v0.7.1

• Restrict imported prefixes by source VRF #62

Release v0.7.0

updated nftables and frr for dns proxy support (#56)

* updated nftables and frr for dns proxy support

* merge route maps

* optional dns proxy nftables rules

Release v0.6.4

use auto-seq-number for default route to circumvent frr 7.5.1 reload …

Release v0.6.3

Leak external host-routes to private network (#49)

Closes #48

Release v0.6.2

replace statik with go:embed (#44)

* replace statik with go:embed

* no longer required

* linter needs go 1.16 as well

* try with newer golangci-lint version

* try with newer golangci-lint version

* try with newer golangci-lint version

* try with newer golangci-lint version

* make golangci-lint run -p bugs happy

* Adopt linter changes

* simplify version header handling in test

Co-authored-by: Markus Fensterer <[email protected]>

Release v0.6.1

Ipv6 (#42)

* Create dual-stack nftables rules

* Do not specify mask of host ips

* address-family ipv6 for frr

* Add bitlen to ips

* Make frr tests pass

* Make prefix detection ipv6 aware

* Add bitlen to svi interfaces

* create proper bgp router-ids in case machine ip is ipv6

* Activate ipv6 in this addressfamily

* Activate ipv6 in this addressfamily

* fix tests

* Make SNAT work for firewalls

* different prefix lists for different address families

* added testcase for ipv6 firewall

* unify ipv4 and ipv6 rule file otherwise bgp unnumbered won't work

* removed tpl block for snat by accident

* improve on routemap testability

* test route maps for ipv6 and add first steps for dmz firewall support

* dmz capability

* added test-case for dmz app fw

* snat rules for dmz and added further test-cases for snat

* extend default route network detection

* dmz net must be imported to external nets for nat

* update metal-go

Co-authored-by: Markus Fensterer <[email protected]>

Release v0.6.0

• initial ipv6 support
• handling DMZ networks for MEP-6

Release v0.5.3

Merge pull request #39 from metal-stack/bridge-mtu

add MTUBytes=9000 to bridge netdev

v0.5.2

Merge pull request #39 from metal-stack/bridge-mtu

add MTUBytes=9000 to bridge netdev

Release v0.5.1

use ghcr.io as docker registry (#36)