(11) config - #1763

Draft

daniel-noland wants to merge 16 commits into

pr/daniel-noland/model-checkingfrom

pr/daniel-noland/config-algebra

Commits on Sep 8, 2026

fix(hardware): Bind NICs whose kernel driver was never loaded

daniel-noland
and
claude
committed
3e74efb
test(dataplane): Answer a request from where it landed

daniel-noland
and
claude
committed
d7a633c
fix(nat): Find a burst's flow under the key it was filed under

daniel-noland
and
claude
committed
182e716
feat(config): Let the algebra build a static-nat expose

daniel-noland
and
claude
committed
67f45f9
test(dataplane): Give an inbound load addresses its hosts hold

daniel-noland
and
claude
committed
414eee2
feat(config): Let the algebra build a port-forwarding expose

daniel-noland
and
claude
committed
6655cf1
feat(config): Let the algebra put an ACL on a peering

daniel-noland
and
claude
committed
8435018
test(config): Take the census into the ACL schema

daniel-noland
and
claude
committed
7d3e2af
feat(config): Let the algebra permit a peering by flow rather than by packet

daniel-noland
and
claude
committed
bbf5f0b
feat(config): Let one ACL rule name part of a peering and another the rest

daniel-noland
and
claude
committed
f97a599
feat(config): Name a gateway group, a rule's logging, and an idle timeout

daniel-noland
and
claude
committed
0ce64f2
feat(config): Narrow a rule by protocol, by port, and by destination

daniel-noland
and
claude
committed
b9a8665
feat(config): Narrow a forwarded expose to one transport protocol

daniel-noland
and
claude
committed
d1b0402
feat(config): Carve a slice out of the middle of an expose's ranges

daniel-noland
and
claude
committed
c29f173
feat(config): Let an expose stand for everything

daniel-noland
and
claude
committed
928f86c
test(dataplane): Require an excluded address to be unreachable

daniel-noland
and
claude
committed
254d573

Navigation Menu

Uh oh!

(11) config - #1763

(11) config#1763
daniel-noland wants to merge 16 commits into
pr/daniel-noland/model-checkingfrom
pr/daniel-noland/config-algebra

Commits on Sep 8, 2026

fix(hardware): Bind NICs whose kernel driver was never loaded

test(dataplane): Answer a request from where it landed

fix(nat): Find a burst's flow under the key it was filed under

feat(config): Let the algebra build a static-nat expose

test(dataplane): Give an inbound load addresses its hosts hold

feat(config): Let the algebra build a port-forwarding expose

feat(config): Let the algebra put an ACL on a peering

test(config): Take the census into the ACL schema

feat(config): Let the algebra permit a peering by flow rather than by packet

feat(config): Let one ACL rule name part of a peering and another the rest

feat(config): Name a gateway group, a rule's logging, and an idle timeout

feat(config): Narrow a rule by protocol, by port, and by destination

feat(config): Narrow a forwarded expose to one transport protocol

feat(config): Carve a slice out of the middle of an expose's ranges

feat(config): Let an expose stand for everything

test(dataplane): Require an excluded address to be unreachable