apps/openlan
1
0
Fork 0
mirror of https://github.com/luscis/openlan.git synced 2025-11-02 13:24:02 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

fea: support age timer for knock

Browse Source
This commit is contained in:
Daniel Ding
2024-01-02 15:53:19 +08:00
parent 1af91f2f65
commit 77fa149380
8 changed files with 156 additions and 56 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
pkg/switch/network.go
View File

@@ -226,8 +226,14 @@ func (w *WorkerImpl) Start(v api.Switcher) {
if !(w.vpn == nil || w.ztrust == nil) {
w.ztrust.Start()
fire.Mangle.Pre.AddRule(cn.IpRule{
Input: vpn.Device,
Jump: w.ztrust.Chain(),
Input: vpn.Device,
CtState: "RELATED,ESTABLISHED",
Comment: "Forwarding Accpted",
})
fire.Mangle.Pre.AddRule(cn.IpRule{
Input: vpn.Device,
Jump: w.ztrust.Chain(),
Comment: "Goto Zero Trust",
})
}
fire.Start()