mirror of
https://github.com/netbirdio/netbird.git
synced 2026-04-18 00:06:38 +00:00
33 lines
790 B
Go
33 lines
790 B
Go
//go:build !linux || android
|
|
|
|
package firewall
|
|
|
|
import (
|
|
"fmt"
|
|
"runtime"
|
|
|
|
log "github.com/sirupsen/logrus"
|
|
|
|
"github.com/netbirdio/netbird/client/firewall/interface"
|
|
"github.com/netbirdio/netbird/client/firewall/uspfilter"
|
|
"github.com/netbirdio/netbird/client/internal/statemanager"
|
|
)
|
|
|
|
// NewFirewall creates a firewall manager instance
|
|
func NewFirewall(iface IFaceMapper, _ *statemanager.Manager) (_interface.Firewall, error) {
|
|
if !iface.IsUserspaceBind() {
|
|
return nil, fmt.Errorf("not implemented for this OS: %s", runtime.GOOS)
|
|
}
|
|
|
|
// use userspace packet filtering firewall
|
|
fm, err := uspfilter.Create(iface)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
err = fm.AllowNetbird()
|
|
if err != nil {
|
|
log.Warnf("failed to allow netbird interface traffic: %v", err)
|
|
}
|
|
return fm, nil
|
|
}
|