2023-09-13 17:36:24 +02:00
|
|
|
//go:build !linux || android
|
2023-05-29 16:00:18 +02:00
|
|
|
|
|
|
|
package acl
|
|
|
|
|
|
|
|
import (
|
|
|
|
"fmt"
|
|
|
|
"runtime"
|
|
|
|
|
2023-09-05 21:07:32 +02:00
|
|
|
log "github.com/sirupsen/logrus"
|
|
|
|
|
2023-05-29 16:00:18 +02:00
|
|
|
"github.com/netbirdio/netbird/client/firewall/uspfilter"
|
|
|
|
)
|
|
|
|
|
|
|
|
// Create creates a firewall manager instance
|
2023-06-07 15:24:27 +02:00
|
|
|
func Create(iface IFaceMapper) (manager *DefaultManager, err error) {
|
2023-05-29 16:00:18 +02:00
|
|
|
if iface.IsUserspaceBind() {
|
|
|
|
// use userspace packet filtering firewall
|
|
|
|
fm, err := uspfilter.Create(iface)
|
|
|
|
if err != nil {
|
|
|
|
return nil, err
|
|
|
|
}
|
2023-09-05 21:07:32 +02:00
|
|
|
if err := fm.AllowNetbird(); err != nil {
|
|
|
|
log.Errorf("failed to allow netbird interface traffic: %v", err)
|
|
|
|
}
|
2023-07-18 11:12:50 +02:00
|
|
|
return newDefaultManager(fm), nil
|
2023-05-29 16:00:18 +02:00
|
|
|
}
|
|
|
|
return nil, fmt.Errorf("not implemented for this OS: %s", runtime.GOOS)
|
|
|
|
}
|