feat(core): the pages of routers and home routers after Java, measured against Java
Routers and home routers start a web server on port 80 with Java's index, log and routes pages in the project's language (routerPages.ts); the firewall keeps a log per node that outlives a new start; RIP routes carry the telling router's public address. TCP counts sequence numbers and segments in Java's characters, not bytes. RouterWebRun records six stories, with firewalls now built by ScenarioNetwork. Not taken from Java: its router server sometimes never listening (a race in setAktiv), and </titel>. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
@@ -24,6 +24,8 @@ import filius.hardware.knoten.Vermittlungsrechner;
|
||||
import filius.rahmenprogramm.nachrichten.Lauscher;
|
||||
import filius.software.dhcp.DHCPServer;
|
||||
import filius.software.dns.DNSServer;
|
||||
import filius.software.firewall.Firewall;
|
||||
import filius.software.firewall.FirewallRule;
|
||||
import filius.software.netzzugangsschicht.EthernetFrame;
|
||||
import filius.software.system.Betriebssystem;
|
||||
import filius.software.system.GatewayFirmware;
|
||||
@@ -233,6 +235,29 @@ public class ScenarioNetwork {
|
||||
for (Object each : list(scenario.getOrDefault("rip", new ArrayList<>()))) {
|
||||
((VermittlungsrechnerBetriebssystem) system(nodes.get((String) each))).setRipEnabled(true);
|
||||
}
|
||||
// Firewalls: the core's defaults (inactive, drop, ICMP through, SYN only, UDP filtered) and its rules.
|
||||
for (Map.Entry<String, Object> entry : map(scenario.getOrDefault("firewalls", new HashMap<>())).entrySet()) {
|
||||
Map<String, Object> config = map(entry.getValue());
|
||||
InternetKnotenBetriebssystem os = system(nodes.get(entry.getKey()));
|
||||
Firewall firewall = os instanceof VermittlungsrechnerBetriebssystem ? ((VermittlungsrechnerBetriebssystem) os).holeFirewall()
|
||||
: os instanceof GatewayFirmware ? ((GatewayFirmware) os).holeFirewall()
|
||||
: (Firewall) os.holeSoftware("filius.software.firewall.Firewall");
|
||||
firewall.setActivated(Boolean.TRUE.equals(config.get("active")));
|
||||
firewall.setDefaultPolicy("accept".equals(config.get("defaultPolicy")) ? FirewallRule.ACCEPT : FirewallRule.DROP);
|
||||
firewall.setDropICMP(Boolean.TRUE.equals(config.get("dropIcmp")));
|
||||
firewall.setFilterSYNSegmentsOnly(!Boolean.FALSE.equals(config.get("synOnly")));
|
||||
firewall.setFilterUdp(!Boolean.FALSE.equals(config.get("filterUdp")));
|
||||
for (Object each : list(config.getOrDefault("rules", new ArrayList<>()))) {
|
||||
Map<String, Object> rule = map(each);
|
||||
String protocol = (String) rule.getOrDefault("protocol", "tcp");
|
||||
short number = protocol.equals("all") ? FirewallRule.ALL_PROTOCOLS
|
||||
: protocol.equals("icmp") ? FirewallRule.ICMP : protocol.equals("udp") ? FirewallRule.UDP : FirewallRule.TCP;
|
||||
firewall.addRule(new FirewallRule((String) rule.getOrDefault("source", ""), (String) rule.getOrDefault("sourceMask", ""),
|
||||
(String) rule.getOrDefault("destination", ""), (String) rule.getOrDefault("destinationMask", ""),
|
||||
rule.containsKey("port") ? ((Number) rule.get("port")).intValue() : FirewallRule.ALL_PORTS, number,
|
||||
"accept".equals(rule.get("action")) ? FirewallRule.ACCEPT : FirewallRule.DROP));
|
||||
}
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user