lgcosta/pf-linux-port
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

0 Releases 5 Tags

RSS Feed
  • v0.5.0 251e5c09e0
    Compare

    11/11 VM gates green: binat-to, route-to/dup-to, pflog, NAT with bulk-data integrity

    lgcosta released this 2026-11-11 23:18:48 -03:00 | 12 commits to main since this release

    Verified in the libvirt lab (Alpine VMs, kernel 7.3.4 built from source):
    01-state 02-block 03-tables 04-anchors 05-nat 06-rdr 07-binat 08-routeto
    11-divert 12-pflog 14-soak

    Engine: OpenBSD 8.0 PF ported as an out-of-tree pf.ko on Linux 7.3.4, no
    kernel-core patch (modpost-verified). Control plane: the real OpenBSD pfctl.
    Divert: in-module AF_DIVERT socket family + pdivert. Pflog: /dev/pflog +
    pflogd writing DLT_PFLOG pcap. Demo: out/demo-pf-linux.cast (asciinema).

    Remaining: scrub e2e, binat/rdr pools variants, fail-to/reply-to, af-to,
    ALTQ/pfq (hfsc/fq_codel ported, qdisc pending). See CHANGELOG.md and
    docs/en/feature-matrix.md.

    Downloads