浏览代码

fix uni direction acl rule for static nodes

abhishek9686 1 周之前
父节点
当前提交
f5f89309e9
共有 1 个文件被更改,包括 7 次插入1 次删除
  1. 7 1
      logic/acls.go

+ 7 - 1
logic/acls.go

@@ -987,6 +987,12 @@ func MigrateAclPolicies() {
 			acl.Port = []string{}
 			UpsertAcl(acl)
 		}
+		if !servercfg.IsPro {
+			if acl.AllowedDirection == models.TrafficDirectionUni {
+				acl.AllowedDirection = models.TrafficDirectionBi
+				UpsertAcl(acl)
+			}
+		}
 	}
 
 }
@@ -1032,7 +1038,7 @@ func IsNodeAllowedToCommunicateWithAllRsrcs(node models.Node) bool {
 		dstMap = nil
 	}()
 	for _, policy := range policies {
-		if !policy.Enabled {
+		if !policy.Enabled || policy.AllowedDirection == models.TrafficDirectionUni {
 			continue
 		}
 		srcMap = ConvAclTagToValueMap(policy.Src)