Files
1Panel/agent/constant/firewall.go
ssongliu 7915230121 refactor: rebuild firewall management (#13628)
* refactor(firewall): rebuild rule management foundation

* refactor(firewall): streamline rule checks and inventory

* feat(firewall): improve native rule inventory

* refactor(firewall): refine rule management

* feat: add Docker port guard

* feat(firewall): support native nftables

* feat(firewall): add configurable firewall selection

* feat(firewall): support nftables docker port guard

* refactor(firewall): complete v2 rule management and migration

* refactor(firewall): align state and API contracts

* refactor(firewall): unify rule management operations

* feat: refine firewall v2 rules and forwarding

* fix(firewall): harden dual-stack rule management

* refactor(firewall): consolidate rule validation and persistence
2026-08-24 12:51:34 +08:00

45 lines
1.3 KiB
Go

package constant
const (
FirewallProviderFirewalld = "firewalld"
FirewallProviderUFW = "ufw"
FirewallProviderIptables = "iptables"
FirewallProviderNftables = "nftables"
FirewallFamilyIPv4 = "ipv4"
FirewallFamilyIPv6 = "ipv6"
FirewallFamilyInet = "inet"
FirewallBasicBeforeChain = "1PANEL_BASIC_BEFORE"
FirewallBasicChain = "1PANEL_BASIC"
FirewallBasicAfterChain = "1PANEL_BASIC_AFTER"
)
const (
FirewallSystemBackendKey = "FirewallProvider"
FirewallForwardingBackendKey = "ForwardingBackend"
FirewallDockerBackendKey = "DockerFirewallBackend"
FirewallDockerPortGuardStatusKey = "DockerPortGuardStatus"
FirewallFilterInitializedKey = "IptablesStatus"
FirewallForwardingInitializedKey = "IptablesForwardStatus"
FirewallPingStatusKey = "BanPing"
FirewallPortWhiteList = "FirewallPortWhiteList"
FirewallPortWhiteListValue = "80/tcp,443/tcp,443/udp"
)
const (
FirewallSystemAcceptedPortSourcePrefix = "accepted-port:"
FirewallRuleCheckVersion = 1
FirewallRuleOriginCreated = "created"
FirewallRuleOriginAdopted = "adopted"
FirewallRuleSourceUser = "user"
FirewallRuleSourceImported = "imported"
FirewallRuleSourcePanel = "panel"
FirewallRuleSourceSecurity = "security"
FirewallRuleSourceApp = "application"
)