5 Commits

Author	SHA1	Message	Date
Givi Khojanashvili	6dee89379b	Feat optimize acl performance iptables (#1025) ... * use ipset for iptables * Update unit-tests for iptables * Remove debug code * Update dependencies * Create separate sets for dPort and sPort rules * Fix iptables tests * Fix 0.0.0.0 processing in iptables with ipset	2023-07-24 13:00:23 +02:00
Givi Khojanashvili	e69ec6ab6a	Optimize ACL performance (#994) ... * Optimize rules with All groups * Use IP sets in ACLs (nftables implementation) * Fix squash rule when we receive optimized rules list from management	2023-07-18 13:12:50 +04:00
Givi Khojanashvili	ef59001459	Fix routes allow acl rule (#940) ... Modify rules in iptables and nftables to accept all traffic not from netbird network but routed through it.	2023-06-07 15:24:27 +02:00
Givi Khojanashvili	ba7a39a4fc	Feat linux firewall support (#805) ... Update the client's engine to apply firewall rules received from the manager (results of ACL policy).	2023-05-29 16:00:18 +02:00
Givi Khojanashvili	f03aadf064	Feat firewall controller interface (#740) ... Add a standard interface for the client firewall to support ACL.	2023-03-16 13:00:08 +04:00