vyos/vyos-documentation
1
0
Fork 0
mirror of https://github.com/vyos/vyos-documentation.git synced 2025-10-26 08:41:46 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1162 from nicolas-fort/RemoveLegacy

Browse Source 
Firewall: Remove <Legacy> firewall documentation from current branch.…
This commit is contained in:
Robert Göhler 2023-11-29 22:12:17 +01:00 committed by GitHub
commit 7e8c713d45
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 1 additions and 1085 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1054
docs/configuration/firewall/general-legacy.rst
View File

File diff suppressed because it is too large Load Diff

32
docs/configuration/firewall/index.rst
View File

@ -1,17 +1,9 @@
:lastproofread: 2023-11-08 :lastproofread: 2023-11-23
######## ########
Firewall Firewall
######## ########
.. attention::
Starting from VyOS 1.4-rolling-202308040557, a new firewall structure
can be found on all vyos installations.
***************
Netfilter based
***************
With VyOS being based on top of Linux and its kernel, the Netfilter project With VyOS being based on top of Linux and its kernel, the Netfilter project
created the iptables and now the successor nftables for the Linux kernel to created the iptables and now the successor nftables for the Linux kernel to
work directly on the data flows. This now extends the concept of zone-based work directly on the data flows. This now extends the concept of zone-based
@ -155,34 +147,12 @@ configuration:
ipv4 ipv4
ipv6 ipv6
flowtables flowtables
zone
.. note:: **For more information** .. note:: **For more information**
of Netfilter hooks and Linux networking packet flows can be of Netfilter hooks and Linux networking packet flows can be
found in `Netfilter-Hooks found in `Netfilter-Hooks
<https://wiki.nftables.org/wiki-nftables/index.php/Netfilter_hooks>`_ <https://wiki.nftables.org/wiki-nftables/index.php/Netfilter_hooks>`_
***************
Legacy Firewall
***************
.. toctree::
:maxdepth: 1
:includehidden:
general-legacy
Traditionally firewalls weere configured with the concept of data going in and
out of an interface. The router just listened to the data flowing through and
responding as required if it was directed at the router itself.
To configure VyOS with the
:doc:`legacy firewall configuration </configuration/firewall/general-legacy>`
As the example image below shows, the device was configured with rules blocking
inbound or outbound traffic on each interface.
.. figure:: /_static/images/firewall-traditional.png
Zone-based firewall Zone-based firewall
^^^^^^^^^^^^^^^^^^^ ^^^^^^^^^^^^^^^^^^^