Commit Graph

71 Commits

Author SHA1 Message Date
Domingo Dirutigliano
440b7c91ec
docs and code minor fixing 2026-09-18 23:01:11 +02:00
Domingo Dirutigliano
4a87bf2184
fixes from main 2026-09-18 15:10:08 +02:00
Domingo Dirutigliano
4476da02bd
QUIC support and bug fixes 2026-09-18 09:34:44 +02:00
Domingo Dirutigliano
e491a14899
improved addr/int selection UI + change llhttp managment 2026-09-13 15:54:56 +02:00
Domingo Dirutigliano
9d2a4dc4bf
additional improves on UDP 2026-09-11 18:53:41 +02:00
Domingo Dirutigliano
a26bda5161
fixup packet been dropped in the first connection 2026-09-10 09:24:47 +02:00
Domingo Dirutigliano
9832e449c6
Initial commit for future 5.0.0 version: new UI, proxies and managment 2026-09-10 08:51:08 +02:00
Domingo Dirutigliano
c37d2b31e8
graphics and TLS feature total refactoring 2026-07-23 13:39:01 +02:00
Sogoss
75c54f0155 Add transparent TLS proxying and certificate management for NFProxy and NFRegex
- Add Nginx stream proxy module for transparent TLS termination in NFProxy and NFRegex
- Add backend routes and SQLite schema for certificate management (upload, view, delete)
- Implement DNAT nftables redirection rules for deterministic TLS ports
- Add frontend React components (TLSConfigModal, TLSServiceFields) for certificate configuration
- Update Dockerfile and docker-entrypoint.sh to support Nginx stream module and sysctl forwarding
2026-07-20 12:25:30 +02:00
Domingo Dirutigliano
d7f6eb7524
using name and id as pk for PyFilter when updating stats 2025-06-13 13:33:13 +02:00
Domingo Dirutigliano
ed85aa5430
changing prio on nf chains 2025-04-12 21:44:02 +02:00
Domingo Dirutigliano
d0b2c67554
Revert "using also bridge table on network hooking"
This reverts commit 33b22a174c.
2025-04-12 20:32:52 +02:00
Domingo Dirutigliano
33b22a174c
using also bridge table on network hooking 2025-04-12 16:51:42 +02:00
Domingo Dirutigliano
d4b2b6c72d
niceness on firegex process 2025-03-26 22:25:09 +01:00
Domingo Dirutigliano
9eb7d5461f
added checks and changed prio 2025-03-07 18:16:23 +01:00
Domingo Dirutigliano
c90d817ad4
cli command with proxy simulation 2025-03-04 15:51:46 +01:00
Domingo Dirutigliano
fde3ee57a5
crash and unexpected behaviours fix 2025-03-03 23:55:24 +01:00
Domingo Dirutigliano
072745cc06
code push 2025-03-03 20:25:36 +01:00
Domingo Dirutigliano
8ae533e8f7
push: code changes x2 2025-02-28 21:14:09 +01:00
Domingo Dirutigliano
6a11dd0d16
push: code changes 2025-02-25 23:53:04 +01:00
Domingo Dirutigliano
8652f40235
nfproxy module writing: written part of the firegex lib, frontend refactored and improved, c++ improves 2025-02-20 19:51:28 +01:00
Domingo Dirutigliano
e5973947e6
test on settings API added + improves on nfproxy code including fail-open 2025-02-18 23:49:53 +01:00
Domingo Dirutigliano
5ef38df66a
regex checked by hyperscan directly with error messages 2025-02-18 21:20:19 +01:00
Domingo Dirutigliano
59652fc697
optional nfqueue fail-open option 2025-02-18 17:36:15 +01:00
Domingo Dirutigliano
7f7e3353ec
User-Space thread balancing + refactoring 2025-02-16 16:33:34 +01:00
Domingo Dirutigliano
63e7f73139
Re-structuring on new model 2025-02-14 01:04:29 +01:00
Domingo Dirutigliano
2fb77a348f
removed fastapi_socketio + general improves 2025-02-12 01:16:10 +01:00
Domingo Dirutigliano
f3ba6dc716
more RESTful APIs 2025-02-11 19:11:30 +01:00
Domingo Dirutigliano
49fea55bc7
c++ refactoring, init pypi projects, gh action added 2025-02-09 22:43:54 +01:00
Domingo Dirutigliano
d2905cd462
drop stream on udp (due to missing method to keep stream) + ack on reload config 2025-02-05 01:48:36 +01:00
Domingo Dirutigliano
9033145ccf
tracking input and output with mark 2025-02-05 01:07:10 +01:00
Domingo Dirutigliano
44d72dfff9
improves on the nfregex binary x3 2025-02-04 21:09:03 +01:00
Domingo Dirutigliano
3ffccdddfb
improves on the nfregex binary 2025-02-03 02:04:10 +01:00
Domingo Dirutigliano
ec279a4fc5
pushed edits 2025-02-02 22:27:12 +01:00
Domingo Dirutigliano
2d8f19679f
nfqueue to hyperscan and stream match, removed proxyregex 2025-02-02 19:54:42 +01:00
Domingo Dirutigliano
3de629ebd5
fix: ACCEPT pakcets on firewall disable on default policy 2024-10-20 11:47:21 +02:00
Domingo Dirutigliano
d64e0aa73c
add: filtering table of firewall + InterfaceSelector frontend fixes and improves 2024-10-19 18:39:42 +02:00
Domingo Dirutigliano
11ec3a16a1
FATAL:fixed encoding bug for nfregex that was blocking this function! 2024-04-09 03:52:10 +02:00
Domingo Dirutigliano
c044383fd0
add: dhcp on firewall 2023-10-12 12:53:44 +02:00
Domingo Dirutigliano
e96c38b186
fix: settings update fixed + packet invalid drop 2023-10-01 02:01:47 +02:00
Domingo Dirutigliano
b11fa66909
refactoring: firewall model changed using ufw model (due to docker iussues) 2023-09-29 16:10:28 +02:00
Domingo Dirutigliano
2657428d6e
fix: allow established also on fwd table 2023-09-29 00:20:00 +02:00
Domingo Dirutigliano
71edfc29c4
Firewall refactor 2023-09-28 20:45:58 +02:00
Domingo Dirutigliano
67f563cb43
fix: setting implmented + fixed and optimized rules adding 2023-09-26 17:24:04 +02:00
Domingo Dirutigliano
0c972baa9c
add(todo): additional setting to implement 2023-09-26 01:17:09 +02:00
Domingo Dirutigliano
4c4b80fd23
add: ipv6/ipv4 rules 2023-09-24 19:10:32 +02:00
Domingo Dirutigliano
4247dc181d
react-query + enable/disable firewall 2023-09-24 05:48:54 +02:00
Domingo Dirutigliano
e549d9cf2a
add: default policy 2023-09-23 00:23:01 +02:00
Domingo Dirutigliano
572cb102d7
fix reject action on output 2023-09-22 20:56:58 +02:00
Domingo Dirutigliano
7fda371dcb
adding firewall function to firegex! 2023-09-22 20:46:50 +02:00