mirror of
https://github.com/gravitl/netmaker.git
synced 2025-09-10 07:05:28 +08:00
add all networks rules
This commit is contained in:
parent
98e313242b
commit
0216c596cb
1 changed files with 18 additions and 0 deletions
|
@ -85,6 +85,24 @@ func GetPeerUpdateForHost(network string, host *models.Host, allNodes []models.N
|
||||||
HostNetworkInfo: models.HostInfoMap{},
|
HostNetworkInfo: models.HostInfoMap{},
|
||||||
EndpointDetection: servercfg.IsEndpointDetectionEnabled(),
|
EndpointDetection: servercfg.IsEndpointDetectionEnabled(),
|
||||||
}
|
}
|
||||||
|
defer func() {
|
||||||
|
if !hostPeerUpdate.FwUpdate.AllowAll {
|
||||||
|
aclRule := models.AclRule{
|
||||||
|
ID: "allowed-network-rules",
|
||||||
|
AllowedProtocol: models.ALL,
|
||||||
|
Direction: models.TrafficDirectionBi,
|
||||||
|
Allowed: true,
|
||||||
|
}
|
||||||
|
for _, allowedNet := range hostPeerUpdate.FwUpdate.AllowedNetworks {
|
||||||
|
if allowedNet.IP.To4() != nil {
|
||||||
|
aclRule.IPList = append(aclRule.IPList, allowedNet)
|
||||||
|
} else {
|
||||||
|
aclRule.IP6List = append(aclRule.IP6List, allowedNet)
|
||||||
|
}
|
||||||
|
}
|
||||||
|
hostPeerUpdate.FwUpdate.AclRules["allowed-network-rules"] = aclRule
|
||||||
|
}
|
||||||
|
}()
|
||||||
|
|
||||||
slog.Debug("peer update for host", "hostId", host.ID.String())
|
slog.Debug("peer update for host", "hostId", host.ID.String())
|
||||||
peerIndexMap := make(map[string]int)
|
peerIndexMap := make(map[string]int)
|
||||||
|
|
Loading…
Add table
Reference in a new issue