2 Commits

Author	SHA1	Message	Date
Andrey Smirnov	9a85217412	feat: improve nftables backend ... Many changes to the nftables backend which will be used in the follow-up PR with #4421. 1. Add support for chain policy: drop/accept. 2. Properly handle match on all IPs in the set (`0.0.0.0/0` like). 3. Implement conntrack state matching. 4. Implement multiple ifname matching in a single rule. 5. Implement anonymous counters. Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>	2023-11-29 21:22:47 +04:00
Andrey Smirnov	e46e6a312f	feat: implement nftables backend ... Implement initial set of backend controllers/resources to handle nftables chains/rules etc. Replace the KubeSpan nftables operations with controller-based. See #4421 Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>	2023-11-27 21:14:15 +04:00