7 Commits

Author	SHA1	Message	Date
Givi Khojanashvili	6dee89379b	Feat optimize acl performance iptables (#1025) ... * use ipset for iptables * Update unit-tests for iptables * Remove debug code * Update dependencies * Create separate sets for dPort and sPort rules * Fix iptables tests * Fix 0.0.0.0 processing in iptables with ipset	2023-07-24 13:00:23 +02:00
Givi Khojanashvili	e69ec6ab6a	Optimize ACL performance (#994) ... * Optimize rules with All groups * Use IP sets in ACLs (nftables implementation) * Fix squash rule when we receive optimized rules list from management	2023-07-18 13:12:50 +04:00
pascal-fischer	c6af1037d9	FIx error on ip6tables not available (#999) ... * adding check operation to confirm if ip*tables is available * linter * linter	2023-07-14 20:44:35 +02:00
Givi Khojanashvili	ef59001459	Fix routes allow acl rule (#940) ... Modify rules in iptables and nftables to accept all traffic not from netbird network but routed through it.	2023-06-07 15:24:27 +02:00
Givi Khojanashvili	293499c3c0	Extend protocol and firewall manager to handle old management (#915) ... * Extend protocol and firewall manager to handle old management * Send correct empty firewall rules list when delete peer * Add extra tests for firewall manager and uspfilter * Work with inconsistent state * Review note * Update comment	2023-05-31 19:04:38 +02:00
Givi Khojanashvili	ba7a39a4fc	Feat linux firewall support (#805) ... Update the client's engine to apply firewall rules received from the manager (results of ACL policy).	2023-05-29 16:00:18 +02:00
Givi Khojanashvili	f03aadf064	Feat firewall controller interface (#740) ... Add a standard interface for the client firewall to support ACL.	2023-03-16 13:00:08 +04:00