Add destination CIDR checking (#507)

This commit is contained in:
Ilya Lukyanov
2023-05-09 16:37:23 +01:00
committed by GitHub
parent a9cb2e06f4
commit 1701087035
3 changed files with 169 additions and 82 deletions

View File

@@ -305,7 +305,8 @@ firewall:
# host: `any` or a literal hostname, ie `test-host`
# group: `any` or a literal group name, ie `default-group`
# groups: Same as group but accepts a list of values. Multiple values are AND'd together and a certificate would have to contain all groups to pass
# cidr: a CIDR, `0.0.0.0/0` is any.
# cidr: a remote CIDR, `0.0.0.0/0` is any.
# local_cidr: a local CIDR, `0.0.0.0/0` is any. This could be used to filter destinations when using unsafe_routes.
# ca_name: An issuing CA name
# ca_sha: An issuing CA shasum