search

metal-stack / firewall-controller

A kubernetes controller running on bare-metal firewalls, creating nftables rules, configures suricata, collects network metrics
MIT License
47 stars 4 forks source link

Update controller-runtime, kube-builder, go, alpine and all dependencies, support port-ranges #115

Closed majst01 closed 2 years ago

majst01 commented 2 years ago

Also add support for EndPort, aka Portranges in CNWP !

TODO:

with this cwnp:

spec:
  ingress:
  - from:
    - cidr: 0.0.0.0/0
    ports:
    - port: 8443
      protocol: TCP
    - port: 8445
      protocol: TCP
    - endPort: 8088
      port: 8080
      protocol: TCP

this firewall rule is created:

ip saddr { 0.0.0.0-255.255.255.255 } tcp dport { 8080-8088, 8443, 8445 } counter packets 0 bytes 0 accept comment "accept traffic for k8s network policy allow-to-vm-ssh tcp"