sendnrw/netbird
2
0
Fork 0
mirror of https://github.com/netbirdio/netbird.git synced 2026-04-24 19:26:39 +00:00
Code Issues Packages Projects Releases Wiki Activity

[client] Use native firewall for peer ACLs in userspace WireGuard mode (#5668)

Browse Source
This commit is contained in:
Viktor Liu
2026-04-10 09:12:13 +08:00
committed by GitHub
parent ee343d5d77
commit d2cdc0efec
9 changed files with 58 additions and 45 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
client/firewall/iface.go
View File

@@ -7,6 +7,12 @@ import (
"github.com/netbirdio/netbird/client/iface/wgaddr"
)
// EnvForceUserspaceFirewall forces the use of the userspace packet filter even when
// native iptables/nftables is available. This only applies when the WireGuard interface
// runs in userspace mode. When set, peer ACLs are handled by USPFilter instead of
// kernel netfilter rules.
const EnvForceUserspaceFirewall = "NB_FORCE_USERSPACE_FIREWALL"
// IFaceMapper defines subset methods of interface required for manager
type IFaceMapper interface {
Name() string