tailscale / tailscale/tailscale
Can't test node-to-node connections using the default "Allow all" ACL example configuration
- Dominant language
- Go
- Stars
- 36.5k
- Forks
- 3.2k
- Avg merge
- 2d 3h
- Merged PRs (30d)
- 123
Description
### What is the issue?
With the default "Allow all" ACL example, I wrote tests to check if two nodes can connection with each other, but the test fails.
### Steps to reproduce
Paste in the following ACL and tests:
```golang
{
// Start default ACL from the examples
// Source: https://tailscale.com/kb/1192/acl-samples?q=example#allow-all-default-acl
"acls": [{
"action": "accept",
"src": [
"*"
],
"dst": [
"*:*"
]
}],
"ssh": [{
"action": "check",
"src": [
"autogroup:member"
],
"dst": [
"autogroup:self"
],
"users": [
"autogroup:nonroot",
"root"
]
}],
// End default ACL
// Define two hosts that will talk to each other
"hosts": {
"alice": "10.10.10.10",
"bob": "10.10.10.10",
},
// Alice should be able to connect to services on Bob
"tests": [{
"src": "alice",
"accept": [
"bob:22", // SSH
"bob:8086", // Proxmox
"bob:80", // HTTP
"bob:443", // HTTPS
],
}, ],
}
```
Observe the following error:
```
Error: test(s) failed
test(s) failed for user: alice
[acl test error]: address "bob:22" (protocol "tcp"): want: Accept, got: Drop
[acl test error]: address "bob:8086" (protocol "tcp"): want: Accept, got: Drop
[acl test error]: address "bob:80" (protocol "tcp"): want: Accept, got: Drop
[acl test error]: address "bob:443" (protocol "tcp"): want: Accept, got: Drop
```
### Are there any recent changes that introduced the issue?
_No response_
### OS
_No response_
### OS version
_No response_
### Tailscale version
_No response_
### Other software
_No response_
### Bug report
_No response_
Contributor guide
Assessment
This issue has not been assessed yet.