lgcosta/pf-linux-port
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

0 Releases 5 Tags

RSS Feed
  • v0.4.0 bc5b8a4a1e
    Compare

    Lab-verified milestone: 9/9 VM gates green

    lgcosta released this 2026-11-11 22:07:45 -03:00 | 19 commits to main since this release

    Verified in the libvirt lab (Alpine VMs, kernel 7.3.4 built from source):
    01-state 02-block 03-tables 04-anchors 05-nat 06-rdr 11-divert 12-pflog 14-soak

    Engine: OpenBSD 8.0 pf.c/pf_norm.c/pf_table.c/pf_lb.c/pf_ioctl.c (full ioctl
    ABI)/pf_if.c/pf_ruleset.c/pf_osfp.c/pf_syncookies.c + radix/md5/sha/ifq,
    running as out-of-tree pf.ko on Linux 7.3.4 with NO kernel-core patch
    (modpost-verified: zero missing exports). Control plane: the real OpenBSD
    pfctl binary, statically built for Linux.

    Divert: AF_DIVERT socket family registered by the module (PF_DIVERT=32) with
    the pdivert relay. Pflog: /dev/pflog chardev + pflogd writing DLT_PFLOG pcap.
    Demo: out/demo-pf-linux.cast (asciinema, real lab session).

    Known gaps: binat-to, route-to/dup-to/fail-to, af-to, scrub e2e, ALTQ/pfq.
    See docs/en/feature-matrix.md and CHANGELOG.md.

    Downloads