The node-packet-filter seat serves rules, reload and remove (hq ADR 0169) #212

2026-10-02T11:28:11Z

mesh-admin commented

2026-10-02 11:28:11 +00:00

The firewall seat's three verbs, as the contract every holder implements: rules (the filter as enforced, nftables and legacy), reload (the mesh's own filter from its file), remove (one rule set the mesh did not write, named as the host reports it under ADR 0168; refuses the mesh's tables, the runtime's own chains, a built-in chain and an active found firewall's). A running mesh widens its seat row at the next controller start. Seat, claim and verb tests pass. Note: three resolver tests in internal/catalogue fail on main already (TestTheResolver…), unrelated to this branch.

The firewall seat's three verbs, as the contract every holder implements: `rules` (the filter as enforced, nftables and legacy), `reload` (the mesh's own filter from its file), `remove` (one rule set the mesh did not write, named as the host reports it under ADR 0168; refuses the mesh's tables, the runtime's own chains, a built-in chain and an active found firewall's). A running mesh widens its seat row at the next controller start. Seat, claim and verb tests pass. Note: three resolver tests in `internal/catalogue` fail on main already (`TestTheResolver…`), unrelated to this branch.

mesh-admin added 1 commit 2026-10-02 11:28:11 +00:00

The node-packet-filter seat serves rules, reload and remove (hq ADR 0169) 550e4c6acb

What a person asks a machine's packet filter whatever filter answers: the
rules as enforced, reload the mesh's own, remove one rule set the mesh did
not write — named as the host reports it under ADR 0168. Every holder serves
all three; a running mesh widens its seat row at the next controller start.

mesh-admin merged commit 30d548a762 into main

2026-10-02 11:28:58 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: novox/mesh-controller#212