lfg2025/archy
1
0
Fork 0
Code Issues 11 Pull Requests Actions Packages Projects Releases 12 Wiki Activity

Limit wildcard TLS migration to an observed tailnet bind conflict

Browse Source
This commit is contained in:
archipelago
2026-10-07 00:01:53 -04:00
parent fdee8658c3
commit 40fd91b9e1
2 changed files with 46 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/https-app-gate-followup-20261006.md
+6
View File
@@ -150,3 +150,9 @@ These run the exact embedded shell against fake service commands; they do not
reload a real node. Added Rust profile-migration tests and the integrated backend
compile remain pending the shared qualification slot. The live repaired nodes
still run the previously qualified 49703d7e binary.
Review refinement: wildcard conversion additionally requires an actual IPv4
CGNAT-address port-443 listener, observed through read-only socket inspection.
Nodes without that competing tailnet bind retain their existing wildcard and
IPv6 HTTPS service. A configured Tailscale interface alone is not sufficient.
The added socket-profile cases are pending the same backend qualification run.