config - #1763

Draft

daniel-noland wants to merge 16 commits into

pr/daniel-noland/model-checkingfrom

pr/daniel-noland/config-algebra

Commits on Aug 28, 2026

fix(hardware): Bind NICs whose kernel driver was never loaded

daniel-noland
and
claude
committed
a32929c
test(dataplane): Answer a request from where it landed

daniel-noland
and
claude
committed
ad950b3
fix(nat): Find a burst's flow under the key it was filed under

daniel-noland
and
claude
committed
5df9137
feat(config): Let the algebra build a static-nat expose

daniel-noland
and
claude
committed
f0e9cd6
test(dataplane): Give an inbound load addresses its hosts hold

daniel-noland
and
claude
committed
8388a92
feat(config): Let the algebra build a port-forwarding expose

daniel-noland
and
claude
committed
ec58096
feat(config): Let the algebra put an ACL on a peering

daniel-noland
and
claude
committed
00c77c1
test(config): Take the census into the ACL schema

daniel-noland
and
claude
committed
cf81f89
feat(config): Let the algebra permit a peering by flow rather than by packet

daniel-noland
and
claude
committed
f618ccd
feat(config): Let one ACL rule name part of a peering and another the rest

daniel-noland
and
claude
committed
8ab4809
feat(config): Name a gateway group, a rule's logging, and an idle timeout

daniel-noland
and
claude
committed
c419eb5
feat(config): Narrow a rule by protocol, by port, and by destination

daniel-noland
and
claude
committed
3776b96
feat(config): Narrow a forwarded expose to one transport protocol

daniel-noland
and
claude
committed
3fb2a76
feat(config): Carve a slice out of the middle of an expose's ranges

daniel-noland
and
claude
committed
a2603e8
feat(config): Let an expose stand for everything

daniel-noland
and
claude
committed
57e440d
test(dataplane): Require an excluded address to be unreachable

daniel-noland
and
claude
committed
33377c4

Navigation Menu

Uh oh!

config - #1763

config#1763
daniel-noland wants to merge 16 commits into
pr/daniel-noland/model-checkingfrom
pr/daniel-noland/config-algebra

Commits on Aug 28, 2026

fix(hardware): Bind NICs whose kernel driver was never loaded

test(dataplane): Answer a request from where it landed

fix(nat): Find a burst's flow under the key it was filed under

feat(config): Let the algebra build a static-nat expose

test(dataplane): Give an inbound load addresses its hosts hold

feat(config): Let the algebra build a port-forwarding expose

feat(config): Let the algebra put an ACL on a peering

test(config): Take the census into the ACL schema

feat(config): Let the algebra permit a peering by flow rather than by packet

feat(config): Let one ACL rule name part of a peering and another the rest

feat(config): Name a gateway group, a rule's logging, and an idle timeout

feat(config): Narrow a rule by protocol, by port, and by destination

feat(config): Narrow a forwarded expose to one transport protocol

feat(config): Carve a slice out of the middle of an expose's ranges

feat(config): Let an expose stand for everything

test(dataplane): Require an excluded address to be unreachable