mesh-host

577 Commits 7 Branches 0 Tags

3 Commits

Include renames

Author	SHA1	Message	Date
jochen	cb7b71dcc5	Report the networks the outward links are on, for the local network (issue 154, ADR 0340) mesh/merge-gate head cb7b71dcc568 merged into trunk 12bc6a56a38a — pass: builds mesh-host → ace, g14, novox, shanks; no bus step; every machine composes wi… Details mesh/repo-check head cb7b71dcc568 merged into trunk 12bc6a56a38a — pass: its merge-check.sh passed Details mesh/delivery delivered Details mesh/delivery-group group fix/154-local-network delivered: every member is delivered Details A port reached from local-network is admitted from the private networks the machine is attached to, and only the machine can say which those are. Every network on a link facing outside is said among its facts, and a change is said at the next reconcile.	2026-10-13 11:20:21 +02:00
jschoubben	cbdbf6b7d3	Every physical link faces outside, up or down The filter accepts what does not arrive on a link the machine names as outward, and the host named only links carrying a default route. An unplugged wired port was left unfiltered for whenever it was plugged in (novox/hq issue 197). A link backed by a physical device is now named whether or not it is up.	2026-10-02 11:53:53 +02:00
jschoubben	b0d11c2439	A machine says which of its links face outside The filter blocks everything passing through the machine and then allows the machine's own containers back by naming the address ranges they sit on — two ranges fixed in the control plane and the rest typed after a flip had already cut a workstation off. A range describes one machine and goes stale in silence. Read the links carrying a default route instead, from /proc rather than by asking a program, and report them on every apply. A machine with no route off itself reports nothing, and the mesh composes no filter for it rather than writing a rule around a link with no name. novox/hq ADR 0140. The control plane does not read this yet.	2026-09-28 23:37:06 +02:00

Author

SHA1

Message

Date

jochen

cb7b71dcc5

Report the networks the outward links are on, for the local network (issue 154, ADR 0340)

mesh/merge-gate head cb7b71dcc568 merged into trunk 12bc6a56a38a — pass: builds mesh-host → ace, g14, novox, shanks; no bus step; every machine composes wi…

Details

mesh/repo-check head cb7b71dcc568 merged into trunk 12bc6a56a38a — pass: its merge-check.sh passed

Details

mesh/delivery delivered

Details

mesh/delivery-group group fix/154-local-network delivered: every member is delivered

Details

A port reached from local-network is admitted from the private networks the machine is attached to, and only the machine can say which those are. Every network on a link facing outside is said among its facts, and a change is said at the next reconcile.

2026-10-13 11:20:21 +02:00

jschoubben

cbdbf6b7d3

Every physical link faces outside, up or down

The filter accepts what does not arrive on a link the machine names as
outward, and the host named only links carrying a default route. An
unplugged wired port was left unfiltered for whenever it was plugged in
(novox/hq issue 197). A link backed by a physical device is now named
whether or not it is up.

2026-10-02 11:53:53 +02:00

jschoubben

b0d11c2439

A machine says which of its links face outside

The filter blocks everything passing through the machine and then allows the
machine's own containers back by naming the address ranges they sit on — two
ranges fixed in the control plane and the rest typed after a flip had already
cut a workstation off. A range describes one machine and goes stale in silence.

Read the links carrying a default route instead, from /proc rather than by
asking a program, and report them on every apply. A machine with no route off
itself reports nothing, and the mesh composes no filter for it rather than
writing a rule around a link with no name.

novox/hq ADR 0140. The control plane does not read this yet.

2026-09-28 23:37:06 +02:00