qubes-mirage-firewall/client_net.mli

(* Copyright (C) 2015, Thomas Leonard <thomas.leonard@unikernel.com>
   See the README file for details. *)

(** Handling client VMs. *)

val listen : (unit -> int64) ->
  ([ `host ] Domain_name.t -> (int32 * Dns.Rr_map.Ipv4_set.t, [> `Msg of string ]) result Lwt.t) ->
  Qubes.DB.t -> Router.t -> 'a Lwt.t
(** [listen get_timestamp resolver db router] is a thread that watches for clients being added to and
    removed from XenStore. Clients are connected to the client network and
    packets are sent via [router]. We ensure the source IP address is correct
    before routing a packet. *)
Initial import 2015-12-30 04:52:24 -05:00			`(* Copyright (C) 2015, Thomas Leonard <thomas.leonard@unikernel.com>`
			`See the README file for details. *)`

Moved client networking to its own module Renamed the old Client_net to Client_eth, as it just handles the Ethernet layer. 2015-12-30 08:48:13 -05:00			`(** Handling client VMs. *)`
Initial import 2015-12-30 04:52:24 -05:00
Support firewall rules with hostnames. Co-Authored-By: Mindy Preston <yomimono@users.noreply.github.com> Co-Authored-By: Olle Jonsson <olle.jonsson@gmail.com> Co-Authored-By: hannes <hannes@mehnert.org> Co-Authored-By: cfcs <cfcs@users.noreply.github.com> 2020-04-29 10:06:48 -04:00			`val listen : (unit -> int64) ->`
			([ `host ] Domain_name.t -> (int32 * Dns.Rr_map.Ipv4_set.t, [> `Msg of string ]) result Lwt.t) ->
			`Qubes.DB.t -> Router.t -> 'a Lwt.t`
			`(** [listen get_timestamp resolver db router] is a thread that watches for clients being added to and`
Read firewall rules from QubesDB. The module Rules contains a rule matcher instead of hardcoded rules now. Co-Authored-By: Mindy Preston <yomimono@users.noreply.github.com> 2020-04-29 09:58:01 -04:00			`removed from XenStore. Clients are connected to the client network and`
			`packets are sent via [router]. We ensure the source IP address is correct`
			`before routing a packet. *)`