Back to Firezone

Router

scripts/router/README.md

1.0.5578 B
Original Source

Router

This container acts as a simple router how they are found on the public Internet. By default, no inbound traffic is allowed, except for:

  • responses of previously outgoing connections
  • explicit port forwarding

The router uses nftables to enforce these rules.

We also make several assumptions about the docker-compose setup that we are running in:

  • The network interface between the router and its container must be called internal
  • The public network interface on the other side must be called internet
  • IPv4 and IPv6 must be available on both interfaces