Kristoffer Dalby 526daf0841 policy/v2: resolve an ACL's sources once, not once per destination ...

An ACL compiles to one grant per destination, and each resolved and
merged the same sources again. A wide CI-style ACL took 3s and 674MB
per compile; 88ms and 23MB now.

2026-10-30 14:36:19 +01:00

..

matcher

all: inline deprecated tailcfg capability aliases

2026-08-25 21:59:00 +02:00

policyutil

policyutil: match DstPorts as ranges when reducing filters

2026-10-23 18:23:53 +02:00

v2

policy/v2: resolve an ACL's sources once, not once per destination

2026-10-30 14:36:19 +01:00

pm.go

mapper: limit capability copies to requested peers

2026-10-22 22:17:36 +02:00

policy_autoapprove_test.go

all: apply golangci-lint autofixes

2026-08-25 21:59:00 +02:00

policy_route_approval_test.go

all: apply golangci-lint autofixes

2026-08-25 21:59:00 +02:00

policy_test.go

policy/v2: send an empty SSH policy when no rule applies

2026-10-08 10:29:23 +02:00

policy.go

mapper: take peer visibility from the peer map only

2026-09-23 14:48:35 +02:00

route_approval_test.go

all: apply golangci-lint autofixes

2026-08-25 21:59:00 +02:00