feat(network): enable Docker and Podman policy DNS and transparent TCP - #2723

Merged

johntmyers merged 32 commits into

mainfrom

feat/2712-docker-transparent-tcp/johntmyers

Aug 20, 2026

Commits on Aug 20, 2026

feat(network): enable Docker transparent TCP egress
johntmyers
committed
961e456
test(e2e): cover Docker transparent TCP egress
johntmyers
committed
c54dcfe
feat(network): correlate transparent TCP audit events
johntmyers
committed
cc37086
docs(examples): add transparent TCP Redis demo
johntmyers
committed
e2bc255
docs(examples): demonstrate blocked TCP connections
johntmyers
committed
fd772ad
docs(examples): focus Redis demo audit output
johntmyers
committed
670b0a2
fix(network): close transparent TCP policy bypasses
johntmyers
committed
bc8406b
fix(sandbox): reject unsupported TCP policy reloads
johntmyers
committed
a721e91
fix(ci): satisfy Linux transparent TCP lints
johntmyers
committed
38622f0
feat(podman): enable transparent TCP egress
johntmyers
committed
08c6ee2
fix(podman): permit policy DNS port binding
johntmyers
committed
d5a0e9b
test(e2e): use qualified transparent TCP hostname
johntmyers
committed
be54bce
fix(podman): preserve exact policy DNS names
johntmyers
committed
8cfcf93
fix(podman): route policy DNS over TCP
johntmyers
committed
e95e1fa
fix(dns): serve multiple TCP queries per connection
johntmyers
committed
72d91de
docs(network): explain native DNS and TCP egress
johntmyers
committed
00707bd
fix(sandbox): reconcile runtime reload with upstream
johntmyers
committed
85eaf7e
fix(network): harden transparent DNS capture
johntmyers
committed
70c1bfd
fix(podman): preserve resolver behavior for native tcp
johntmyers
committed
5779cab
docs(network): clarify native tcp runtime constraints
johntmyers
committed
cee830a
fix(network): remove unused transparent tcp pin
johntmyers
committed
b400b94
fix(network): admit redirected transparent tcp
johntmyers
committed
e76f032
fix(network): restore podman transparent networking
johntmyers
committed
5d7d7f5
test(podman): permit alpine busybox binaries
johntmyers
committed
03137c6
test(podman): use portable alpine keepalive
johntmyers
committed
ec1be61
test(podman): build musl networking fixture
johntmyers
committed
0140736
test(podman): isolate musl DNS probe
johntmyers
committed
c84e74e
fix(podman): keep privileged port capability dropped
johntmyers
committed
96305ed
fix(network): preserve transparent TCP port 53
johntmyers
committed
044e22f
fix(network): report synthetic pool pressure by family
johntmyers
committed
eac8cdd
test(podman): bind tcp fixtures before readiness
johntmyers
committed
aa8d4b8
test(podman): grant fixture low-port bind
johntmyers
committed
bbffdb4

Navigation Menu

Uh oh!

feat(network): enable Docker and Podman policy DNS and transparent TCP - #2723

feat(network): enable Docker and Podman policy DNS and transparent TCP#2723
johntmyers merged 32 commits into
mainfrom
feat/2712-docker-transparent-tcp/johntmyers

Commits on Aug 20, 2026

feat(network): enable Docker transparent TCP egress

test(e2e): cover Docker transparent TCP egress

feat(network): correlate transparent TCP audit events

docs(examples): add transparent TCP Redis demo

docs(examples): demonstrate blocked TCP connections

docs(examples): focus Redis demo audit output

fix(network): close transparent TCP policy bypasses

fix(sandbox): reject unsupported TCP policy reloads

fix(ci): satisfy Linux transparent TCP lints

feat(podman): enable transparent TCP egress

fix(podman): permit policy DNS port binding

test(e2e): use qualified transparent TCP hostname

fix(podman): preserve exact policy DNS names

fix(podman): route policy DNS over TCP

fix(dns): serve multiple TCP queries per connection

docs(network): explain native DNS and TCP egress

fix(sandbox): reconcile runtime reload with upstream

fix(network): harden transparent DNS capture

fix(podman): preserve resolver behavior for native tcp

docs(network): clarify native tcp runtime constraints

fix(network): remove unused transparent tcp pin

fix(network): admit redirected transparent tcp

fix(network): restore podman transparent networking

test(podman): permit alpine busybox binaries

test(podman): use portable alpine keepalive

test(podman): build musl networking fixture

test(podman): isolate musl DNS probe

fix(podman): keep privileged port capability dropped

fix(network): preserve transparent TCP port 53

fix(network): report synthetic pool pressure by family

test(podman): bind tcp fixtures before readiness

test(podman): grant fixture low-port bind