11 Commits

Author	SHA1	Message	Date
Givi Khojanashvili	e69ec6ab6a	Optimize ACL performance (#994) ... * Optimize rules with All groups * Use IP sets in ACLs (nftables implementation) * Fix squash rule when we receive optimized rules list from management	2023-07-18 13:12:50 +04:00
Pascal Fischer	6e264d9de7	fix rule order to solve DNS resolver issue	2023-07-11 19:58:21 +02:00
Pascal Fischer	e074c24487	add type for RuleSet	2023-06-28 14:09:23 +02:00
Pascal Fischer	54fe05f6d8	fix test	2023-06-28 10:35:29 +02:00
Pascal Fischer	33a155d9aa	fix all rules check	2023-06-28 03:03:01 +02:00
Pascal Fischer	51878659f8	remove Rule index map	2023-06-28 02:50:12 +02:00
Pascal Fischer	b39ffef22c	add missing all rule	2023-06-27 17:44:05 +02:00
Pascal Fischer	d96f882acb	seems to work but delete fails	2023-06-27 17:26:15 +02:00
Givi Khojanashvili	1d9feab2d9	Feat fake dns address (#902) ... Works only with userspace implementation: 1. Configure host to solve DNS requests via a fake DSN server address in the Netbird network. 2. Add to firewall catch rule for these DNS requests. 3. Resolve these DNS requests and respond by writing directly to wireguard device.	2023-06-08 13:46:57 +04:00
Givi Khojanashvili	293499c3c0	Extend protocol and firewall manager to handle old management (#915) ... * Extend protocol and firewall manager to handle old management * Send correct empty firewall rules list when delete peer * Add extra tests for firewall manager and uspfilter * Work with inconsistent state * Review note * Update comment	2023-05-31 19:04:38 +02:00
Givi Khojanashvili	ba7a39a4fc	Feat linux firewall support (#805) ... Update the client's engine to apply firewall rules received from the manager (results of ACL policy).	2023-05-29 16:00:18 +02:00