mara/hyperhive
mara/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Activity

egress anti-spoofing: keep established bindings, load tables with bindings and leases in one transaction

Browse source
This commit is contained in:
atlas 2026-11-13 02:53:37 +01:00 • committed by mara
commit 70179b6c1f
1 changed files with 400 additions and 134 deletions
Download patch file Download diff file Expand all files Collapse all files

6
hive-priv/README.md
View file

@ -37,9 +37,9 @@ not the whole daemon-shared crate.
`container` (lifecycle), `container_config` (nspawn flags, systemd drop-ins),
`storage` (btrfs subvolumes, quotas, snapshots, disk measurement), `files`
(pause marker, socket dir, legacy tmpfiles) and `infra` (gateway nginx, forge
admin, infra containers). `egress` holds two sub-commands that never
touch the socket, `egress-pin` and `egress-lease`; the `hive-egress` unit, udev
and dnsmasq run them to fill the sets of the anti-spoofing table (see
admin, infra containers). `egress` holds three sub-commands that never
touch the socket, `egress-load`, `egress-pin` and `egress-lease`; the `hive-egress`
unit, udev, a timer and dnsmasq run them to fill the sets of the anti-spoofing table (see
`docs/4-implementation/networking/network.md`). Helpers more than one family calls live in `shared`.
Each module's `//!` header lists its ops.