2026-07-18 - 2026-10-18
Overview
9 Releases published by 2 users
Published
v0.5.0
v0.5.0
Published
v0.4.0
v0.4.0
Published
v0.3.3
v0.3.3
Published
v0.3.2
v0.3.2
Published
v0.3.1
v0.3.1
Published
v0.3.0
v0.3.0
Published
v0.2.1
Published
v0.2.0
Published
v0.1.0
35 Pull requests merged by 2 users
Merged
#40 Emit nft-decodable family guards
Merged
#39 Exclude sub-zone hosts from wildcard parent interfaces
Merged
#38 Match zones defined by hosts entries
Merged
#37 Accept intra-zone traffic between different interfaces
Merged
#34 Add boot unit applying a local config
Merged
#35 Revert agent generations that cut off the control plane
Merged
#36 ci: use container-rpmbuilder image
Merged
#33 Rate-limit log sites with LOGLIMIT
Merged
#32 Create the nftables table in the configured address family
Merged
#31 Honour shorewall INVALID_DISPOSITION and UNTRACKED_DISPOSITION
Merged
#30 Fix large-batch netlink errors and revert failed try applies
Merged
#29 Emit the implied ACCEPT for DNAT and REDIRECT rules
Merged
#27 Accept DHCP on dhcp interfaces as shorewall does
Merged
#28 Include firewall zone in all/any rule expansion
Merged
#26 Create a Gitea release on tag
Merged
#25 Attach conntrack helpers via ct helper objects
Merged
#22 Compile conntrack rules into raw-priority chains
Merged
#23 Bump google/nftables to v0.3.0
Merged
#24 Match source/dest zones on conntrack rules
Merged
#20 Match dest zone oif on output-chain rules and policies
Merged
#21 Match ORIGDEST in DNAT and filter rules
Merged
#18 fix: stop differential apply rewriting unchanged rules
Merged
#19 Fix MSS clamp loading the option as an IPv6 exthdr
Merged
#17 Add try/confirm safe-apply with out-of-process revert
Merged
#15 Match any listed port or protocol in a rule
Merged
#16 Expand comma zone lists in rule source and dest
Merged
#14 ci: switch Go toolchain steps to gobuilder + shared S3 cache
Merged
#8 Agent: translate blrules/conntrack/secmarks/vars
Merged
#7 Agent: translate traffic-control long-tail (mangle/accounting/tc_*)
Merged
#6 Agent: translate per-device L2/misc long-tail
Merged
#5 Agent: translate per-device routing long-tail
Merged
#4 Agent: translate the NAT tier into native config
Merged
#3 Agent: report the FIB for reachability scoping
Merged
#2 Add release machinery: version bump, nfpm RPM, release-on-tag
Merged
#1 Establish tomswall codebase and add the control-plane agent
5 Issues created by 1 user
Opened
#9 Agent: strict config unmarshal + schema version check — reject configs with unknown fields
Opened
#10 Agent: native nft named-set references instead of inlining members
Opened
#11 Safe-apply: confirm-or-revert (try / safe-restart equivalent)
Opened
#12 Parity test harness: golden-file diffs against shorewall + netns integration tests
Opened
#13 Add LICENSE