tailscale / tailscale/tailscale

FR: Add support for via: autogroup:self or similar for routing rules

Open
#15,859 0 comments 0 reactions 0 assignees View on GitHub
fr needs-triage
Dominant language
Go
Stars
36.5k
Forks
3.2k
Avg merge
2d 3h
Merged PRs (30d)
123

Description

### What are you trying to do?

Basic scenario:
- Most of our internal users have both a laptop (that changes networks) and dedicated always-on VM ("virtual desktop")
- The always-on VM is in a "trusted" network space
- Both are per-user devices that we wouldn't want to use tags on.

It would be great if users could use their dedicated VM as an exit node for their laptops (or other devices). Or maybe some subnet routing stuff.

### How should we solve this?

Expand via from only supporting tags to also supporting `autogroup:self`, like:
```json
"grants": [
{
"src": ["autogroup:member"],
"dst": ["autogroup:internet"],
"via": ["autogroup:self"],
"ip": ["*"],
},
],
```

### What is the impact of not solving this?

Either can't let users use their own devices as exit nodes, or have to promote per-user devices to tagged server-like devices.

### Anything else?

_No response_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.