From 32e1c088e7372c8c5f203ca6fcd5d79a3cfa25ba Mon Sep 17 00:00:00 2001 From: Thomas Eizinger Date: Wed, 12 Nov 2025 14:37:03 +1100 Subject: [PATCH] chore(gateway): include domain in "not allowed" log (#10863) The resource could be a wildcard DNS resource. It is useful to know, which particular domain the client tried to access. --- rust/connlib/tunnel/src/gateway.rs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rust/connlib/tunnel/src/gateway.rs b/rust/connlib/tunnel/src/gateway.rs index 258989ec5..1a5b4e180 100644 --- a/rust/connlib/tunnel/src/gateway.rs +++ b/rust/connlib/tunnel/src/gateway.rs @@ -687,7 +687,7 @@ fn handle_assigned_ips_event( }; if !peer.is_allowed(req.resource) { - tracing::warn!(cid = %peer.id(), rid = %req.resource, "Received `AssignedIpsEvent` for resource that is not allowed"); + tracing::warn!(cid = %peer.id(), rid = %req.resource, domain = %req.domain, "Received `AssignedIpsEvent` for resource that is not allowed"); let packet = dns_resource_nat::domain_status( req.resource,