Skip to content

fix(agent): treat domain auto-detection as a fallback - #1886

Draft
irvingouj@Devolutions (irvingoujAtDevolution) wants to merge 1 commit into
masterfrom
fix/agent-tunnel-auto-detect-fallback
Draft

fix(agent): treat domain auto-detection as a fallback#1886
irvingouj@Devolutions (irvingoujAtDevolution) wants to merge 1 commit into
masterfrom
fix/agent-tunnel-auto-detect-fallback

Conversation

@irvingoujAtDevolution

@irvingoujAtDevolution irvingouj@Devolutions (irvingoujAtDevolution) commented Jul 29, 2026

Copy link
Copy Markdown
Contributor

WIP

Auto-detection ran in addition to whatever advertise_domains was configured, and
the duplicate check compared whole strings, so a parent domain was never seen as
already covered. Configuring machine.example.com on a host joined to
example.com advertised both.

That is a silent widening: domains match by suffix, so machine.example.com is
one host and its subdomains while example.com is every host in the domain at any
depth. The agent ended up claiming routes nobody asked for.

Only auto-detect when advertise_domains is empty. Configurations that rely on
auto-detection alone are unaffected.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

1 participant