From 3a4af8cf874c77ef9fe264b3c13e7ad62d5b0c2b Mon Sep 17 00:00:00 2001 From: Kristoffer Dalby Date: Wed, 15 Apr 2026 13:02:04 +0000 Subject: [PATCH] integration: remove --accept-routes from via steering routers Subnet routers that advertise routes must not accept peer routes. With co-router visibility the HA primary's subnet appears in co-routers' AllowedIPs, and --accept-routes installs a system route that conflicts with local subnet forwarding. Updates #3157 --- integration/route_test.go | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/integration/route_test.go b/integration/route_test.go index 84551e95..f00ebdd9 100644 --- a/integration/route_test.go +++ b/integration/route_test.go @@ -3276,9 +3276,12 @@ func TestGrantViaSubnetSteering(t *testing.T) { require.NoError(t, err) // Create Router A (tag:router-a) on usernet1. + // Routers advertise routes but must NOT accept peer routes — with + // co-router visibility the HA primary's subnet appears in the + // co-router's AllowedIPs, and --accept-routes would install a + // system route that conflicts with local subnet forwarding. routerA, err := scenario.CreateTailscaleNode("head", tsic.WithNetwork(usernet1), - tsic.WithAcceptRoutes(), ) require.NoError(t, err) @@ -3296,7 +3299,6 @@ func TestGrantViaSubnetSteering(t *testing.T) { // Create Router B (tag:router-b) on usernet1. routerB, err := scenario.CreateTailscaleNode("head", tsic.WithNetwork(usernet1), - tsic.WithAcceptRoutes(), ) require.NoError(t, err)