Code

Rc add zfw calls main#1032

Code

Merged

scareything merged 24 commits intomainopenziti/ziti-tunnel-sdk-c:mainfrom rc-add-zfw-calls-mainopenziti/ziti-tunnel-sdk-c:rc-add-zfw-calls-mainCopy head branch name to clipboardOct 29, 2024

+959-10

Commits

Commits on Oct 29, 2024

• alpha zfw system call branch

  

  r-caamano

  authored and

  scareything

  committed
  1fb53e2

  Copy full SHA for 1fb53e2

• Added diverter entires for non-transparent services only if running in firewall mode

  

  r-caamano

  authored and

  scareything

  committed
  380f816

  Copy full SHA for 380f816

• Remved hardcoded "ziti0" in printf statement

  

  r-caamano

  authored and

  scareything

  committed
  217f028

  Copy full SHA for 217f028

• added diverter_path char * variable and changed path to diverter in /opt/openziti/bin directly vs pointing at symbolic link in /usr/sbn

  

  r-caamano

  authored and

  scareything

  committed
  4286425

  Copy full SHA for 4286425

• Added load user rules if in full fw mode and converted all printf to ZITI_LOG entries

  

  r-caamano

  authored and

  scareything

  committed
  d2283fa

  Copy full SHA for d2283fa

• Updated zfw init system call argument

  

  r-caamano

  authored and

  scareything

  committed
  a2e73ed

  Copy full SHA for a2e73ed

• Added 1 second delay after commiting the link route(s) for a transparent service so zfw can then remove the link route

  

  r-caamano

  authored and

  scareything

  committed
  0138155

  Copy full SHA for 0138155

• Added check for invalid diverterIf entry. Added check for user defined rules and dns range rules if running in -f, --diverterFw mode

  

  r-caamano

  authored and

  scareything

  committed
  85914e0

  Copy full SHA for 85914e0

• In firewall mode changed forwarding mode of DNS range to ebpf redirect

  

  r-caamano

  authored and

  scareything

  committed
  fc33316

  Copy full SHA for fc33316

• refactor to only issue unbind once per intercept address

  

  r-caamano

  authored and

  scareything

  committed
  4c5d8b0

  Copy full SHA for 4c5d8b0

• Added multi diverter interface support and added option to set diverter or firewall mode/interfaces via environmental variables

  

  r-caamano

  authored and

  scareything

  committed
  d1d9814

  Copy full SHA for d1d9814

• updated diverter system calls to report result and removed references to diverterIf now that it is a list of interfaces

  

  r-caamano

  authored and

  scareything

  committed
  bdf5cad

  Copy full SHA for bdf5cad

• added clause on WIN32 to inform endusers that diverter is not supported if entered

  

  r-caamano

  authored and

  scareything

  committed
  3e9ca82

  Copy full SHA for 3e9ca82

• updated cli help menu

  

  r-caamano

  authored and

  scareything

  committed
  aa1568b

  Copy full SHA for aa1568b

• Refactored to ignore ZITI_DIVERTER and ZITI_FIREWALL env vars if empty

  

  r-caamano

  authored and

  scareything

  committed
  5600495

  Copy full SHA for 5600495

• added ability to point to diverter binaries in location other than /opt/openziti/bin via ZFW_OBJECT_PATH env var

  

  r-caamano

  authored and

  scareything

  committed
  ab7ca7a

  Copy full SHA for ab7ca7a

• Refactored link route add/remove for transparency to use existing tun driver call backs rather than direct ip route system call

  

  r-caamano

  authored and

  scareything

  committed
  06b6215

  Copy full SHA for 06b6215

• removed code deleting link route as it appears the issue with binding conflict no longer exists

  

  r-caamano

  authored and

  scareything

  committed
  013d0c1

  Copy full SHA for 013d0c1

• refactored camel case var name to snake case

  

  r-caamano

  authored and

  scareything

  committed
  e68ea12

  Copy full SHA for e68ea12

• Removed empty line in INThandler()

  

  r-caamano

  authored and

  scareything

  committed
  20103ba

  Copy full SHA for 20103ba

• only include sys/wait.h on linux, same for zfw system call functions and removed ztun var

  

  r-caamano

  authored and

  scareything

  committed
  86e3a47

  Copy full SHA for 86e3a47

• only include fcntl.h and unistd.h on linux

  

  r-caamano

  authored and

  scareything

  committed
  6029f67

  Copy full SHA for 6029f67

• add missing decls. use static where appropriate.

  scareything

  committed
  9419002

  Copy full SHA for 9419002

• Refactored to use only zfw system calls with explicit file paths

  

  r-caamano

  authored and

  scareything

  committed
  dd33098

  Copy full SHA for dd33098