Every physical link faces outside, up or down (hq issue 197) #66

2026-10-02T09:53:54Z

jschoubben commented

2026-10-02 09:53:54 +00:00

outward.Links named only links carrying a default route, so an unplugged wired port was not in the filter's guarded set and would be accepted wholesale once plugged in. It now also names every interface with a physical device behind it (/sys/class/net//device), up or down; bridges, veths, the tunnel and loopback have none. Links takes the sysfs root as a parameter like /proc/net; tests use a fixture. go test ./... passes.

outward.Links named only links carrying a default route, so an unplugged wired port was not in the filter's guarded set and would be accepted wholesale once plugged in. It now also names every interface with a physical device behind it (/sys/class/net/<if>/device), up or down; bridges, veths, the tunnel and loopback have none. Links takes the sysfs root as a parameter like /proc/net; tests use a fixture. go test ./... passes.

jschoubben added 1 commit 2026-10-02 09:53:54 +00:00

Every physical link faces outside, up or down cbdbf6b7d3

The filter accepts what does not arrive on a link the machine names as
outward, and the host named only links carrying a default route. An
unplugged wired port was left unfiltered for whenever it was plugged in
(novox/hq issue 197). A link backed by a physical device is now named
whether or not it is up.

mesh-admin merged commit ee2359f29f into main

2026-10-02 09:54:07 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: novox/mesh-host#66