Skip to content

Conversation

@HynoR
Copy link
Contributor

@HynoR HynoR commented Oct 30, 2025

草稿 Feature,仍然需要讨论和测试

What this PR does / why we need it?

Debian系统不会预装ufw或者firewalld,并且有些云厂商系统与ufw可能会产生冲突。
直接控制Iptables来完成防火墙的管理,无需依赖ufw或firewalld。且防火墙启用和禁用不影响 docker 链条,不需要重启 docker

Summary of your change

  • 添加 iptables 解析器,解析本地 iptables 规则
  • 添加 iptables 出入防火墙组1PANEL_INPUT 1PANEL_OUTPUT ,用户只能在这两个组上操作放行和拦截行为
  • 启用防火墙组时,将1PANEL_链条分别放到 INPUT 和 OUTPUT 主链条中,禁用时移除出主链条
  • 前端适配
image

Please indicate you've done the following:

  • Made sure tests are passing and test coverage is added if needed.
  • Made sure commit message follow the rule of Conventional Commits specification.
  • Considered the docs impact and opened a new docs issue or PR with docs changes if needed.

@f2c-ci-robot
Copy link

f2c-ci-robot bot commented Oct 30, 2025

Adding the "do-not-merge/release-note-label-needed" label because no release-note block was detected, please follow our release note process to remove it.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@f2c-ci-robot
Copy link

f2c-ci-robot bot commented Oct 30, 2025

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign wanghe-fit2cloud for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@HynoR HynoR changed the title [Draft] feat: support iptables control [Draft] feat: support iptables firewall control Oct 30, 2025
@HynoR
Copy link
Contributor Author

HynoR commented Nov 4, 2025

基本在自己的纯净 debian 上(无 ufw/ firewalld)测试好了当前的所有功能,前端还在想怎么排版

@HynoR HynoR changed the title [Draft] feat: support iptables firewall control feat: support iptables firewall control Nov 4, 2025
@HynoR HynoR marked this pull request as ready for review November 5, 2025 02:37
@HynoR HynoR changed the title feat: support iptables firewall control [Draft] feat: support iptables firewall control Nov 5, 2025
@HynoR HynoR changed the title [Draft] feat: support iptables firewall control feat: support iptables firewall control Nov 7, 2025
@HynoR
Copy link
Contributor Author

HynoR commented Nov 7, 2025

草稿迁移到 #10881

@HynoR HynoR closed this Nov 7, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant