Feature Request: customize allowed ips for selected nodes

[chefkoch-de42]

It would be a nice feature to change the allowed ips field to a list where you are able to configure the following:

• all allowed ips / select [all,node1,node2,...] (as for the egres,relay select field)
• allowed ip set 1 / only if [all allowed ips] is unset -> select [all,node1,node2,...] (as for the egres,relay select field)
• allowed ip set 2 / only if [all allowed ips] is unset -> select [all,node1,node2,...] (as for the egres,relay select field)
• allowed ip set 3 / only if [all allowed ips] is unset -> select [all,node1,node2,...] (as for the egres,relay select field)

Hope this is understandable, if not I will see your questions ;-)

[a1ad]

As an example use case:

3 nodes on the same Netmaker network:

• Node 1 on local LAN with egress configged.
• Node 2 on remote LAN that is allowed to access my internal LAN through the egress of node 1
• Node 3 on remote LAN that is not allowed to access my internal LAN though the egress op node 1.

It would be cool if you can choose between different egress networks. So node 2 can route through egress node 1 for network A, but no route for egress node 2 for network B.

[qrmt]

+1 on this, exactly the feature I'm currently missing with Netmaker!

[afeiszli]

adding to triage

[afeiszli]

ACLs implemented in 0.12.0, which enables these patterns:

https://docs.netmaker.org/acls.html