04-05T20:10:54Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_c07.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"tag:client"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:22"
|
||||
]
|
||||
},
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"tag:client"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:80"
|
||||
]
|
||||
},
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"tag:client"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:443"
|
||||
]
|
||||
},
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"tag:client"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:8080"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 8080,
|
||||
"Last": 8080
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 8080,
|
||||
"Last": 8080
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 8080,
|
||||
"Last": 8080
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 8080,
|
||||
"Last": 8080
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 8080,
|
||||
"Last": 8080
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 8080,
|
||||
"Last": 8080
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 8080,
|
||||
"Last": 8080
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 8080,
|
||||
"Last": 8080
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
-2873
File diff suppressed because it is too large
Load Diff
-2497
File diff suppressed because it is too large
Load Diff
-3217
File diff suppressed because it is too large
Load Diff
-1124
File diff suppressed because it is too large
Load Diff
@@ -1,518 +0,0 @@
|
||||
// ACL-D02
|
||||
//
|
||||
// ACL: accept: src=['tag:client'] dst=['tag:server:22', 'webserver:22']
|
||||
//
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-D02",
|
||||
"timestamp": "2026-04-05T20:12:39Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_d02.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"tag:client"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:22",
|
||||
"webserver:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
-1188
File diff suppressed because it is too large
Load Diff
-1172
File diff suppressed because it is too large
Load Diff
-1054
File diff suppressed because it is too large
Load Diff
-1026
File diff suppressed because it is too large
Load Diff
-3739
File diff suppressed because it is too large
Load Diff
@@ -1,704 +0,0 @@
|
||||
// ACL-D08
|
||||
//
|
||||
// ACLs: 2 rules
|
||||
// accept: src=['*'] dst=['autogroup:self:*']
|
||||
// accept: src=['kratail2tid@passkey'] dst=['kratail2tid@passkey:*']
|
||||
//
|
||||
// Nodes with filter rules: 4 of 8
|
||||
{
|
||||
"test_id": "ACL-D08",
|
||||
"timestamp": "2026-04-05T20:14:44Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_d08.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"autogroup:self:*"
|
||||
]
|
||||
},
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"dst": [
|
||||
"kratail2tid@passkey:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.110.121.96",
|
||||
"fd7a:115c:a1e0::1737:7960"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.110.121.96",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::1737:7960",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.90.82",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.110.121.96",
|
||||
"fd7a:115c:a1e0::1737:7960"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.110.121.96",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::1737:7960",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.90.82",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.110.121.96",
|
||||
"fd7a:115c:a1e0::1737:7960"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.110.121.96",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::1737:7960",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.110.121.96",
|
||||
"fd7a:115c:a1e0::1737:7960"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.110.121.96",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::1737:7960",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.90.82",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.90.82",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 0,
|
||||
"Last": 65535
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
-1171
File diff suppressed because it is too large
Load Diff
-1187
File diff suppressed because it is too large
Load Diff
-1171
File diff suppressed because it is too large
Load Diff
@@ -1,997 +0,0 @@
|
||||
// ACL-E04
|
||||
//
|
||||
// ACL: accept: src=['*'] dst=['100.108.74.26:22']
|
||||
//
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-E04",
|
||||
"timestamp": "2026-04-05T20:16:08Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_e04.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"100.108.74.26:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"router-a": {
|
||||
"hostname": "router-a",
|
||||
"tags": [
|
||||
"tag:router-a"
|
||||
],
|
||||
"ipv4": "100.109.43.124",
|
||||
"ipv6": "fd7a:115c:a1e0::a537:2b7c",
|
||||
"routable_ips": [
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.44.0.0/16"
|
||||
]
|
||||
},
|
||||
"group-b-client": {
|
||||
"hostname": "group-b-client",
|
||||
"tags": [
|
||||
"tag:group-b"
|
||||
],
|
||||
"ipv4": "100.77.135.18",
|
||||
"ipv6": "fd7a:115c:a1e0::4b37:8712",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"router-b": {
|
||||
"hostname": "router-b",
|
||||
"tags": [
|
||||
"tag:router-b"
|
||||
],
|
||||
"ipv4": "100.65.172.123",
|
||||
"ipv6": "fd7a:115c:a1e0::5a37:ac7c",
|
||||
"routable_ips": [
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.55.0.0/16"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-b": {
|
||||
"hostname": "exit-b",
|
||||
"tags": [
|
||||
"tag:exit-b"
|
||||
],
|
||||
"ipv4": "100.116.18.24",
|
||||
"ipv6": "fd7a:115c:a1e0::ff37:1218",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"exit-a": {
|
||||
"hostname": "exit-a",
|
||||
"tags": [
|
||||
"tag:exit-a"
|
||||
],
|
||||
"ipv4": "100.124.195.93",
|
||||
"ipv6": "fd7a:115c:a1e0::7837:c35d",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"multi-exit-router": {
|
||||
"hostname": "multi-exit-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.105.127.107",
|
||||
"ipv6": "fd7a:115c:a1e0::ad37:7f6b",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"group-a-client": {
|
||||
"hostname": "group-a-client",
|
||||
"tags": [
|
||||
"tag:group-a"
|
||||
],
|
||||
"ipv4": "100.107.162.14",
|
||||
"ipv6": "fd7a:115c:a1e0::a237:a20e",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "router-a.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.109.43.124/32",
|
||||
"fd7a:115c:a1e0::a537:2b7c/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.109.43.124/32",
|
||||
"fd7a:115c:a1e0::a537:2b7c/128",
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router-a"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "group-b-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.77.135.18/32",
|
||||
"fd7a:115c:a1e0::4b37:8712/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.77.135.18/32",
|
||||
"fd7a:115c:a1e0::4b37:8712/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:group-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "router-b.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.65.172.123/32",
|
||||
"fd7a:115c:a1e0::5a37:ac7c/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.65.172.123/32",
|
||||
"fd7a:115c:a1e0::5a37:ac7c/128",
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "ha-router2.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "big-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128",
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-b.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-a.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-a"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-exit-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128",
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128",
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "group-a-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.107.162.14/32",
|
||||
"fd7a:115c:a1e0::a237:a20e/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.107.162.14/32",
|
||||
"fd7a:115c:a1e0::a237:a20e/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:group-a"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "ha-router1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128",
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
-1025
File diff suppressed because it is too large
Load Diff
@@ -1,997 +0,0 @@
|
||||
// ACL-E06
|
||||
//
|
||||
// ACL: accept: src=['*'] dst=['webserver:22']
|
||||
//
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-E06",
|
||||
"timestamp": "2026-04-05T20:16:49Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_e06.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"webserver:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"router-a": {
|
||||
"hostname": "router-a",
|
||||
"tags": [
|
||||
"tag:router-a"
|
||||
],
|
||||
"ipv4": "100.109.43.124",
|
||||
"ipv6": "fd7a:115c:a1e0::a537:2b7c",
|
||||
"routable_ips": [
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.44.0.0/16"
|
||||
]
|
||||
},
|
||||
"group-b-client": {
|
||||
"hostname": "group-b-client",
|
||||
"tags": [
|
||||
"tag:group-b"
|
||||
],
|
||||
"ipv4": "100.77.135.18",
|
||||
"ipv6": "fd7a:115c:a1e0::4b37:8712",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"router-b": {
|
||||
"hostname": "router-b",
|
||||
"tags": [
|
||||
"tag:router-b"
|
||||
],
|
||||
"ipv4": "100.65.172.123",
|
||||
"ipv6": "fd7a:115c:a1e0::5a37:ac7c",
|
||||
"routable_ips": [
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.55.0.0/16"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-b": {
|
||||
"hostname": "exit-b",
|
||||
"tags": [
|
||||
"tag:exit-b"
|
||||
],
|
||||
"ipv4": "100.116.18.24",
|
||||
"ipv6": "fd7a:115c:a1e0::ff37:1218",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"exit-a": {
|
||||
"hostname": "exit-a",
|
||||
"tags": [
|
||||
"tag:exit-a"
|
||||
],
|
||||
"ipv4": "100.124.195.93",
|
||||
"ipv6": "fd7a:115c:a1e0::7837:c35d",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"multi-exit-router": {
|
||||
"hostname": "multi-exit-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.105.127.107",
|
||||
"ipv6": "fd7a:115c:a1e0::ad37:7f6b",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"group-a-client": {
|
||||
"hostname": "group-a-client",
|
||||
"tags": [
|
||||
"tag:group-a"
|
||||
],
|
||||
"ipv4": "100.107.162.14",
|
||||
"ipv6": "fd7a:115c:a1e0::a237:a20e",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "router-a.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.109.43.124/32",
|
||||
"fd7a:115c:a1e0::a537:2b7c/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.109.43.124/32",
|
||||
"fd7a:115c:a1e0::a537:2b7c/128",
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router-a"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "group-b-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.77.135.18/32",
|
||||
"fd7a:115c:a1e0::4b37:8712/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.77.135.18/32",
|
||||
"fd7a:115c:a1e0::4b37:8712/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:group-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "router-b.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.65.172.123/32",
|
||||
"fd7a:115c:a1e0::5a37:ac7c/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.65.172.123/32",
|
||||
"fd7a:115c:a1e0::5a37:ac7c/128",
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "ha-router2.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "big-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128",
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-b.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-a.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-a"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-exit-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128",
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128",
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "group-a-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.107.162.14/32",
|
||||
"fd7a:115c:a1e0::a237:a20e/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.107.162.14/32",
|
||||
"fd7a:115c:a1e0::a237:a20e/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:group-a"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "ha-router1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128",
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,487 +0,0 @@
|
||||
// ACL-E07
|
||||
//
|
||||
// ACL: accept: src=['kratail2tid@passkey'] dst=['tag:server:22']
|
||||
//
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-E07",
|
||||
"timestamp": "2026-04-05T20:17:10Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_e07.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,487 +0,0 @@
|
||||
// ACL-E08
|
||||
//
|
||||
// ACL: accept: src=['group:admins'] dst=['tag:server:22']
|
||||
//
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-E08",
|
||||
"timestamp": "2026-04-05T20:17:31Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_e08.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"group:admins"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,488 +0,0 @@
|
||||
// ACL-E09
|
||||
//
|
||||
// ACL: accept: src=['kratail2tid@passkey', 'group:admins'] dst=['tag:server:22']
|
||||
//
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-E09",
|
||||
"timestamp": "2026-04-05T20:17:52Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_e09.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"kratail2tid@passkey",
|
||||
"group:admins"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,78 +0,0 @@
|
||||
// ACL-ERR01
|
||||
//
|
||||
// ACL: accept: src=['tag:nonexistent'] dst=['tag:server:22']
|
||||
{
|
||||
"test_id": "ACL-ERR01",
|
||||
"timestamp": "2026-04-05T20:18:13Z",
|
||||
"error": true,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_err01.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"tag:nonexistent"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 400,
|
||||
"api_response_body": {
|
||||
"message": "src=tag not found: \"tag:nonexistent\""
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,78 +0,0 @@
|
||||
// ACL-ERR02
|
||||
//
|
||||
// ACL: accept: src=['autogroup:self'] dst=['tag:server:22']
|
||||
{
|
||||
"test_id": "ACL-ERR02",
|
||||
"timestamp": "2026-04-05T20:18:13Z",
|
||||
"error": true,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_err02.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"autogroup:self"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 400,
|
||||
"api_response_body": {
|
||||
"message": "\"autogroup:self\" not valid on the src side of a rule"
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,78 +0,0 @@
|
||||
// ACL-ERR03
|
||||
//
|
||||
// ACL: accept: src=['*'] dst=['autogroup:self']
|
||||
{
|
||||
"test_id": "ACL-ERR03",
|
||||
"timestamp": "2026-04-05T20:18:13Z",
|
||||
"error": true,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_err03.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"autogroup:self"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 400,
|
||||
"api_response_body": {
|
||||
"message": "dst=\"autogroup:self\": port range \"self\": invalid first integer"
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,78 +0,0 @@
|
||||
// ACL-ERR04
|
||||
//
|
||||
// ACL: accept: src=['tag:nonexistent'] dst=['*:*']
|
||||
{
|
||||
"test_id": "ACL-ERR04",
|
||||
"timestamp": "2026-04-05T20:18:14Z",
|
||||
"error": true,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_err04.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"tag:nonexistent"
|
||||
],
|
||||
"dst": [
|
||||
"*:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 400,
|
||||
"api_response_body": {
|
||||
"message": "src=tag not found: \"tag:nonexistent\""
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,78 +0,0 @@
|
||||
// ACL-ERR05
|
||||
//
|
||||
// ACL: accept: src=['*'] dst=['tag:nonexistent:22']
|
||||
{
|
||||
"test_id": "ACL-ERR05",
|
||||
"timestamp": "2026-04-05T20:18:14Z",
|
||||
"error": true,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_err05.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"tag:nonexistent:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 400,
|
||||
"api_response_body": {
|
||||
"message": "dst=\"tag:nonexistent\": tag not found: \"tag:nonexistent\""
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,78 +0,0 @@
|
||||
// ACL-ERR06
|
||||
//
|
||||
// ACL: accept: src=['tag:client'] dst=['tag:server:22']
|
||||
{
|
||||
"test_id": "ACL-ERR06",
|
||||
"timestamp": "2026-04-05T20:18:14Z",
|
||||
"error": true,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_err06.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "deny",
|
||||
"src": [
|
||||
"tag:client"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 400,
|
||||
"api_response_body": {
|
||||
"message": "action=\"deny\" is not supported"
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,78 +0,0 @@
|
||||
// ACL-ERR07
|
||||
//
|
||||
// ACL: accept: src=['*'] dst=['tag:server:ssh']
|
||||
{
|
||||
"test_id": "ACL-ERR07",
|
||||
"timestamp": "2026-04-05T20:18:18Z",
|
||||
"error": true,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_err07.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:ssh"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 400,
|
||||
"api_response_body": {
|
||||
"message": "dst=\"tag:server:ssh\": port range \"ssh\": invalid first integer"
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,89 +0,0 @@
|
||||
// ACL-ERR08
|
||||
//
|
||||
// ACLs: 2 rules
|
||||
// accept: src=['*'] dst=['autogroup:self:*']
|
||||
// accept: src=['tag:client'] dst=['autogroup:self:22']
|
||||
{
|
||||
"test_id": "ACL-ERR08",
|
||||
"timestamp": "2026-04-05T20:18:23Z",
|
||||
"error": true,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_err08.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"autogroup:self:*"
|
||||
]
|
||||
},
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"tag:client"
|
||||
],
|
||||
"dst": [
|
||||
"autogroup:self:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 400,
|
||||
"api_response_body": {
|
||||
"message": "autogroup:self can only be used with users, groups, or supported autogroups"
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,89 +0,0 @@
|
||||
// ACL-ERR09
|
||||
//
|
||||
// ACLs: 2 rules
|
||||
// accept: src=['*'] dst=['autogroup:self:*']
|
||||
// accept: src=['autogroup:tagged'] dst=['autogroup:self:22']
|
||||
{
|
||||
"test_id": "ACL-ERR09",
|
||||
"timestamp": "2026-04-05T20:18:28Z",
|
||||
"error": true,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_err09.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"autogroup:self:*"
|
||||
]
|
||||
},
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"autogroup:tagged"
|
||||
],
|
||||
"dst": [
|
||||
"autogroup:self:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 400,
|
||||
"api_response_body": {
|
||||
"message": "autogroup:self can only be used with users, groups, or supported autogroups"
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,997 +0,0 @@
|
||||
// ACL-H01
|
||||
//
|
||||
// ACL: accept: src=['*'] dst=['webserver:80']
|
||||
//
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-H01",
|
||||
"timestamp": "2026-04-05T20:18:33Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_h01.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"webserver:80"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"router-a": {
|
||||
"hostname": "router-a",
|
||||
"tags": [
|
||||
"tag:router-a"
|
||||
],
|
||||
"ipv4": "100.109.43.124",
|
||||
"ipv6": "fd7a:115c:a1e0::a537:2b7c",
|
||||
"routable_ips": [
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.44.0.0/16"
|
||||
]
|
||||
},
|
||||
"group-b-client": {
|
||||
"hostname": "group-b-client",
|
||||
"tags": [
|
||||
"tag:group-b"
|
||||
],
|
||||
"ipv4": "100.77.135.18",
|
||||
"ipv6": "fd7a:115c:a1e0::4b37:8712",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"router-b": {
|
||||
"hostname": "router-b",
|
||||
"tags": [
|
||||
"tag:router-b"
|
||||
],
|
||||
"ipv4": "100.65.172.123",
|
||||
"ipv6": "fd7a:115c:a1e0::5a37:ac7c",
|
||||
"routable_ips": [
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.55.0.0/16"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-b": {
|
||||
"hostname": "exit-b",
|
||||
"tags": [
|
||||
"tag:exit-b"
|
||||
],
|
||||
"ipv4": "100.116.18.24",
|
||||
"ipv6": "fd7a:115c:a1e0::ff37:1218",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"exit-a": {
|
||||
"hostname": "exit-a",
|
||||
"tags": [
|
||||
"tag:exit-a"
|
||||
],
|
||||
"ipv4": "100.124.195.93",
|
||||
"ipv6": "fd7a:115c:a1e0::7837:c35d",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"multi-exit-router": {
|
||||
"hostname": "multi-exit-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.105.127.107",
|
||||
"ipv6": "fd7a:115c:a1e0::ad37:7f6b",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"group-a-client": {
|
||||
"hostname": "group-a-client",
|
||||
"tags": [
|
||||
"tag:group-a"
|
||||
],
|
||||
"ipv4": "100.107.162.14",
|
||||
"ipv6": "fd7a:115c:a1e0::a237:a20e",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "router-a.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.109.43.124/32",
|
||||
"fd7a:115c:a1e0::a537:2b7c/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.109.43.124/32",
|
||||
"fd7a:115c:a1e0::a537:2b7c/128",
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router-a"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "group-b-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.77.135.18/32",
|
||||
"fd7a:115c:a1e0::4b37:8712/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.77.135.18/32",
|
||||
"fd7a:115c:a1e0::4b37:8712/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:group-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "router-b.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.65.172.123/32",
|
||||
"fd7a:115c:a1e0::5a37:ac7c/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.65.172.123/32",
|
||||
"fd7a:115c:a1e0::5a37:ac7c/128",
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "ha-router2.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "big-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128",
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-b.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.116.18.24/32",
|
||||
"fd7a:115c:a1e0::ff37:1218/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-a.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.124.195.93/32",
|
||||
"fd7a:115c:a1e0::7837:c35d/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit-a"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-exit-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128",
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.119.241.111/32",
|
||||
"fd7a:115c:a1e0::3337:f16f/128",
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "group-a-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.107.162.14/32",
|
||||
"fd7a:115c:a1e0::a237:a20e/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.107.162.14/32",
|
||||
"fd7a:115c:a1e0::a237:a20e/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:group-a"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "ha-router1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128",
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
-1171
File diff suppressed because it is too large
Load Diff
@@ -1,615 +0,0 @@
|
||||
// ACL-H03
|
||||
//
|
||||
// ACL: accept: src=['internal'] dst=['tag:server:22']
|
||||
//
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-H03",
|
||||
"timestamp": "2026-04-05T20:19:19Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_h03.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"internal"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"router-a": {
|
||||
"hostname": "router-a",
|
||||
"tags": [
|
||||
"tag:router-a"
|
||||
],
|
||||
"ipv4": "100.109.43.124",
|
||||
"ipv6": "fd7a:115c:a1e0::a537:2b7c",
|
||||
"routable_ips": [
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.44.0.0/16"
|
||||
]
|
||||
},
|
||||
"router-b": {
|
||||
"hostname": "router-b",
|
||||
"tags": [
|
||||
"tag:router-b"
|
||||
],
|
||||
"ipv4": "100.65.172.123",
|
||||
"ipv6": "fd7a:115c:a1e0::5a37:ac7c",
|
||||
"routable_ips": [
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.55.0.0/16"
|
||||
]
|
||||
},
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"multi-exit-router": {
|
||||
"hostname": "multi-exit-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.105.127.107",
|
||||
"ipv6": "fd7a:115c:a1e0::ad37:7f6b",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "router-a.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.109.43.124/32",
|
||||
"fd7a:115c:a1e0::a537:2b7c/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.109.43.124/32",
|
||||
"fd7a:115c:a1e0::a537:2b7c/128",
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router-a"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "router-b.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.65.172.123/32",
|
||||
"fd7a:115c:a1e0::5a37:ac7c/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.65.172.123/32",
|
||||
"fd7a:115c:a1e0::5a37:ac7c/128",
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "big-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128",
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-exit-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128",
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
-1505
File diff suppressed because it is too large
Load Diff
-1422
File diff suppressed because it is too large
Load Diff
@@ -1,494 +0,0 @@
|
||||
// ACL-H06
|
||||
//
|
||||
// ACL: accept: src=['webserver', 'tag:client'] dst=['tag:server:22']
|
||||
//
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-H06",
|
||||
"timestamp": "2026-04-05T20:20:21Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_h06.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"webserver",
|
||||
"tag:client"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.108.74.26",
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.108.74.26",
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.108.74.26",
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.108.74.26",
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,459 +0,0 @@
|
||||
// ACL-H07
|
||||
//
|
||||
// ACL: accept: src=['group:admins'] dst=['webserver:22']
|
||||
//
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-H07",
|
||||
"timestamp": "2026-04-05T20:20:42Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_h07.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"group:admins"
|
||||
],
|
||||
"dst": [
|
||||
"webserver:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,709 +0,0 @@
|
||||
// ACL-H08
|
||||
//
|
||||
// ACL: accept: src=['*'] dst=['subnet24:80']
|
||||
//
|
||||
// Nodes with filter rules: 1 of 8
|
||||
{
|
||||
"test_id": "ACL-H08",
|
||||
"timestamp": "2026-04-05T20:21:03Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_h08.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"subnet24:80"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "192.168.1.0/24",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"10.33.0.0/16",
|
||||
"10.44.0.0/16",
|
||||
"10.55.0.0/16",
|
||||
"100.115.94.0-100.127.255.255",
|
||||
"100.64.0.0-100.115.91.255",
|
||||
"172.16.0.0/24",
|
||||
"192.168.1.0/24",
|
||||
"fd00:1::/64",
|
||||
"fd7a:115c:a1e0::/48"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "192.168.1.0/24",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "ha-router2.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "ha-router1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128",
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "ha-router2.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "ha-router1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128",
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "ha-router2.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "ha-router1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128",
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "ha-router2.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "ha-router1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128",
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "ha-router2.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "ha-router1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128",
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "ha-router2.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "ha-router1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128",
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "ha-router2.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "ha-router1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128",
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "ha-router2.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.117.104.82/32",
|
||||
"fd7a:115c:a1e0::7437:6852/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "ha-router1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.121.186.70/32",
|
||||
"fd7a:115c:a1e0::6737:ba46/128",
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:ha"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
-1183
File diff suppressed because it is too large
Load Diff
@@ -1,843 +0,0 @@
|
||||
// ACL-K02
|
||||
//
|
||||
// ACL: accept: src=['tag:client'] dst=['tag:server:22', 'tag:prod:5432', 'webserver:80', 'prodbox:443', 'group:admins:8080', 'kratail2tid@passkey:3000', '100.108.74.26:9000']
|
||||
//
|
||||
// Nodes with filter rules: 4 of 8
|
||||
{
|
||||
"test_id": "ACL-K02",
|
||||
"timestamp": "2026-04-05T20:21:45Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_k02.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"tag:client"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:22",
|
||||
"tag:prod:5432",
|
||||
"webserver:80",
|
||||
"prodbox:443",
|
||||
"group:admins:8080",
|
||||
"kratail2tid@passkey:3000",
|
||||
"100.108.74.26:9000"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 3000,
|
||||
"Last": 3000
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 3000,
|
||||
"Last": 3000
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 8080,
|
||||
"Last": 8080
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 8080,
|
||||
"Last": 8080
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 9000,
|
||||
"Last": 9000
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 3000,
|
||||
"Last": 3000
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 3000,
|
||||
"Last": 3000
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 8080,
|
||||
"Last": 8080
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 8080,
|
||||
"Last": 8080
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 9000,
|
||||
"Last": 9000
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 9000,
|
||||
"Last": 9000
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 9000,
|
||||
"Last": 9000
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 3000,
|
||||
"Last": 3000
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 3000,
|
||||
"Last": 3000
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 8080,
|
||||
"Last": 8080
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 8080,
|
||||
"Last": 8080
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 3000,
|
||||
"Last": 3000
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 3000,
|
||||
"Last": 3000
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 8080,
|
||||
"Last": 8080
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 8080,
|
||||
"Last": 8080
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
-3747
File diff suppressed because it is too large
Load Diff
-2187
File diff suppressed because it is too large
Load Diff
@@ -1,959 +0,0 @@
|
||||
// ACL-K05
|
||||
//
|
||||
// ACL: accept: src=['autogroup:member', 'group:admins', 'kratail2tid@passkey', 'tag:client', 'tag:prod', '100.83.200.69', '100.103.8.15'] dst=['tag:server:22', 'webserver:80', '100.108.74.26:443', 'group:admins:8080', 'kratail2tid@passkey:9000']
|
||||
//
|
||||
// Nodes with filter rules: 3 of 8
|
||||
{
|
||||
"test_id": "ACL-K05",
|
||||
"timestamp": "2026-04-05T20:22:47Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_k05.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"autogroup:member",
|
||||
"group:admins",
|
||||
"kratail2tid@passkey",
|
||||
"tag:client",
|
||||
"tag:prod",
|
||||
"100.83.200.69",
|
||||
"100.103.8.15"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:22",
|
||||
"webserver:80",
|
||||
"100.108.74.26:443",
|
||||
"group:admins:8080",
|
||||
"kratail2tid@passkey:9000"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::5b37:80f",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 9000,
|
||||
"Last": 9000
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 9000,
|
||||
"Last": 9000
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 8080,
|
||||
"Last": 8080
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 8080,
|
||||
"Last": 8080
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::5b37:80f",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 9000,
|
||||
"Last": 9000
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 9000,
|
||||
"Last": 9000
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 8080,
|
||||
"Last": 8080
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 8080,
|
||||
"Last": 8080
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::5b37:80f",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::5b37:80f",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::5b37:80f",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 9000,
|
||||
"Last": 9000
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 9000,
|
||||
"Last": 9000
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 8080,
|
||||
"Last": 8080
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 8080,
|
||||
"Last": 8080
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.8.15",
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::5b37:80f",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 9000,
|
||||
"Last": 9000
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 9000,
|
||||
"Last": 9000
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
"Ports": {
|
||||
"First": 8080,
|
||||
"Last": 8080
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::2d01:c747",
|
||||
"Ports": {
|
||||
"First": 8080,
|
||||
"Last": 8080
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,565 +0,0 @@
|
||||
// ACL-M01
|
||||
//
|
||||
// ACL: accept: src=['kratail2tid@passkey', 'tag:client', 'group:monitors'] dst=['tag:server:22']
|
||||
//
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-M01",
|
||||
"timestamp": "2026-04-05T20:23:08Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_m01.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"kratail2tid@passkey",
|
||||
"tag:client",
|
||||
"group:monitors"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,523 +0,0 @@
|
||||
// ACL-M02
|
||||
//
|
||||
// ACL: accept: src=['100.90.199.68', 'tag:client'] dst=['tag:server:22']
|
||||
//
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-M02",
|
||||
"timestamp": "2026-04-05T20:23:29Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_m02.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"100.90.199.68",
|
||||
"tag:client"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,525 +0,0 @@
|
||||
// ACL-M03
|
||||
//
|
||||
// ACL: accept: src=['webserver', 'tag:client'] dst=['tag:prod:5432']
|
||||
//
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-M03",
|
||||
"timestamp": "2026-04-05T20:23:50Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_m03.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"webserver",
|
||||
"tag:client"
|
||||
],
|
||||
"dst": [
|
||||
"tag:prod:5432"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.108.74.26",
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.108.74.26",
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.108.74.26",
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.108.74.26",
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.8.15",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::5b37:80f",
|
||||
"Ports": {
|
||||
"First": 5432,
|
||||
"Last": 5432
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,527 +0,0 @@
|
||||
// ACL-M04
|
||||
//
|
||||
// ACL: accept: src=['group:admins', 'tag:client'] dst=['tag:server:22']
|
||||
//
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-M04",
|
||||
"timestamp": "2026-04-05T20:24:11Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_m04.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"group:admins",
|
||||
"tag:client"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,525 +0,0 @@
|
||||
// ACL-M05
|
||||
//
|
||||
// ACL: accept: src=['kratail2tid@passkey', 'group:monitors'] dst=['tag:server:22']
|
||||
//
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-M05",
|
||||
"timestamp": "2026-04-05T20:24:32Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_m05.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"kratail2tid@passkey",
|
||||
"group:monitors"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
-1034
File diff suppressed because it is too large
Load Diff
@@ -1,713 +0,0 @@
|
||||
// ACL-M07
|
||||
//
|
||||
// ACL: accept: src=['autogroup:member', 'tag:client'] dst=['tag:server:22,80,443']
|
||||
//
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-M07",
|
||||
"timestamp": "2026-04-05T20:25:14Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_m07.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"autogroup:member",
|
||||
"tag:client"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:22,80,443"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 80
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 443,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,601 +0,0 @@
|
||||
// ACL-M08
|
||||
//
|
||||
// ACL: accept: src=['autogroup:member', 'tag:client'] dst=['tag:server:80-443']
|
||||
//
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-M08",
|
||||
"timestamp": "2026-04-05T20:25:34Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_m08.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"autogroup:member",
|
||||
"tag:client"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:80-443"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"100.103.90.82",
|
||||
"100.110.121.96",
|
||||
"100.83.200.69",
|
||||
"100.90.199.68",
|
||||
"fd7a:115c:a1e0::1737:7960",
|
||||
"fd7a:115c:a1e0::2d01:c747",
|
||||
"fd7a:115c:a1e0::9e37:5a52",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 443
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 80,
|
||||
"Last": 443
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
},
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": null
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,655 +0,0 @@
|
||||
// ACL-M09
|
||||
//
|
||||
// ACL: accept: src=['tag:client', 'internal'] dst=['tag:server:22']
|
||||
//
|
||||
// Nodes with filter rules: 2 of 8
|
||||
{
|
||||
"test_id": "ACL-M09",
|
||||
"timestamp": "2026-04-05T20:25:55Z",
|
||||
"propagation_wait_seconds": 20,
|
||||
"input": {
|
||||
"policy_file": "acl_policies/acl_m09.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
"prodbox": "100.103.8.15",
|
||||
"internal": "10.0.0.0/8",
|
||||
"subnet24": "192.168.1.0/24"
|
||||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.33.0.0/16": [
|
||||
"tag:router"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": [
|
||||
"tag:client",
|
||||
"internal"
|
||||
],
|
||||
"dst": [
|
||||
"tag:server:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-kris": {
|
||||
"hostname": "user-kris",
|
||||
"tags": [],
|
||||
"ipv4": "100.110.121.96",
|
||||
"ipv6": "fd7a:115c:a1e0::1737:7960",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user-mon": {
|
||||
"hostname": "user-mon",
|
||||
"tags": [],
|
||||
"ipv4": "100.103.90.82",
|
||||
"ipv6": "fd7a:115c:a1e0::9e37:5a52",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"user1": {
|
||||
"hostname": "user1",
|
||||
"tags": [],
|
||||
"ipv4": "100.90.199.68",
|
||||
"ipv6": "fd7a:115c:a1e0::2d01:c747",
|
||||
"routable_ips": [],
|
||||
"approved_routes": []
|
||||
},
|
||||
"router-a": {
|
||||
"hostname": "router-a",
|
||||
"tags": [
|
||||
"tag:router-a"
|
||||
],
|
||||
"ipv4": "100.109.43.124",
|
||||
"ipv6": "fd7a:115c:a1e0::a537:2b7c",
|
||||
"routable_ips": [
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.44.0.0/16"
|
||||
]
|
||||
},
|
||||
"router-b": {
|
||||
"hostname": "router-b",
|
||||
"tags": [
|
||||
"tag:router-b"
|
||||
],
|
||||
"ipv4": "100.65.172.123",
|
||||
"ipv6": "fd7a:115c:a1e0::5a37:ac7c",
|
||||
"routable_ips": [
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.55.0.0/16"
|
||||
]
|
||||
},
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"multi-exit-router": {
|
||||
"hostname": "multi-exit-router",
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.105.127.107",
|
||||
"ipv6": "fd7a:115c:a1e0::ad37:7f6b",
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"captures": {
|
||||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "exit-node.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.85.66.106/32",
|
||||
"fd7a:115c:a1e0::7c37:426a/128",
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"subnet-router": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128",
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": [
|
||||
"10.33.0.0/16",
|
||||
"fd00:1::/64"
|
||||
]
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-client": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"tagged-prod": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "tagged-prod.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.8.15/32",
|
||||
"fd7a:115c:a1e0::5b37:80f/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"netmap": {
|
||||
"PacketFilterRules": [
|
||||
{
|
||||
"SrcIPs": [
|
||||
"10.0.0.0/8",
|
||||
"100.83.200.69",
|
||||
"fd7a:115c:a1e0::c537:c845"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.108.74.26",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
},
|
||||
{
|
||||
"IP": "fd7a:115c:a1e0::b901:4a87",
|
||||
"Ports": {
|
||||
"First": 22,
|
||||
"Last": 22
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"SelfNode": {
|
||||
"Name": "tagged-server.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.108.74.26/32",
|
||||
"fd7a:115c:a1e0::b901:4a87/128"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": [
|
||||
{
|
||||
"Name": "router-a.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.109.43.124/32",
|
||||
"fd7a:115c:a1e0::a537:2b7c/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.109.43.124/32",
|
||||
"fd7a:115c:a1e0::a537:2b7c/128",
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.44.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router-a"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "router-b.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.65.172.123/32",
|
||||
"fd7a:115c:a1e0::5a37:ac7c/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.65.172.123/32",
|
||||
"fd7a:115c:a1e0::5a37:ac7c/128",
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.55.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router-b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "big-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.97.174.21/32",
|
||||
"fd7a:115c:a1e0::5137:ae15/128",
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "tagged-client.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.83.200.69/32",
|
||||
"fd7a:115c:a1e0::c537:c845/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:client"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "multi-exit-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.105.127.107/32",
|
||||
"fd7a:115c:a1e0::ad37:7f6b/128",
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"PrimaryRoutes": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"Tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Name": "subnet-router.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.92.142.61/32",
|
||||
"fd7a:115c:a1e0::3e37:8e3d/128"
|
||||
],
|
||||
"PrimaryRoutes": null,
|
||||
"Tags": [
|
||||
"tag:router"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"user-kris": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-kris.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.110.121.96/32",
|
||||
"fd7a:115c:a1e0::1737:7960/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user-mon": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user-mon.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.103.90.82/32",
|
||||
"fd7a:115c:a1e0::9e37:5a52/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
},
|
||||
"user1": {
|
||||
"packet_filter_rules": null,
|
||||
"netmap": {
|
||||
"PacketFilterRules": null,
|
||||
"SelfNode": {
|
||||
"Name": "user1.tail78f774.ts.net.",
|
||||
"Addresses": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"AllowedIPs": [
|
||||
"100.90.199.68/32",
|
||||
"fd7a:115c:a1e0::2d01:c747/128"
|
||||
],
|
||||
"Tags": null,
|
||||
"Hostinfo": {
|
||||
"RoutableIPs": []
|
||||
}
|
||||
},
|
||||
"Peers": []
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
Some files were not shown because too many files have changed in this diff Show More
Reference in New Issue
Block a user