Skip to content

Make protocol optional in config #5

Description

@edwardwc

Ex config:

# API reference for the YAML fields
# The interface to run the XDP on
interface: "enp43s0np0"
# Whether the firewall is persistent across reboots.
# Not currently implemented.
# persistent: true
# Whether the Prometheus exporter is enabled.
# Not currently implemented. Prometheus always listens on :4343.
# prometheus: true
# The local port Prometheus should listen on.
# prometheus_port: 4242
# The firewall rules you'd like to define.
# The firewall drops traffic like TCP and UDP by default, rules whitelist traffic
rules:
# Define each rule individually
- rule:
# The source IP range this rule will apply to. For example, 23.133.104.69/32, or 23.133.104.0/24.
# To allow traffic from any IP, use 0.0.0.0/0
source_ip_range: 5.161.57.23/32
# The destination IP range this rule will apply to.
# To allow traffic to go to any IP assigned with this server, use 0.0.0.0/0.
destination_ip_range: 5.161.57.23/32
# The IP protocol to allow.
# Current allowed values are: TCP, UDP, ICMP, ALL.
protocol: "TCP"
# The port to allow the traffic to. Only applicable to TCP and UDP.
# Omit or enter 0 to allow any port.
port: 0
# Limit the amount of packets sent to this service per source IP. Runs over 1 minute.
# Enter to zero to disable ratelimiting.
ratelimit: 0

protocol should be optional.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions