Ecosyste.ms: Issues

An open API service for providing issue and pull request metadata for open source projects.

GitHub / metal-stack/metal-networker issues and pull requests

#114 - Validate nftables rule files in CI and fix IPv6

Pull Request - State: open - Opened by mwindower 14 days ago - 3 comments

#113 - Update to go-1.23 and go modules

Pull Request - State: closed - Opened by majst01 3 months ago

#112 - Allow ipv6 firewall rules

Pull Request - State: closed - Opened by majst01 4 months ago

#110 - Support IPv6

Pull Request - State: closed - Opened by majst01 5 months ago

#109 - Update testmatrix with ubuntu-24.04 and frr-10

Pull Request - State: closed - Opened by majst01 7 months ago

#108 - Activate allow-reserved-ranges for peering via 127.0.0.0/8

Pull Request - State: closed - Opened by robertvolkmann 7 months ago - 2 comments

#107 - randomize source ports during masquerading

Pull Request - State: closed - Opened by mwennrich 7 months ago

#106 - Rename set public_dns_servers to proxy_dns_servers

Pull Request - State: closed - Opened by vknabel 7 months ago

#105 - Adjustable dns addrs

Pull Request - State: closed - Opened by vknabel 7 months ago - 1 comment

#104 - Actually use release drafter.

Pull Request - State: closed - Opened by Gerrit91 10 months ago

#103 - Firewall rules

Pull Request - State: closed - Opened by majst01 10 months ago

#102 - Migrate to slog

Pull Request - State: closed - Opened by majst01 10 months ago

#101 - Drop forward for the metal-case

Pull Request - State: closed - Opened by majst01 10 months ago

#100 - Avoid jumbo frames as it produces issues with traffic flow.

Pull Request - State: closed - Opened by Gerrit91 about 1 year ago - 1 comment

#99 - Add a flowtable to speed up forwarding

Pull Request - State: open - Opened by majst01 over 1 year ago
Labels: do not merge

#98 - Firewall Precedence

Pull Request - State: open - Opened by mwindower over 1 year ago - 3 comments

#97 - Configurable precedence of firewalls

Issue - State: open - Opened by mwindower over 1 year ago

#96 - No duplicate ip detection on firewalls

Pull Request - State: closed - Opened by majst01 over 1 year ago

#95 - For whatever reason, systemd-networkd does not bring up interfaces anymore

Pull Request - State: closed - Opened by majst01 over 1 year ago - 1 comment

#94 - Wider BGP listen range to get rid of hard coded CIDR

Pull Request - State: closed - Opened by majst01 over 1 year ago

#93 - enlarge bgp listen range

Issue - State: closed - Opened by majst01 over 1 year ago

#92 - Reload Nftables when config is changed

Pull Request - State: closed - Opened by GrigoriyMikhalkin almost 2 years ago

#91 - export mustParseTPL for use with firewall-controller

Pull Request - State: closed - Opened by majst01 almost 2 years ago

#90 - fix tailscaled service

Pull Request - State: closed - Opened by GrigoriyMikhalkin about 2 years ago

#89 - add envvar to disable logging to log.tailscale.io

Pull Request - State: closed - Opened by GrigoriyMikhalkin about 2 years ago

#88 - Disable tailscaled logging

Issue - State: closed - Opened by majst01 about 2 years ago - 1 comment

#87 - Get rid of old location of nftables-exporter

Pull Request - State: closed - Opened by majst01 about 2 years ago

#86 - Refactor

Pull Request - State: closed - Opened by majst01 about 2 years ago

#85 - Set machine hostname for VPN

Pull Request - State: closed - Opened by GrigoriyMikhalkin about 2 years ago

#84 - Vpn set machine hostname

Pull Request - State: closed - Opened by GrigoriyMikhalkin about 2 years ago

#83 - Update all deps, build with go-1.19

Pull Request - State: closed - Opened by majst01 about 2 years ago

#82 - set machine tag for a tailscale node

Pull Request - State: closed - Opened by GrigoriyMikhalkin about 2 years ago

#81 - Tailscale setup for firewall

Pull Request - State: closed - Opened by GrigoriyMikhalkin over 2 years ago - 1 comment

#80 - Setup VPN connection on machine

Issue - State: closed - Opened by GrigoriyMikhalkin over 2 years ago - 1 comment

#79 - all netaddr functionality is now part of go-1.18

Pull Request - State: closed - Opened by majst01 over 2 years ago

#78 - If VPN enabled allow SSH access only via it

Issue - State: closed - Opened by GrigoriyMikhalkin over 2 years ago - 1 comment

#77 - Remove interface Applier

Pull Request - State: closed - Opened by robertvolkmann over 2 years ago - 5 comments

#76 - neighbors are not relevant here

Pull Request - State: closed - Opened by majst01 over 2 years ago - 1 comment

#75 - Raise keepalive and hold timers to be more robust

Pull Request - State: closed - Opened by majst01 over 2 years ago - 2 comments

#74 - Build with go-1.18, test debian 11, fix validate condition

Pull Request - State: closed - Opened by majst01 over 2 years ago

#73 - Migrating to go1.18

Issue - State: closed - Opened by GrigoriyMikhalkin over 2 years ago - 1 comment

#72 - Remove unnecessary bgp listen since we talk to node ip from metallb

Issue - State: closed - Opened by majst01 almost 3 years ago - 2 comments

#71 - Further simplification

Pull Request - State: closed - Opened by majst01 almost 3 years ago - 1 comment

#70 - Enable release drafter

Pull Request - State: closed - Opened by majst01 almost 3 years ago

#69 - Fix release

Pull Request - State: closed - Opened by majst01 almost 3 years ago

#68 - update deps, build with go 1.17

Pull Request - State: closed - Opened by majst01 almost 3 years ago

#67 - Raise keepalive and hold time for local peers

Issue - State: closed - Opened by majst01 about 3 years ago - 1 comment

#66 - Enable frr-8 and use upstream debian packages

Pull Request - State: closed - Opened by majst01 over 3 years ago

#65 - Public DNS address filter added to Nftables

Pull Request - State: closed - Opened by GrigoriyMikhalkin over 3 years ago

#64 - added nftables reloader

Pull Request - State: closed - Opened by GrigoriyMikhalkin over 3 years ago

#63 - Dependency updates

Pull Request - State: closed - Opened by majst01 over 3 years ago

#62 - Restrict imported prefixes by source VRF

Pull Request - State: closed - Opened by mwindower over 3 years ago - 2 comments

#60 - Suricata ips configurator

Pull Request - State: open - Opened by GrigoriyMikhalkin over 3 years ago

#59 - disable ids logs by default

Pull Request - State: open - Opened by GrigoriyMikhalkin over 3 years ago

#58 - export GetDefaultRouteNetwork

Pull Request - State: closed - Opened by GrigoriyMikhalkin over 3 years ago

#57 - Dns proxy support

Pull Request - State: closed - Opened by GrigoriyMikhalkin over 3 years ago

#56 - updated nftables and frr for dns proxy support

Pull Request - State: closed - Opened by GrigoriyMikhalkin over 3 years ago

#55 - Use auto-seq-number for default route

Pull Request - State: closed - Opened by mwindower over 3 years ago

#54 - Hash on prefix

Pull Request - State: closed - Opened by mwindower over 3 years ago

#53 - Add exit-vrf statements in frr.conf

Pull Request - State: closed - Opened by mwindower over 3 years ago

#52 - Warnings during FRR reload

Issue - State: closed - Opened by mwindower over 3 years ago

#51 - New seed value for ip prefix lists

Pull Request - State: closed - Opened by mwindower over 3 years ago - 1 comment

#50 - Default route gets lost on reload of v0.6.3

Issue - State: closed - Opened by mwindower over 3 years ago - 1 comment

#49 - Leak external host-routes to private network

Pull Request - State: closed - Opened by mwennrich over 3 years ago - 2 comments

#47 - Import external network prefixes to shared DMZ networks

Pull Request - State: closed - Opened by mwindower over 3 years ago - 1 comment

#46 - Import external network prefixes to shared DMZ networks

Issue - State: closed - Opened by mwindower over 3 years ago

#45 - Prepare for usage as library

Pull Request - State: closed - Opened by mwindower over 3 years ago

#44 - replace statik with go:embed

Pull Request - State: closed - Opened by majst01 over 3 years ago

#43 - Improve on routemap testability and provide dmz support

Pull Request - State: closed - Opened by mwindower almost 4 years ago

#42 - Ipv6

Pull Request - State: closed - Opened by majst01 almost 4 years ago - 1 comment

#41 - IPv6 Support

Issue - State: closed - Opened by majst01 almost 4 years ago - 5 comments

#40 - Configurable TCP max seg size

Issue - State: open - Opened by mwindower almost 4 years ago - 2 comments

#39 - add MTUBytes=9000 to bridge netdev

Pull Request - State: closed - Opened by mwennrich about 4 years ago

#38 - Update metal-go and metal-lib

Pull Request - State: closed - Opened by majst01 about 4 years ago

#37 - Disable nht group tracking with zebra

Pull Request - State: closed - Opened by mwindower about 4 years ago - 1 comment

#36 - Use ghcr.io

Pull Request - State: closed - Opened by mwindower about 4 years ago

#35 - Adapt to new firewall-controller

Pull Request - State: closed - Opened by mwindower about 4 years ago

#34 - Use new actions releases

Pull Request - State: closed - Opened by majst01 about 4 years ago

#33 - Updating common repository files

Pull Request - State: closed - Opened by Gerrit91 about 4 years ago

#32 - Support Shared Private Networks

Pull Request - State: closed - Opened by mwindower about 4 years ago - 2 comments

#31 - disable promiscuous interfaces

Pull Request - State: closed - Opened by mwennrich about 4 years ago - 1 comment

#30 - Leak the default route and private routes to the default VRF of firewalls

Issue - State: open - Opened by mwindower about 4 years ago - 1 comment

#29 - Use vlanXXX interface in suricata

Pull Request - State: closed - Opened by mwennrich about 4 years ago

#28 - evebox support

Pull Request - State: open - Opened by majst01 over 4 years ago

#27 - Switch to systemd networkd for all interfaces

Pull Request - State: closed - Opened by mwindower over 4 years ago - 3 comments

#26 - Smaller interfaces

Pull Request - State: closed - Opened by majst01 over 4 years ago

#25 - tell firewall-controller the private vrf id which is required for bet…

Pull Request - State: closed - Opened by majst01 over 4 years ago

#24 - nftables rules must not start with a # comment

Issue - State: closed - Opened by majst01 over 4 years ago

#23 - WIP: Evebox Agent support

Pull Request - State: closed - Opened by majst01 over 4 years ago - 2 comments

#22 - Expose firewall metrics

Pull Request - State: closed - Opened by mwindower over 4 years ago

#21 - Reactivate nftables exporter

Pull Request - State: closed - Opened by mwindower over 4 years ago

#20 - use new firewall-controller, changed name

Pull Request - State: closed - Opened by mwindower over 4 years ago

#19 - fixate path to surricate command socket to avoid differences between …

Pull Request - State: closed - Opened by majst01 over 4 years ago

#18 - Several improvements

Pull Request - State: closed - Opened by mwindower over 4 years ago

#17 - Remove nftables_exporter as it is now unused

Pull Request - State: closed - Opened by mwindower over 4 years ago

#16 - /etc/hosts must have a newline at the end to be parsable

Pull Request - State: closed - Opened by majst01 over 4 years ago

#15 - open command socket, log eve logs to unix-stream

Pull Request - State: closed - Opened by majst01 over 4 years ago