glidden

KO | EN

gitlite — search

#python #hacktoberfest #typescript #llm #go #docker #nodejs #windows #awesome #cli #security #pytorch #ios #open-source

(★ 12)

Consul / IPTables interface

glidden Latest Version Download

Download Latest Version (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Glidden, consul/iptables interface

Uses nfqueue and consul to dynamically filter connections.

NFQueue is an Linux/IPTables feature which allows the decision on which packets to be accepted to be made by userspace applications.

In Glidden, we get a set of CIDRs from consul. If the packets we recieve from the kernel falls into one of these CIDRs, we allow it through. We dynamically update the consul key and enable and disable ip addresses- however, we only inspect the first packet in a connection, so as to reduce performance requirements- if the first packet is permitted, all the following packets will be allowed through (using the IPTables conntrack feature)

## Usage

````bash
# Allow 10.0.0.0/8 and 127.0.0.0/24
glidden-client -allow="10.0.0.0/8,127.0.0.1/24"
# Setup packet link to userspace
sudo iptables -I INPUT -i eth0 -m conntrack --ctstate NEW -j NFQUEUE --queue-num 0
sudo glidden
````
## Other information

This package uses the netfilter library from https://github.com/OneOfOne/go-nfqueue under the apache license.

Glidden was the inventor of barbed wire.

glidden

glidden Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

glidden

glidden Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

Download README