[PR #2705] [client] Improve route acl #3466

Open
opened 2025-11-20 08:06:07 -05:00 by saavagebueno · 0 comments
Owner

Original Pull Request: https://github.com/netbirdio/netbird/pull/2705

State: closed
Merged: Yes


Describe your changes

  • Updates nftables library to v0.2.0
  • Marks traffic that was originally destined for local and applies the input rules in the forward chain if said traffic was redirected (e.g. by Docker)
  • Adds nft rules to internal map only if flush was successful
  • Improves error message if handle is 0 (= not found or hasn't been refreshed)
  • Adds debug logging when route rules are added
  • Replaces nftables userdata (rule ID) with rule hash

Checklist

  • Is it a bug fix
  • Is a typo/documentation fix
  • Is a feature enhancement
  • It is a refactor
  • Created tests that fail without the change (if possible)
  • Extended the README / documentation, if necessary
**Original Pull Request:** https://github.com/netbirdio/netbird/pull/2705 **State:** closed **Merged:** Yes --- ## Describe your changes - Updates nftables library to v0.2.0 - Marks traffic that was originally destined for local and applies the input rules in the forward chain if said traffic was redirected (e.g. by Docker) - Adds nft rules to internal map only if flush was successful - Improves error message if handle is 0 (= not found or hasn't been refreshed) - Adds debug logging when route rules are added - Replaces nftables userdata (rule ID) with rule hash ## Issue ticket number and link ### Checklist - [x] Is it a bug fix - [ ] Is a typo/documentation fix - [ ] Is a feature enhancement - [ ] It is a refactor - [ ] Created tests that fail without the change (if possible) - [ ] Extended the README / documentation, if necessary
saavagebueno added the pull-request label 2025-11-20 08:06:07 -05:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: SVI/netbird#3466