Commit Graph

59 Commits

Author SHA1 Message Date
av0idd4rk
863422f202 Add authenticated MCP server and agent guide
Expose 28 tools with shared REST operations, role-scoped bearer authentication, revisions, durable retries, snapshots, jobs and timed rollback. Add Docker verification harnesses and setup/workflow documentation in docs/mcp.md and inst.md. Validated with 330 unit tests, two consecutive 25-case MCP/import runs, and restart recovery; the full upstream regression run remains incomplete.
2026-10-23 09:46:44 +03:00
Domingo Dirutigliano
896eb2dfb4
backup managment fixes 2026-10-01 12:32:12 +02:00
Domingo Dirutigliano
61e50b72b6
minor nftable and quic managment improves 2026-10-01 10:05:17 +02:00
Domingo Dirutigliano
8ce9b21400
general fixes and old/new connection resilience for proxy filters 2026-09-26 09:52:20 +02:00
Domingo Dirutigliano
0c52014606
minor changes and bug fixes 2026-09-23 11:21:51 +02:00
Domingo Dirutigliano
d94c08293a
added additional tests 2026-09-19 02:17:51 +02:00
Domingo Dirutigliano
4476da02bd
QUIC support and bug fixes 2026-09-18 09:34:44 +02:00
Domingo Dirutigliano
e491a14899
improved addr/int selection UI + change llhttp managment 2026-09-13 15:54:56 +02:00
Domingo Dirutigliano
9d2a4dc4bf
additional improves on UDP 2026-09-11 18:53:41 +02:00
Domingo Dirutigliano
9832e449c6
Initial commit for future 5.0.0 version: new UI, proxies and managment 2026-09-10 08:51:08 +02:00
Domingo Dirutigliano
d27831c9ec
Merge branch 'dev' into dev-tmp 2026-07-23 13:45:25 +02:00
Domingo Dirutigliano
c37d2b31e8
graphics and TLS feature total refactoring 2026-07-23 13:39:01 +02:00
Domingo Dirutigliano
4125eff93f
minor adjustments + network address based access control 2026-07-22 07:54:38 +02:00
Sogoss
75c54f0155 Add transparent TLS proxying and certificate management for NFProxy and NFRegex
- Add Nginx stream proxy module for transparent TLS termination in NFProxy and NFRegex
- Add backend routes and SQLite schema for certificate management (upload, view, delete)
- Implement DNAT nftables redirection rules for deterministic TLS ports
- Add frontend React components (TLSConfigModal, TLSServiceFields) for certificate configuration
- Update Dockerfile and docker-entrypoint.sh to support Nginx stream module and sysctl forwarding
2026-07-20 12:25:30 +02:00
Minei3oat
907c85d85d Add Content-Type=plain/text for metrics endpoint
Without the content type, prometheus will reject the metrics if no `fallback_scrape_protocol` is specified.

https://prometheus.io/docs/prometheus/3.0/migration/#scrape-protocols
https://prometheus.io/docs/instrumenting/exposition_formats/#text-based-format
2025-09-28 21:09:25 +02:00
Domingo Dirutigliano
ac1b2c9f76
removed constraint to prothijack 2025-05-05 19:11:21 +02:00
Domingo Dirutigliano
73c40d2f5d
data handler improves, written test for nfproxy, new option on parsing fail 2025-03-09 22:14:34 +01:00
Domingo Dirutigliano
eda44f12ff
Merge pull request #19 from Pwnzer0tt1/tmp-meta-branch
Taken edits from main removing edits of regexfilter.cpp
2025-03-05 10:06:23 +01:00
Domingo Dirutigliano
8ae533e8f7
push: code changes x2 2025-02-28 21:14:09 +01:00
Domingo Dirutigliano
6a11dd0d16
push: code changes 2025-02-25 23:53:04 +01:00
Minei3oat
26a2428512 Fix metrics endpoint 2025-02-25 00:59:58 +01:00
Domingo Dirutigliano
8652f40235
nfproxy module writing: written part of the firegex lib, frontend refactored and improved, c++ improves 2025-02-20 19:51:28 +01:00
Domingo Dirutigliano
e5973947e6
test on settings API added + improves on nfproxy code including fail-open 2025-02-18 23:49:53 +01:00
Domingo Dirutigliano
5ef38df66a
regex checked by hyperscan directly with error messages 2025-02-18 21:20:19 +01:00
Domingo Dirutigliano
59652fc697
optional nfqueue fail-open option 2025-02-18 17:36:15 +01:00
Domingo Dirutigliano
ece058d533
firewall fix, preparing for minor release 2025-02-18 14:37:11 +01:00
Domingo Dirutigliano
63e7f73139
Re-structuring on new model 2025-02-14 01:04:29 +01:00
Domingo Dirutigliano
f3ba6dc716
more RESTful APIs 2025-02-11 19:11:30 +01:00
Domingo Dirutigliano
47d0254c37
Merge pull request #12 from Pwnzer0tt1/dev-cpp
Implementing new cpp nfqueue with hyperscan an stream regex assembling TCP packets with libtis
2025-02-05 12:29:54 +01:00
Domingo Dirutigliano
d2905cd462
drop stream on udp (due to missing method to keep stream) + ack on reload config 2025-02-05 01:48:36 +01:00
Domingo Dirutigliano
ec279a4fc5
pushed edits 2025-02-02 22:27:12 +01:00
Domingo Dirutigliano
2d8f19679f
nfqueue to hyperscan and stream match, removed proxyregex 2025-02-02 19:54:42 +01:00
Minei3oat
71d30196a4 Fix nullpointer issue 2024-12-09 21:57:28 +01:00
Minei3oat
6ba4fd3f93 Add metrics endpoint for Netfilter Regex 2024-11-29 01:08:06 +01:00
Domingo Dirutigliano
d64e0aa73c
add: filtering table of firewall + InterfaceSelector frontend fixes and improves 2024-10-19 18:39:42 +02:00
Domingo Dirutigliano
b11fa66909
refactoring: firewall model changed using ufw model (due to docker iussues) 2023-09-29 16:10:28 +02:00
Domingo Dirutigliano
71edfc29c4
Firewall refactor 2023-09-28 20:45:58 +02:00
Domingo Dirutigliano
0b0357bdaf
fix: better error messages 2023-09-26 21:16:03 +02:00
Domingo Dirutigliano
67f563cb43
fix: setting implmented + fixed and optimized rules adding 2023-09-26 17:24:04 +02:00
Domingo Dirutigliano
0c972baa9c
add(todo): additional setting to implement 2023-09-26 01:17:09 +02:00
Domingo Dirutigliano
7c324a90c2
add: graphic improvements 2023-09-25 20:09:26 +02:00
Domingo Dirutigliano
c0ea0eb331
add/fix: frontend and backend improves 2023-09-25 18:10:12 +02:00
Domingo Dirutigliano
4c4b80fd23
add: ipv6/ipv4 rules 2023-09-24 19:10:32 +02:00
Domingo Dirutigliano
4247dc181d
react-query + enable/disable firewall 2023-09-24 05:48:54 +02:00
Domingo Dirutigliano
ae8dbd9423
fix: backend optional types + firewall frontend initial code 2023-09-23 02:02:02 +02:00
Domingo Dirutigliano
e549d9cf2a
add: default policy 2023-09-23 00:23:01 +02:00
Domingo Dirutigliano
cdb4e6ac21
fix: action excluded from unique constraint 2023-09-22 20:58:35 +02:00
Domingo Dirutigliano
b2e0ecc005
mode in the unique index 2023-09-22 20:53:39 +02:00
Domingo Dirutigliano
7fda371dcb
adding firewall function to firegex! 2023-09-22 20:46:50 +02:00
DomySh
25d2cfd562 Port hijack changes and start writing frontend 2022-08-12 11:55:30 +00:00