denozord/EvoFirewall

Fork 0

Files

T

Denozordec 1f7273f38d

Build and Push EvoFirewall Docker Image / build-and-push (push) Successful in 1m53s

Details

Build and Push EvoFirewall Docker Image / create-release (push) Skipped

Details

feat(api): unify policy handling with default action updates

- Updated `evofw-firewall.sh` and related scripts to replace `policy_mode` with `default_action`, enhancing clarity and consistency in policy management.
- Adjusted agent routes and evaluation logic to accommodate the new default action structure, ensuring backward compatibility with legacy modes.
- Enhanced tests to validate the new default action behavior and its integration within the agent policy framework.
- Refactored related components in the web interface to align with the updated policy handling, improving user experience and reducing confusion around policy modes.

2026-07-23 10:52:28 +07:00

1.1 KiB

Raw Blame History

Интеграция EvoBGP → EvoFirewall

EvoFirewall использует EvoBGP как источник префиксов для списков типа evobgp_community.

Настройка

В UI Settings или settings table:

evobgp_api_url — base URL EvoBGP API
evobgp_api_token — API key (viewer+ / bgp:directories:read)

Refresh списка

При refresh списка evobgp_community:

GET {api}/v1/communities/{id}/prefixes?limit=5000
Ответ: { items: [{ prefix }], prefixes: string[], has_more, next_cursor }
Entries заменяются; generation агентов с правилами на этот list бампится

Autocomplete в UI

GET /api/v1/integrations/evobgp/communities — proxy к EvoBGP GET /v1/communities?limit=200 (нужны settings выше).

Список

Создайте IP list type evobgp_community с config.community_id. Cron / кнопка Refresh обновляет entries.

Firewall-подсистема в EvoBGP удалена (hard cutover) — клиенты переустанавливаются на EvoFirewall agents.

1.1 KiB Raw Blame History Unescape Escape