Code

Use nftables to configure firewall#800

Code

Open

badrogger wants to merge 50 commits intov2.6.xskalenetwork/node-cli:v2.6.xfrom nftablesskalenetwork/node-cli:nftablesCopy head branch name to clipboard

+966-472

Commits

Commits on Nov 15, 2024

• Replace iptables with nftables

  badrogger

  committed
  11886d7

• Add nftables dependency to GA workflow

  badrogger

  committed
  dbc886e

• Update GA test pipeline

  badrogger

  committed
  990484d

• Switch to ubuntu to 22.04 in GA pipeline

  badrogger

  committed
  13dc975

• Fix build

  badrogger

  committed
  41ee41c

Commits on Nov 18, 2024

• Fix Dockerfile deps installation

  badrogger

  committed
  4badf7a

• Fix Dockerfile

  badrogger

  committed
  4c0b27b

• Fix tests

  badrogger

  committed
  e96a667

• Fix tests pipeline

  badrogger

  committed
  5da857c

• Remove python-iptables from dependencies

  badrogger

  committed
  a657276

• Update Markupsafe to 3.0.2

  badrogger

  committed
  cab4d91

• Bump dependencies

  badrogger

  committed
  c4ad6a9

• Do not fail if cannot import iptc

  badrogger

  committed
  f5ccf8b

• Upgrade setuptools

  badrogger

  committed
  13fb2f2

• Do not set pythonpath globally

  badrogger

  committed
  a754578

Commits on Nov 20, 2024

• Try with no setuptools

  badrogger

  committed
  9cec757

• Remove libxtwrapper

  badrogger

  committed
  28016b9

• Remove allow_ssh function

  badrogger

  committed
  0006b95

Commits on Nov 22, 2024

• Add firewall cleanup to update

  badrogger

  committed
  8e976b0

Commits on Nov 25, 2024

• Apply migrations during update for sync node

  badrogger

  committed
  8dc9b80

Commits on Nov 26, 2024

• Bump version

  badrogger

  committed
  d405b36

• Remove deprecated iptables module

  badrogger

  committed
  af55f11

• Use lowercase chains. Do not import if not needed

  badrogger

  committed
  8cde8b1

• Fix migration condition

  badrogger

  committed
  fe34b64

• Fix core and sync tests

  badrogger

  committed
  8b871ba

• Add missing migration and nftables tests

  badrogger

  committed
  faa92b1

• Extract nftables and migration tests into another action

  badrogger

  committed
  d0d1efc

• Reduce log level of pytest

  badrogger

  committed
  3ce7856

• Use ip family by default

  badrogger

  committed
  2c8930b

Commits on Nov 28, 2024

• Remove duplicate setup_firewall execution

  badrogger

  committed
  202d68e

• Add firewall configuration to restore

  badrogger

  committed
  d0ef85d

• Configure chain properly

  badrogger

  committed
  d420f58

Commits on Nov 29, 2024

• Fix duplicates

  badrogger

  committed
  7a7ffe1

• Switch to new version of docker compose

  badrogger

  committed
  418f70a

Commits on Dec 3, 2024

• Improve run_nftables_tests script

  badrogger

  committed
  240f7b3

Commits on Dec 4, 2024

• Fix tests

  badrogger

  committed
  0609568

• Fix linter

  badrogger

  committed
  498511a

• Fix GA pipline

  badrogger

  committed
  3f9de98

• Optional monitoring ports

  badrogger

  committed
  f25d4b6

Commits on Dec 5, 2024

• Fix tcp port condition

  badrogger

  committed
  baff173

• Remove iptables-persistant from required checks

  badrogger

  committed
  d9d2410

Commits on Dec 9, 2024

• Save nftables rules at the end of node configuration

  badrogger

  committed
  1925849

• Move configure_nftables to operations.base

  badrogger

  committed
  b311103

Commits on Dec 16, 2024

• Add include to the nftables conf file

  badrogger

  committed
  2080b74

Commits on Dec 17, 2024

• Fix turn-off

  badrogger

  committed
  ef5ac86

Commits on Dec 18, 2024

• Fix migration

  badrogger

  committed
  1ceae64

Commits on Dec 23, 2024

• Small improvements

  badrogger

  committed
  fbc27e7

• Fix tests

  badrogger

  committed
  cd0bce6

• Fix migration tests

  badrogger

  committed
  35e33aa

• Remove comments

  badrogger

  committed
  20bff35