Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Rc add zfw calls main #1032

Merged
merged 24 commits into from
Oct 29, 2024
Merged

Rc add zfw calls main #1032

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
24 commits
Select commit Hold shift + click to select a range
1fb53e2
alpha zfw system call branch
r-caamano Sep 22, 2024
380f816
Added diverter entires for non-transparent services only if running i…
r-caamano Sep 22, 2024
217f028
Remved hardcoded "ziti0" in printf statement
r-caamano Sep 23, 2024
4286425
added diverter_path char * variable and changed path to diverter in /…
r-caamano Sep 24, 2024
d2283fa
Added load user rules if in full fw mode and converted all printf to …
r-caamano Sep 24, 2024
a2e73ed
Updated zfw init system call argument
r-caamano Sep 24, 2024
0138155
Added 1 second delay after commiting the link route(s) for a transpar…
r-caamano Sep 24, 2024
85914e0
Added check for invalid diverterIf entry. Added check for user define…
r-caamano Sep 25, 2024
fc33316
In firewall mode changed forwarding mode of DNS range to ebpf redirect
r-caamano Sep 26, 2024
4c5d8b0
refactor to only issue unbind once per intercept address
r-caamano Sep 30, 2024
d1d9814
Added multi diverter interface support and added option to set divert…
r-caamano Oct 1, 2024
bdf5cad
updated diverter system calls to report result and removed references…
r-caamano Oct 1, 2024
3e9ca82
added clause on WIN32 to inform endusers that diverter is not support…
r-caamano Oct 1, 2024
aa1568b
updated cli help menu
r-caamano Oct 1, 2024
5600495
Refactored to ignore ZITI_DIVERTER and ZITI_FIREWALL env vars if empty
r-caamano Oct 2, 2024
ab7ca7a
added ability to point to diverter binaries in location other than /o…
r-caamano Oct 3, 2024
06b6215
Refactored link route add/remove for transparency to use existing tun…
r-caamano Oct 3, 2024
013d0c1
removed code deleting link route as it appears the issue with binding…
r-caamano Oct 3, 2024
e68ea12
refactored camel case var name to snake case
r-caamano Oct 3, 2024
20103ba
Removed empty line in INThandler()
r-caamano Oct 4, 2024
86e3a47
only include sys/wait.h on linux, same for zfw system call functions …
r-caamano Oct 4, 2024
6029f67
only include fcntl.h and unistd.h on linux
r-caamano Oct 4, 2024
9419002
add missing decls. use static where appropriate.
scareything Oct 7, 2024
dd33098
Refactored to use only zfw system calls with explicit file paths
r-caamano Oct 8, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 1 addition & 3 deletions programs/ziti-edge-tunnel/instance.c
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -414,9 +414,7 @@ tunnel_service *get_tunnel_service(tunnel_identity* id, ziti_service* zs) {
svc->Permissions.Dial = ziti_service_has_permission(zs, ziti_session_type_Dial);
setTunnelPostureDataTimeout(svc, zs);
setTunnelServiceAddress(svc, zs);
if(svc->Permissions.Bind){
setTunnelAllowedSourceAddress(svc, zs);
}
setTunnelAllowedSourceAddress(svc, zs);
return svc;
}

Expand Down
Loading
Loading