mirror of
https://github.com/safing/portmaster
synced 2025-09-02 10:39:22 +00:00
80664d1a27
* Move portbase into monorepo * Add new simple module mgr * [WIP] Switch to new simple module mgr * Add StateMgr and more worker variants * [WIP] Switch more modules * [WIP] Switch more modules * [WIP] swtich more modules * [WIP] switch all SPN modules * [WIP] switch all service modules * [WIP] Convert all workers to the new module system * [WIP] add new task system to module manager * [WIP] Add second take for scheduling workers * [WIP] Add FIXME for bugs in new scheduler * [WIP] Add minor improvements to scheduler * [WIP] Add new worker scheduler * [WIP] Fix more bug related to new module system * [WIP] Fix start handing of the new module system * [WIP] Improve startup process * [WIP] Fix minor issues * [WIP] Fix missing subsystem in settings * [WIP] Initialize managers in constructor * [WIP] Move module event initialization to constrictors * [WIP] Fix setting for enabling and disabling the SPN module * [WIP] Move API registeration into module construction * [WIP] Update states mgr for all modules * [WIP] Add CmdLine operation support * Add state helper methods to module group and instance * Add notification and module status handling to status package * Fix starting issues * Remove pilot widget and update security lock to new status data * Remove debug logs * Improve http server shutdown * Add workaround for cleanly shutting down firewall+netquery * Improve logging * Add syncing states with notifications for new module system * Improve starting, stopping, shutdown; resolve FIXMEs/TODOs * [WIP] Fix most unit tests * Review new module system and fix minor issues * Push shutdown and restart events again via API * Set sleep mode via interface * Update example/template module * [WIP] Fix spn/cabin unit test * Remove deprecated UI elements * Make log output more similar for the logging transition phase * Switch spn hub and observer cmds to new module system * Fix log sources * Make worker mgr less error prone * Fix tests and minor issues * Fix observation hub * Improve shutdown and restart handling * Split up big connection.go source file * Move varint and dsd packages to structures repo * Improve expansion test * Fix linter warnings * Fix interception module on windows * Fix linter errors --------- Co-authored-by: Vladimir Stoilov <vladimir@safing.io>
48 lines
1.6 KiB
Go
48 lines
1.6 KiB
Go
package interception
|
|
|
|
import (
|
|
"time"
|
|
|
|
bandwidth "github.com/safing/portmaster/service/firewall/interception/ebpf/bandwidth"
|
|
conn_listener "github.com/safing/portmaster/service/firewall/interception/ebpf/connection_listener"
|
|
"github.com/safing/portmaster/service/firewall/interception/nfq"
|
|
"github.com/safing/portmaster/service/mgr"
|
|
"github.com/safing/portmaster/service/network"
|
|
"github.com/safing/portmaster/service/network/packet"
|
|
)
|
|
|
|
// start starts the interception.
|
|
func startInterception(packets chan packet.Packet) error {
|
|
// Start packet interception via nfqueue.
|
|
err := StartNfqueueInterception(packets)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
// Start ebpf new connection listener.
|
|
module.mgr.Go("ebpf connection listener", func(wc *mgr.WorkerCtx) error {
|
|
return conn_listener.ConnectionListenerWorker(wc.Ctx(), packets)
|
|
})
|
|
|
|
// Start ebpf bandwidth stats monitor.
|
|
module.mgr.Go("ebpf bandwidth stats monitor", func(wc *mgr.WorkerCtx) error {
|
|
return bandwidth.BandwidthStatsWorker(wc.Ctx(), 1*time.Second, BandwidthUpdates)
|
|
})
|
|
|
|
return nil
|
|
}
|
|
|
|
// stop starts the interception.
|
|
func stopInterception() error {
|
|
return StopNfqueueInterception()
|
|
}
|
|
|
|
// ResetVerdictOfAllConnections resets all connections so they are forced to go thought the firewall again.
|
|
func ResetVerdictOfAllConnections() error {
|
|
return nfq.DeleteAllMarkedConnection()
|
|
}
|
|
|
|
// UpdateVerdictOfConnection deletes the verdict of the given connection so it can be initialized again with the next packet.
|
|
func UpdateVerdictOfConnection(conn *network.Connection) error {
|
|
return nfq.DeleteMarkedConnection(conn)
|
|
}
|