Add global-tier long-tail resources (policy CRUD, blrules, conntrack) #9

2026-07-25T23:18:25+10:00

unkinben commented

2026-07-25 23:18:25 +10:00

Why

First batch of the remaining long-tail sections. The global-compiled tier: default policies, blacklist/whitelist rules, and conntrack control. policies already had a table and rendered in the compiler but had no CRUD endpoint — this closes that gap — plus the two new sections.

Changes

Wire policy CRUD on the existing table (list/create/get/delete).
Add blrules and conntrack: migration 0005 (verified against Postgres 17), model types, id-keyed store CRUD (generation-bumping), and REST handlers.

Follow-ups

Compiler rendering of blrules/conntrack into per-device configs (policy already renders).
Provider resources for these (separate PR on the provider).
Per-device long-tail sections (host/provider/route/tunnel/tc/...) in subsequent batches.

## Why First batch of the remaining long-tail sections. The global-compiled tier: default policies, blacklist/whitelist rules, and conntrack control. `policies` already had a table and rendered in the compiler but had no CRUD endpoint — this closes that gap — plus the two new sections. ## Changes - Wire **policy** CRUD on the existing table (list/create/get/delete). - Add **blrules** and **conntrack**: migration 0005 (verified against Postgres 17), model types, id-keyed store CRUD (generation-bumping), and REST handlers. ## Follow-ups - Compiler rendering of blrules/conntrack into per-device configs (policy already renders). - Provider resources for these (separate PR on the provider). - Per-device long-tail sections (host/provider/route/tunnel/tc/...) in subsequent batches.

unkinben added 1 commit 2026-07-26 00:06:19 +10:00

Add global-tier long-tail resources: policy CRUD, blrules, conntrack

ci/woodpecker/pr/pre-commit Pipeline was successful

Details

ci/woodpecker/pr/build Pipeline was successful

Details

ci/woodpecker/pr/test Pipeline was successful

Details

af7117faae

- Wire policy CRUD (the policies table existed from 0001 but had no endpoint;
  policies already render in the compiler, so this closes that loop).
- Add blrules (blacklist/whitelist) and conntrack resources: migration 0005,
  model types, id-keyed store CRUD (generation-bumping), and REST handlers.
Compiler rendering of blrules/conntrack into device configs is a tracked
follow-up (policy already renders).

unkinben force-pushed benvin/longtail-global from 98b8295f4a to af7117faae

2026-07-26 00:06:19 +10:00

Compare

unkinben referenced this pull request

2026-07-26 13:00:49 +10:00

Long-tail batch 2 (API): per-device routing (hosts/providers/routes/routing_rules) #10

benvin merged commit bd97b13ff7 into main

2026-07-26 15:08:00 +10:00

benvin deleted branch benvin/longtail-global

2026-07-26 15:08:00 +10:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: unkin/tomswallapi#9