denozord/EvoFirewall

Fork 0

Files

T

DenozordecandCursor ebadf70e2b

Build and Push EvoFirewall Docker Image / build-and-push (push) Failing after 25s

Details

Build and Push EvoFirewall Docker Image / create-release (push) Skipped

Details

feat: реализовать EvoFirewall V1 control plane

API, UI, Linux/MikroTik agents, IP lists, политики, stats, CI и интеграция с auth-portal/EvoBGP.

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-07-20 19:50:54 +07:00

792 B

Raw Blame History

Agents

Linux

curl -fsSL https://<cp>/v1/agent/install.sh | \
  EVOFW_CP_URL=https://<cp> \
  EVOFW_SEED=<seed> \
  EVOFW_CLIENT_NAME="web-01" \
  bash

Файлы: /etc/evofw/agent.conf, /usr/local/sbin/evofw-firewall.sh, timer evofw-firewall.timer (default 1min).

Backend auto-detect: nft → ipset → iptables.

Whitelist: nft chain policy drop + allow set. Blacklist: policy accept + deny set.

MikroTik

Скачайте /v1/agent/mikrotik-install.rsc, задайте globals EvofwCpUrl, EvofwSeed, EvofwName, import. Scheduler каждую минуту тянет policy. Настройте filter на address-list EVOFW_DENY / EVOFW_ALLOW.

Force sync

sudo rm -f /var/lib/evofw/last_hash
sudo /usr/local/sbin/evofw-firewall.sh

792 B Raw Blame History

Agents

Linux

MikroTik

Force sync

792 B

Raw Blame History