mirror of
https://github.com/juanfont/headscale.git
synced 2026-05-05 03:56:10 +02:00
integration: remove --accept-routes from via steering routers
Subnet routers that advertise routes must not accept peer routes. With co-router visibility the HA primary's subnet appears in co-routers' AllowedIPs, and --accept-routes installs a system route that conflicts with local subnet forwarding. Updates #3157
This commit is contained in:
parent
ec48f34e1c
commit
3a4af8cf87
@ -3276,9 +3276,12 @@ func TestGrantViaSubnetSteering(t *testing.T) {
|
||||
require.NoError(t, err)
|
||||
|
||||
// Create Router A (tag:router-a) on usernet1.
|
||||
// Routers advertise routes but must NOT accept peer routes — with
|
||||
// co-router visibility the HA primary's subnet appears in the
|
||||
// co-router's AllowedIPs, and --accept-routes would install a
|
||||
// system route that conflicts with local subnet forwarding.
|
||||
routerA, err := scenario.CreateTailscaleNode("head",
|
||||
tsic.WithNetwork(usernet1),
|
||||
tsic.WithAcceptRoutes(),
|
||||
)
|
||||
require.NoError(t, err)
|
||||
|
||||
@ -3296,7 +3299,6 @@ func TestGrantViaSubnetSteering(t *testing.T) {
|
||||
// Create Router B (tag:router-b) on usernet1.
|
||||
routerB, err := scenario.CreateTailscaleNode("head",
|
||||
tsic.WithNetwork(usernet1),
|
||||
tsic.WithAcceptRoutes(),
|
||||
)
|
||||
require.NoError(t, err)
|
||||
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user