Skip to content

Releases: ncsa/dumbno

Support more granular ACLs

23 Feb 23:20
Compare
Choose a tag to compare

Previously, dumbno could only add an acl for one of two requests:

  • a full 5 tuple like (proto, src, src port, dst, dst port)
  • a 2 tuple like (src, dst)

Now, it supports tuples of things like

  • (proto, src, dst, dstport)
  • (proto, src, srcport)

Which can be useful if a particular service on a host is particular chatty across a large number of connections. This could be useful for shunting responses from an external CDN host by adding

proto=tcp, src=some.cdn.host, sport=443