copilot-swe-agent[bot] e0107024e8 Filter exit routes through ACL policy to fix issue #2788 ...

Exit nodes are now only visible to nodes that have permission to use them
according to ACL policy. Previously, exit routes (0.0.0.0/0 and ::/0) were
unconditionally added to the AllowedIPs field in the network map, making
exit nodes visible to all peers regardless of policy.

Changes:
- Modified buildTailPeers and WithSelfNode in builder.go to filter exit
  routes through policy.ReduceRoutes, same as primary routes
- Removed unconditional addition of exit routes in tail.go tailNode function
- Updated tail_test.go to reflect new behavior where exit routes are filtered

The fix ensures that exit nodes are only visible when a node has
autogroup:internet in their ACL destination rules.

Co-authored-by: kradalby <98431+kradalby@users.noreply.github.com>

2025-11-01 08:52:29 +00:00

..

batcher_lockfree.go

policy: fix autogroup:self propagation and optimize cache invalidation (#2807)

2025-10-23 17:57:41 +02:00

batcher_test.go

mapper: send change instead of full update (#2775)

2025-09-17 14:23:21 +02:00

batcher.go

mapper: send change instead of full update (#2775)

2025-09-17 14:23:21 +02:00

builder_test.go

bunch of qol (#2748)

2025-08-27 17:09:13 +02:00

builder.go

Filter exit routes through ACL policy to fix issue #2788

2025-11-01 08:52:29 +00:00

mapper_test.go

state/nodestore: in memory representation of nodes

2025-09-09 09:40:00 +02:00

mapper.go

mapper: send change instead of full update (#2775)

2025-09-17 14:23:21 +02:00

suite_test.go

introduce mapper package

2023-06-08 16:34:15 +02:00

tail_test.go

Filter exit routes through ACL policy to fix issue #2788

2025-11-01 08:52:29 +00:00

tail.go

Filter exit routes through ACL policy to fix issue #2788

2025-11-01 08:52:29 +00:00

utils.go

mapper: produce map before poll (#2628)

2025-07-28 11:15:53 +02:00