-
Notifications
You must be signed in to change notification settings - Fork 2.8k
feat: support iptables firewall control #10881
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
…hain info loading
|
Adding the "do-not-merge/release-note-label-needed" label because no release-note block was detected, please follow our release note process to remove it. Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: The full list of commands accepted by this bot can be found here.
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
a322653 to
15cd00e
Compare
What this PR does / why we need it?
Debian系统不会预装ufw或者firewalld,并且有些云厂商系统与ufw可能会产生冲突。
直接控制Iptables来完成防火墙的管理,无需依赖ufw或firewalld。且防火墙启用和禁用不影响 docker 链条,不需要重启 docker
Summary of your change
添加 iptables 解析器,解析本地 iptables 规则
添加 iptables 出入防火墙组1PANEL_INPUT 1PANEL_BASIC 1PANEL_OUTPUT ,用户只能在这两个组上操作放行和拦截行为
启用防火墙组时,将1PANEL_链条分别放到 INPUT 和 OUTPUT 主链条中,禁用时移除出主链条
自行管理规则持久化存储/opt/1panel/firewall/1panel_basic.rules
前端适配
Please indicate you've done the following: