Skip to content

Latest commit

 

History

History
147 lines (83 loc) · 5.31 KB

CHANGELOG.md

File metadata and controls

147 lines (83 loc) · 5.31 KB
Raw

Changelog

Unreleased

1.3.0 (2024-01-07)

  • Add same_network_verdict option to container-to-container configuration, enabling users to specify whether traffic between containers within the same network should be allowed or not.

  • Replace library used to communicate with Docker (which also fixes #411).

    This release replaces the previously used library shiplift by bollard. This is not expected to have any impact on users of DFW.

  • Build Docker images for multiple architectures: amd64, arm64, arm/v7.

    This is especially helpful for Raspberry Pi users, as they can now use the official Docker image instead of having to build the binary themselves.

    You can pull the image from Docker Hub (pitkley/dfw:1.3.0) or the GitHub Container Registry (ghcr.io/pitkley/dfw:1.3.0) for any of the mentioned architectures.

Internal changes: dependency updates, CI updates, bump minimum supported Rust version to 1.67.0 (from 1.46.0), bump to Rust edition 2021.

1.2.1 (2020-12-13)

  • Fix incorrect handling of host-ports in wider-world-to-container rules.

1.2.0 (2020-07-13)

  • Reintegrate the iptables-backend.

    This reintroduces an iptables-based firewall-backend (v1.0 initially dropped iptables-support), specifically the iptables-restore backend that was made available in v0.4+.

    The backend can be selected through the --firewall-backend iptables CLI parameter (nftables is the default).

  • Make exposing containers via IPv6 configurable.

    You can now specify the expose_via_ipv6-key within a wider-world-to-container-rule to configure whether the service should be exposed via IPv6 or not (the default is true).

    (Please note that further requirements need to be fulfilled such that exposing services via IPv6 to works, see here.)

  • Ensure consistent behaviour regardless of whether [global_defaults] has been specified or not.

    Previously DFW showed different behaviour depending on whether global_defaults was specified or not, regardless of the actual content within the section (which was allowed to be empty). This release ensures that the same behaviour is maintained no matter if the section was defined or not.

  • Don't exit DFW if there are no containers running (#243, thanks to @Georgiy-Tugai).

Internal changes: dependency updates, move CI entirely to GitHub Actions.

1.1.0 - Bugfix, dependency updates (c9dc9ba)

  • Fix missing rule-validation causing incorrect rules to be created (#166, add063).
  • Fix logic that applied a too coarse rule (#166, e4fb869).

Internal changes: dependency updates, upgraded shiplift from 0.3 to 0.6.

1.0.1 - Bugfixes, dependency updates (ebfe872)

  • Fix source-CIDR-filtering for wider-world-to-container rules.

Internal changes: dependency updates.

1.0.0 - Goodbye iptables, hello nftables; IPv6 support (1913447)

  • Replaced all iptables-backends by an nftables backend.
  • Added IPv6 support.

0.5.1 - Allow source-IP restrictions on WWTC rules (998d36c)

  • You can now specify IP-ranges in wider-world-to-container rules, allowing you to restrict the source from which a service can be reached.

Internal changes: dependency updates.

0.5.0 - iptables-restore fixes (eb71bcd)

Changes to the dfw binary

  • Added argument --log-level which allows you to specify the verbosity of DFW's logging.

Changes to the dfw library

  • The iptables-restore backend now acts flushing (033d27c)
  • Removed the unnecessary IPTablesProxy struct (4e62ff2)

Internal changes: updated GitLab CI config, updated dependencies, updated tested Docker versions.

0.4.0 - iptables-restore backend (9bd6027)

  • Added argument --iptables-backend which allows selection of what backend to use:
    • iptables (default)
    • iptablesrestore
    • iptablesdummy (same as --dry-run)
  • Added iptables-restore as a new backend
  • Added example configurations
  • Extended/updated list of Docker versions tested

Internal changes: updated GitLab CI config, cleaned up macros used, updated dependencies.

0.3.0 - First release on crates.io (32d3a51)

  • Only process running containers by default.

0.2.3 (e7af9c3)

  • Fix DNAT rule generation.

0.2.2 (d5e5d95)

  • Added dry-run option to CLI.
  • Added option to only process running containers.

Internal changes: split into binary and library, add testing infrastructure to perform integration tests against Docker, add a lot of unit tests.

0.2.1 (122e083)

  • Small internal changes.

0.2.0 (babae7c)

  • Implement further features.
  • Refactor configuration types.
  • Extend documentation.
  • Extend logging.

0.1.4 (3e2b55a)

  • Add missing licenses.

0.1.3 (1411336)

  • Allow bursting of events.
  • Refactor internal rule generation code.

0.1.2 (482bcb2)

  • Add missing iptables/ip6tables binaries to Docker image.

0.1.1 (1ac7217)

  • Add Docker event-monitoring.

0.1.0 - Initial release (74b3087)