Merge pull request #2016 from nicolas-fort/T5160
482f7e352272
Actions

Description

Merge pull request #2016 from nicolas-fort/T5160

T5160: Firewall refactor

Details

Provenance

c-po	Authored on Aug 11 2023, 8:14 PM
GitHub	Committed on Aug 11 2023, 8:14 PM

Parents

rVYOSONEX142ace2a16fc: Merge pull request #2148 from sever-sever/T5448
rVYOSONEX4e07fa25f551: T5460: remove config-trap from firewall

Branches

Tags

Event Timeline

GitHub <noreply@github.com> committed rVYOSONEX482f7e352272: Merge pull request #2016 from nicolas-fort/T5160 (authored by c-po).Aug 11 2023, 8:14 PM

Merged Changes

4e07fa25f551 T5460: remove config-trap from firewall
Author
n.fort
Browse Repository
No Builds
No Audits
f57ad85b346a T5160: firewall refactor: fix regexep for connection-status. Create new file…
Author
n.fort
Browse Repository
No Builds
No Audits
a07a46d5d4ac T5160: firewall refactor: change default value for <default-action> from <drop>…
Author
n.fort
Browse Repository
No Builds
No Audits
0300bf433d9a T5160: firewall refactor: move <set firewall ipv6 ipv6-name ...> to <set…
Author
n.fort
Browse Repository
No Builds
No Audits
dbb069151f37 T5160: firewall refactor: fix firewall template for correct rule parsing that…
Author
n.fort
Browse Repository
No Builds
No Audits
68694d022d8f T5160: firewal refactor: fix tabulation for geo-ip parsing code. Typo fix in…
Author
n.fort
Browse Repository
No Builds
No Audits
d898739b78f4 T5160: T5250: while refactoring, fix reference column for op-mode command…
Author
n.fort
Browse Repository
No Builds
No Audits
68d14fe80145 T5160: firewall refactor: change firewall ip to firewall ipv4
Author
n.fort
Browse Repository
No Builds
No Audits
342db936a02a T5160: firewall refactor. Update op-mode commands to new syntax.
Author
n.fort
Browse Repository
No Builds
No Audits
dbf7501d0c75 T5160: firewall refactor: re-add missing code in template.py which was…
Author
n.fort
Browse Repository
No Builds
No Audits
ac5b9a4630f8 T5160: firewall refactor: new cli structure. Add migration script and update…
Author
n.fort
Browse Repository
No Builds
No Audits
a8244928af84 T5160: firewall refactor: new cli structure. Update jinja templates, python…
Author
n.fort
Browse Repository
No Builds
No Audits
1c2209c1dc84 T5160: firewall refactor: new cli structure. Update only all xml
Author
n.fort
Browse Repository
No Builds
No Audits

Changes (30)

Path

Size

data/

templates/

firewall/

nftables-policy.j2

nftables.j2

interface-definitions/

firewall.xml.in

include/

firewall/

	action-and-notrack.xml.i
	action.xml.i

	common-rule-inet.xml.i
	common-rule.xml.i

	common-rule-ipv4-raw.xml.i
	common-rule.xml.i

common-rule-ipv6.xml.i

default-action-base-chains.xml.i

global-options.xml.i

inbound-interface.xml.i

ipv4-custom-name.xml.i

ipv4-hook-forward.xml.i

ipv4-hook-input.xml.i

ipv4-hook-output.xml.i

ipv4-hook-prerouting.xml.i

ipv6-custom-name.xml.i

ipv6-hook-forward.xml.i

ipv6-hook-input.xml.i

ipv6-hook-output.xml.i

match-interface.xml.i

outbound-interface.xml.i

	firewall/
	policy/

	common-rule-ipv4.xml.i
	route-ipv4.xml.i

version/

firewall-version.xml.i

op-mode-definitions/

firewall.xml.in

python/

vyos/

firewall.py

template.py

smoketest/

scripts/

cli/

test_firewall.py

src/

conf_mode/

firewall.py

migration-scripts/

firewall/

10-to-11

op_mode/

firewall.py

rVYOSONEX482f7e352272

View Options

data/templates/firewall/nftables-policy.j2

View Options

data/templates/firewall/nftables.j2

View Options

interface-definitions/firewall.xml.in

View Options

interface-definitions/include/firewall/action-and-notrack.xml.i

View Options

interface-definitions/include/firewall/common-rule-inet.xml.i

View Options

interface-definitions/include/firewall/common-rule-ipv4-raw.xml.i

View Options

interface-definitions/include/firewall/common-rule-ipv4.xml.i

View Options

interface-definitions/include/firewall/common-rule-ipv6.xml.i

View Options

interface-definitions/include/firewall/default-action-base-chains.xml.i

View Options

interface-definitions/include/firewall/global-options.xml.i

View Options

interface-definitions/include/firewall/inbound-interface.xml.i

View Options

interface-definitions/include/firewall/ipv4-custom-name.xml.i

View Options

interface-definitions/include/firewall/ipv4-hook-forward.xml.i

View Options

interface-definitions/include/firewall/ipv4-hook-input.xml.i

View Options

interface-definitions/include/firewall/ipv4-hook-output.xml.i

View Options

interface-definitions/include/firewall/ipv4-hook-prerouting.xml.i

View Options

interface-definitions/include/firewall/ipv6-custom-name.xml.i

View Options

interface-definitions/include/firewall/ipv6-hook-forward.xml.i

View Options

interface-definitions/include/firewall/ipv6-hook-input.xml.i

View Options

interface-definitions/include/firewall/ipv6-hook-output.xml.i

View Options

interface-definitions/include/firewall/match-interface.xml.i

View Options

interface-definitions/include/firewall/outbound-interface.xml.i

View Options

interface-definitions/include/version/firewall-version.xml.i

View Options

op-mode-definitions/firewall.xml.in

View Options

python/vyos/firewall.py

View Options

python/vyos/template.py

View Options

smoketest/scripts/cli/test_firewall.py

View Options

src/conf_mode/firewall.py

View Options

src/migration-scripts/firewall/10-to-11

View Options

Merge pull request #2016 from nicolas-fort/T5160482f7e352272Actions

Description

Details

Event Timeline

Merged Changes

Changes (30)

rVYOSONEX482f7e352272

data/templates/firewall/nftables-policy.j2

data/templates/firewall/nftables.j2

interface-definitions/firewall.xml.in

interface-definitions/include/firewall/action-and-notrack.xml.i

interface-definitions/include/firewall/common-rule-inet.xml.i

interface-definitions/include/firewall/common-rule-ipv4-raw.xml.i

interface-definitions/include/firewall/common-rule-ipv4.xml.i

interface-definitions/include/firewall/common-rule-ipv6.xml.i

interface-definitions/include/firewall/default-action-base-chains.xml.i

interface-definitions/include/firewall/global-options.xml.i

interface-definitions/include/firewall/inbound-interface.xml.i

interface-definitions/include/firewall/ipv4-custom-name.xml.i

interface-definitions/include/firewall/ipv4-hook-forward.xml.i

interface-definitions/include/firewall/ipv4-hook-input.xml.i

interface-definitions/include/firewall/ipv4-hook-output.xml.i

interface-definitions/include/firewall/ipv4-hook-prerouting.xml.i

interface-definitions/include/firewall/ipv6-custom-name.xml.i

interface-definitions/include/firewall/ipv6-hook-forward.xml.i

interface-definitions/include/firewall/ipv6-hook-input.xml.i

interface-definitions/include/firewall/ipv6-hook-output.xml.i

interface-definitions/include/firewall/match-interface.xml.i

interface-definitions/include/firewall/outbound-interface.xml.i

interface-definitions/include/version/firewall-version.xml.i

op-mode-definitions/firewall.xml.in

python/vyos/firewall.py

python/vyos/template.py

smoketest/scripts/cli/test_firewall.py

src/conf_mode/firewall.py

src/migration-scripts/firewall/10-to-11

src/op_mode/firewall.py

Merge pull request #2016 from nicolas-fort/T5160
482f7e352272
Actions