Adoption mode: guards, and a filter unit that never flushes the ruleset (hq ADR 0100, 0103) #38

Merged

jschoubben merged 3 commits from feat/adoption-mode into main 2026-09-22 19:01:56 +00:00

Conversation 0 Commits 3 Files Changed 4

+28 -3

3 Commits

Author	SHA1	Message	Date
jschoubben	90104d0818	Reload the filter on a rule change rather than restart it, so the node is never unfiltered in between (hq ADR 0102)	2026-09-22 19:47:43 +02:00
jschoubben	84012fab2e	Make the stock nftables unit's stop delete only the mesh's table on nodes that still have it enabled (hq ADR 0100)	2026-09-22 18:06:15 +02:00
jschoubben	0c37d7389d	Guard the store and management ports on adopted nodes, and load the filter through a unit that never flushes the ruleset (hq ADR 0100)	2026-09-22 17:32:32 +02:00