summaryrefslogtreecommitdiff
path: root/meta-google/recipes-google/networking/gbmc-bridge/gbmc-br-nft.sh
AgeCommit message (Collapse)AuthorFilesLines
2021-12-16meta-google: nftables: Make rule loading atomicWilliam A. Kennington III1-3/+1
This ensures that all of the rules are processed and unexpected packets are not allowed or blocked by the kernel at any time. Change-Id: Ia7bb1d7f604f8ed1bd9759a23e370d20cb0c690d Signed-off-by: William A. Kennington III <wak@google.com>
2021-11-06meta-google: gbmc-bridge: Restrict network from /72 to /76William A. Kennington III1-2/+2
We can have multiple gBMC networks within one "machine". This allows us to have multiple address sets. Change-Id: I5b18b7822f50bb0570e1aa5a70ac47036694d922 Signed-off-by: William A. Kennington III <wak@google.com>
2021-05-11meta-google: network-sh: Convert to IP bytesWilliam A. Kennington III1-2/+6
Now that we can convert to and from IP bytes, we should use them everywhere to ensure values are parsed correctly. Change-Id: I995091d1eff670db6678b4a2f4a64113e93308f7 Signed-off-by: William A. Kennington III <wak@google.com>
2021-05-10meta-google: gbmc-bridge: Look at IP bytes instead of regexWilliam A. Kennington III1-3/+12
Change-Id: Ie3a20df633346692039103edc882e202b7c3309b Signed-off-by: William A. Kennington III <wak@google.com>
2021-05-10meta-google: gbmc-bridge: Recognize public addresses internallyWilliam A. Kennington III1-0/+63
We want to be able to categorize public addresses being used for internal traffic, and allow them to access internal services. Change-Id: I1f4b8eaa329954f330c3052c0c789b8e5e3b4662 Signed-off-by: William A. Kennington III <wak@google.com>