Zhe Weng
f7181676b7
net: Support IP packet filter
Add a firewall compatible with Linux's iptables and ip6tables, with chains at similar points in the packet processing path.
NIC ─> ipv[46]_input ┬> ipv[46]_forward ─> [FORWARD] ┬> devif_poll_out ─> NIC
│ │
│ ┌> tcp ┐ │
│ ├> udp ┤ │
└> [INPUT] ┼> icmp ┼> [OUTPUT] ┘
├> icmp6 ┤
└> ... ┘
Signed-off-by: Zhe Weng <wengzhe@xiaomi.com>
2024-06-20 09:43:05 +08:00
..
2023-07-08 13:50:48 +08:00
2023-09-14 18:21:32 +08:00
2023-08-22 16:34:21 +09:00
2022-12-06 17:03:47 +08:00
2020-12-09 07:25:26 -08:00
2023-06-01 17:05:54 +08:00
2023-11-07 19:30:36 +08:00
2024-06-20 09:43:05 +08:00
2023-08-22 16:34:21 +09:00
2023-06-01 17:05:54 +08:00
2024-06-20 09:43:05 +08:00
2024-06-20 09:43:05 +08:00
2023-02-14 11:21:09 +08:00