Browse Source

Merge pull request #1474 from gravitl/bugfix_v0.14.7_internet_gateway_server_peers

remove internet gateway from server peers allowed ip
Alex Feiszli 3 years ago
parent
commit
07acc0b138
1 changed files with 8 additions and 0 deletions
  1. 8 0
      logic/peers.go

+ 8 - 0
logic/peers.go

@@ -269,6 +269,14 @@ func GetAllowedIPs(node, peer *models.Node) []net.IPNet {
 	if peer.IsEgressGateway == "yes" {
 		//hasGateway = true
 		egressIPs := getEgressIPs(node, peer)
+		// remove internet gateway if server
+		if node.IsServer == "yes" {
+			for i, ip := range egressIPs {
+				if ip.IP.String() == "0.0.0.0/0" || ip.IP.String() == "::/0" {
+					egressIPs = append(egressIPs[:i], egressIPs[i+1:]...)
+				}
+			}
+		}
 		allowedips = append(allowedips, egressIPs...)
 	}