{"record":{"id":"0c4b2b5674741b58","repo":"slackhq/nebula","slug":"entry-v-route-in-tun-unsafe-routes-failed-to-pars","errorCode":null,"errorMessage":"entry %v.route in tun.unsafe_routes failed to parse: %v","messagePattern":"entry (.+?)\\.route in tun\\.unsafe_routes failed to parse: (.+?)","errorType":"validation","errorClass":null,"httpStatus":null,"severity":"error","filePath":"overlay/route.go","lineNumber":292,"sourceCode":"\t\tinstall := true\n\t\trInstall, ok := m[\"install\"]\n\t\tif ok {\n\t\t\tinstall, err = strconv.ParseBool(fmt.Sprintf(\"%v\", rInstall))\n\t\t\tif err != nil {\n\t\t\t\treturn nil, fmt.Errorf(\"entry %v.install in tun.unsafe_routes is not a boolean: %v\", i+1, err)\n\t\t\t}\n\t\t}\n\n\t\tr := Route{\n\t\t\tVia:     gateways,\n\t\t\tMTU:     mtu,\n\t\t\tMetric:  metric,\n\t\t\tInstall: install,\n\t\t}\n\n\t\tr.Cidr, err = netip.ParsePrefix(fmt.Sprintf(\"%v\", rRoute))\n\t\tif err != nil {\n\t\t\treturn nil, fmt.Errorf(\"entry %v.route in tun.unsafe_routes failed to parse: %v\", i+1, err)\n\t\t}\n\n\t\tfor _, network := range networks {\n\t\t\tif network.Contains(r.Cidr.Addr()) {\n\t\t\t\treturn nil, fmt.Errorf(\n\t\t\t\t\t\"entry %v.route in tun.unsafe_routes is contained within the configured vpn networks; route: %v, network: %v\",\n\t\t\t\t\ti+1,\n\t\t\t\t\tr.Cidr.String(),\n\t\t\t\t\tnetwork.String(),\n\t\t\t\t)\n\t\t\t}\n\t\t}\n\n\t\troutes[i] = r\n\t}\n\n\treturn routes, nil\n}","sourceCodeStart":274,"sourceCodeEnd":310,"githubUrl":"https://github.com/slackhq/nebula/blob/dd8f660c0ac37903ec4080ca4d3c861ba9342ceb/overlay/route.go#L274-L310","documentation":"Config validation error in parseUnsafeRoutes: the i+1-th entry's `route` value, rendered with %v, was rejected by netip.ParsePrefix — not a valid CIDR (missing /len, host bits set, malformed). The ParsePrefix error is included.","triggerScenarios":"Thrown at overlay/route.go:292 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Write route as a proper network prefix like 10.1.0.0/16","Ensure the length suffix is present and in range"],"exampleFix":null,"handlingStrategy":"validation","validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"dd8f660c0ac37903ec4080ca4d3c861ba9342ceb","analyzedAt":"2026-09-03T11:13:55.444Z","contentChangedAt":"2026-09-03T11:13:55.444Z","schemaVersion":2},"datasetVersion":"2026-09-10T17:17:09.494Z"}