novox/mesh-controller
3
0
Fork 0
Code Issues Pull Requests 1 Releases Wiki Activity

A module can name the mesh's range: ${machine:mesh-range} #84

Merged
jschoubben merged 1 commits from feat/machine-names-the-mesh-range into main 2026-09-27 14:52:24 +00:00
Conversation 0 Commits 1 Files Changed 4
+47 -4
jschoubben commented 2026-09-27 14:52:09 +00:00
Owner
Copy Link
Copy Source

A module cannot know the private network's CIDR (a per-mesh value), but sometimes must name it — an intrusion filter that must never ban a tunnel peer. Carries the overlay range on Rendering.MeshRange and offers it as the machine fact mesh-range (${machine:mesh-range}), the same mechanism as a machine's own address — so the module names it instead of hardcoding a value (data is the mesh's, ADR 0112). Absent when the mesh has no range. Enables the fail2ban ignoreip fix (the paired mesh-catalog change).

A module cannot know the private network's CIDR (a per-mesh value), but sometimes must name it — an intrusion filter that must never ban a tunnel peer. Carries the overlay range on `Rendering.MeshRange` and offers it as the machine fact `mesh-range` (`${machine:mesh-range}`), the same mechanism as a machine's own address — so the module names it instead of hardcoding a value (data is the mesh's, ADR 0112). Absent when the mesh has no range. Enables the fail2ban ignoreip fix (the paired mesh-catalog change).
jschoubben added 1 commit 2026-09-27 14:52:09 +00:00
A module can name the mesh's range: ${machine:mesh-range} (novox/hq ADR 0112) 19d2725c13 
A module cannot know the private network's CIDR — it is a per-mesh value chosen
at genesis — but sometimes must name it: an intrusion filter that must never
ban a tunnel peer. Carry the overlay range on the Rendering and offer it as the
machine fact mesh-range, the same way a machine's own address is offered, so the
module names it rather than hardcoding a value (data is the mesh's). Absent when
the mesh has no range. Enables the fail2ban ignoreip fix.
jschoubben merged commit 6ecd631b3e into main 2026-09-27 14:52:24 +00:00
jschoubben deleted branch feat/machine-names-the-mesh-range 2026-09-27 14:52:24 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Assignees
Clear assignees
jschoubben miel.truyen
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: novox/mesh-controller#84