Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

V0.8.3 release candidate #56

Merged
merged 22 commits into from
Jul 10, 2024
Merged

V0.8.3 release candidate #56

merged 22 commits into from
Jul 10, 2024

Commits on Jul 4, 2024

  1. Initial foundation for egress filtering

    @r-caamano
    r-caamano committed Jul 4, 2024
    Configuration menu
    Copy the full SHA
    e330335 View commit details
    Browse the repository at this point in the history

Commits on Jul 5, 2024

  1. Added initial support for displaying egress filters

    @r-caamano
    r-caamano committed Jul 5, 2024
    Configuration menu
    Copy the full SHA
    85db973 View commit details
    Browse the repository at this point in the history

Commits on Jul 7, 2024

  1. completed preliminary kernel infrastructure for outbound tracking. St… 

    …ill need to add outbound icmp and rule matching
    @r-caamano
    r-caamano committed Jul 7, 2024
    Configuration menu
    Copy the full SHA
    8e93276 View commit details
    Browse the repository at this point in the history

  2. Created an additonal ingress bpf program to reduce the instruction se… 

    …t in bpf_sk_splice5 which was limiting the number of allowed key matches to 1
    @r-caamano
    r-caamano committed Jul 7, 2024
    Configuration menu
    Copy the full SHA
    5568892 View commit details
    Browse the repository at this point in the history

  3. added tcp ingress tracking logic to bpf_sk_splice6

    @r-caamano
    r-caamano committed Jul 7, 2024
    Configuration menu
    Copy the full SHA
    4f66e5a View commit details
    Browse the repository at this point in the history

  4. completed initial outbound filter tcp tracking framework

    @r-caamano
    r-caamano committed Jul 7, 2024
    Configuration menu
    Copy the full SHA
    0168415 View commit details
    Browse the repository at this point in the history

  5. added icmp / vrrp outbound clauses and restricted all other non defin… 

    …ed protocols
    @r-caamano
    r-caamano committed Jul 7, 2024
    Configuration menu
    Copy the full SHA
    7a806b5 View commit details
    Browse the repository at this point in the history

  6. Modified icmpv6 filter

    @r-caamano
    r-caamano committed Jul 7, 2024
    Configuration menu
    Copy the full SHA
    ca53e7c View commit details
    Browse the repository at this point in the history

Commits on Jul 8, 2024

  1. Initial fully functional outbound filtering commit for ipv4/ipv6

    @r-caamano
    r-caamano committed Jul 8, 2024
    Configuration menu
    Copy the full SHA
    e6f512e View commit details
    Browse the repository at this point in the history

  2. Updated README set example config for outbound filtering with "PerInt… 

    …erfaceRules": false to match the non interface specific rules used in the example /opt/openziti/bin/user/user_rules.sh
    @r-caamano
    r-caamano committed Jul 8, 2024
    Configuration menu
    Copy the full SHA
    cd75e1b View commit details
    Browse the repository at this point in the history

  3. Fixed issue in icmpv6 in zfw_tc_outbound_track.c

    @r-caamano
    r-caamano committed Jul 8, 2024
    Configuration menu
    Copy the full SHA
    acecfee View commit details
    Browse the repository at this point in the history

  4. Refactored conditional in zfw_tc_ingress.c and fixed conditional in z… 

    …fw_tc_outbound_track.c that was preventing ipv6 support on loopback when appplied.
    @r-caamano
    r-caamano committed Jul 8, 2024
    Configuration menu
    Copy the full SHA
    a64c5b6 View commit details
    Browse the repository at this point in the history

  5. zfw_tunnel_wrapper.c hardening

    @r-caamano
    r-caamano committed Jul 8, 2024
    Configuration menu
    Copy the full SHA
    3bfc605 View commit details
    Browse the repository at this point in the history

  6. Added conditional blocking -L, --list and -F, --flush combination call

    @r-caamano
    r-caamano committed Jul 8, 2024
    Configuration menu
    Copy the full SHA
    42c89ea View commit details
    Browse the repository at this point in the history

  7. Added usage for egress maps not found and updated README

    @r-caamano
    r-caamano committed Jul 8, 2024
    Configuration menu
    Copy the full SHA
    a9cd9c5 View commit details
    Browse the repository at this point in the history

  8. Added path to tcp_ingress_map in zfw.c so that it is cleared when iss… 

    …uing sudo zfw -Q
    @r-caamano
    r-caamano committed Jul 8, 2024
    Configuration menu
    Copy the full SHA
    2c31e48 View commit details
    Browse the repository at this point in the history

  9. Fixed incorrect egress_usage conditional

    @r-caamano
    r-caamano committed Jul 8, 2024
    Configuration menu
    Copy the full SHA
    7e7d5e0 View commit details
    Browse the repository at this point in the history

Commits on Jul 9, 2024

  1. Updated README

    @r-caamano
    r-caamano committed Jul 9, 2024
    Configuration menu
    Copy the full SHA
    37e8da1 View commit details
    Browse the repository at this point in the history

  2. removed route delete from egress and ipv6 delete functions

    @r-caamano
    r-caamano committed Jul 9, 2024
    Configuration menu
    Copy the full SHA
    cb31d64 View commit details
    Browse the repository at this point in the history

Commits on Jul 10, 2024

  1. Increased max sessions to 65535 for udp/tcp maps

    @r-caamano
    r-caamano committed Jul 10, 2024
    Configuration menu
    Copy the full SHA
    e4e9c6f View commit details
    Browse the repository at this point in the history

  2. Fixed issue with install.sh for router option if /opt/openziti/bin ex… 

    …ists prior to install
    @r-caamano
    r-caamano committed Jul 10, 2024
    Configuration menu
    Copy the full SHA
    b14e2a5 View commit details
    Browse the repository at this point in the history

  3. Fix altname interface use

    @r-caamano
    r-caamano committed Jul 10, 2024
    Configuration menu
    Copy the full SHA
    7c37cf3 View commit details
    Browse the repository at this point in the history