Michael Stapelberg f835cdf1d6 netconfig: do not re-create nftables ruleset from scratch ...

The current behavior stomps on the rules that programs like
podman or tailscale set up for port forwarding.

With this change, we split port forwardings into a separate chain,
which allows us to create the ruleset once at startup and then only
update the port forwardings specifically (the only dynamic part
of router7’s nftables ruleset).

2024-05-09 10:06:23 +02:00

..

netconfig.go

netconfig: do not re-create nftables ruleset from scratch

2024-05-09 10:06:23 +02:00

wireguard.go

wireguard: switch to wgctrl package

2020-02-16 00:15:23 +01:00