netbird/client/internal/routemanager/firewall_nonlinux.go

//go:build !linux
// +build !linux

package routemanager

import (
	"context"
	"fmt"
	"runtime"
)

// newFirewall returns a nil manager
func newFirewall(context.Context) (firewallManager, error) {
	return nil, fmt.Errorf("firewall not supported on %s", runtime.GOOS)
}
Add routing peer support (#441) Handle routes updates from management Manage routing firewall rules Manage peer RIB table Add get peer and get notification channel from the status recorder Update interface peers allowed IPs 2022-09-05 09:06:35 +02:00			`//go:build !linux`
			`// +build !linux`

			`package routemanager`

Routemgr error handling (#1073) In case the route management feature is not supported then do not create unnecessary firewall and manager instances. This can happen if the nftables nor iptables is not available on the host OS. - Move the error handling to upper layer - Remove fake, useless implementations of interfaces - Update go-iptables because In Docker the old version can not determine well the path of executable file - update lib to 0.70 2023-08-12 11:42:36 +02:00			`import (`
			`"context"`
			`"fmt"`
Add default firewall rule to allow netbird traffic (#1056) Add a default firewall rule to allow netbird traffic to be handled by the access control managers. Userspace manager behavior: - When running on Windows, a default rule is add on Windows firewall - For Linux, we are using one of the Kernel managers to add a single rule - This PR doesn't handle macOS Kernel manager behavior: - For NFtables, if there is a filter table, an INPUT rule is added - Iptables follows the previous flow if running on kernel mode. If running on userspace mode, it adds a single rule for INPUT and OUTPUT chains A new checkerFW package has been introduced to consolidate checks across route and access control managers. It supports a new environment variable to skip nftables and allow iptables tests 2023-09-05 21:07:32 +02:00			`"runtime"`
Routemgr error handling (#1073) In case the route management feature is not supported then do not create unnecessary firewall and manager instances. This can happen if the nftables nor iptables is not available on the host OS. - Move the error handling to upper layer - Remove fake, useless implementations of interfaces - Update go-iptables because In Docker the old version can not determine well the path of executable file - update lib to 0.70 2023-08-12 11:42:36 +02:00			`)`

Add default firewall rule to allow netbird traffic (#1056) Add a default firewall rule to allow netbird traffic to be handled by the access control managers. Userspace manager behavior: - When running on Windows, a default rule is add on Windows firewall - For Linux, we are using one of the Kernel managers to add a single rule - This PR doesn't handle macOS Kernel manager behavior: - For NFtables, if there is a filter table, an INPUT rule is added - Iptables follows the previous flow if running on kernel mode. If running on userspace mode, it adds a single rule for INPUT and OUTPUT chains A new checkerFW package has been introduced to consolidate checks across route and access control managers. It supports a new environment variable to skip nftables and allow iptables tests 2023-09-05 21:07:32 +02:00			`// newFirewall returns a nil manager`
			`func newFirewall(context.Context) (firewallManager, error) {`
			`return nil, fmt.Errorf("firewall not supported on %s", runtime.GOOS)`
Add routing peer support (#441) Handle routes updates from management Manage routing firewall rules Manage peer RIB table Add get peer and get notification channel from the status recorder Update interface peers allowed IPs 2022-09-05 09:06:35 +02:00			`}`