network/roles/firewall
Timotej Lazar c3ff39fe72 firewall: reload nftables in mgmt VRF
It doesn’t matter for the rules themselves as nft does not do VRFs,
but DNS names can only be resolved there. This is because all nodes
use the same IPs in the default VRF, so DNS replies sent from there go
to the active node.

This allows using DNS names in firewall rules. Not yet sure if that is
actually a good idea.
2024-08-19 13:54:01 +02:00
..
files firewall: reload nftables in mgmt VRF 2024-08-19 13:54:01 +02:00
handlers firewall: use a handler to reboot 2024-05-19 10:10:02 +02:00
tasks firewall: drop a line 2024-06-20 20:54:42 +02:00
templates exit: add routes for internal IPv4 addresses to outside VRF 2024-08-13 19:02:03 +02:00