starred/1Panel
1
0
Fork 0
mirror of https://github.com/1Panel-dev/1Panel.git synced 2026-09-24 16:00:53 +00:00
Code Issues Packages Projects Releases Wiki Activity
5,465 Commits 61 Branches 130 Tags
pr@dev-v2@vllm
Commit Graph
42 Commits
Author SHA1 Message Date
ssongliu 53f75826d8 refactor: simplify firewall service structure (#13646) 2026-08-27 14:00:43 +08:00
ssongliu 7915230121 refactor: rebuild firewall management (#13628) 
* refactor(firewall): rebuild rule management foundation

* refactor(firewall): streamline rule checks and inventory

* feat(firewall): improve native rule inventory

* refactor(firewall): refine rule management

* feat: add Docker port guard

* feat(firewall): support native nftables

* feat(firewall): add configurable firewall selection

* feat(firewall): support nftables docker port guard

* refactor(firewall): complete v2 rule management and migration

* refactor(firewall): align state and API contracts

* refactor(firewall): unify rule management operations

* feat: refine firewall v2 rules and forwarding

* fix(firewall): harden dual-stack rule management

* refactor(firewall): consolidate rule validation and persistence
 2026-08-24 12:51:34 +08:00
HynoR f35b0deb29 refactor(firewall): extract port forwarding subsystem (#13347) 
Port forwarding no longer shares the filter client. FilterClient keeps only
filter capabilities, and forwarding gets its own adapter, service and boot
replay:

- utils/firewall/forwarding holds the provider adapters. firewalld uses native
  forward-port, ufw and iptables share the NAT implementation moved out of
  client/iptables/forward.go.
- service/forwarding.go owns base info, search, operate, enable and replay.
  The API keeps its routes and dispatches on name/type/operate.
- init/firewall replays forwarding through that service instead of loading NAT
  rule files inline.

Also adds 1PANEL_FORWARD to the IptablesOp name enum: the frontend already
sends {"name":"1PANEL_FORWARD","operate":"init-forward"} and the validator
rejected it with 400 before reaching the service. Besides that, the only
observable difference is that a forward-tab search no longer triggers the
port/address record cleanup goroutine on the side.
 2026-07-30 14:07:41 +08:00
ssongliu 68a871a5d7 fix: restore fail2ban after firewall start (#13364) 2026-07-27 10:16:04 +08:00
ssongliu 07a658582d fix: restore fail2ban bans after firewall restart (#13272) 2026-07-15 16:31:09 +08:00
ssongliu cbcb628bff fix: normalize firewall import addresses (#13196) 2026-07-03 16:37:03 +08:00
ssongliu 6495869664 fix: fix firewall whitelist rules not applied after restart (#12957) 2026-06-09 11:27:38 +08:00
ssongliu 7b7f840c2e feat: support firewall port whitelist management (#12912) 2026-06-01 18:26:54 +08:00
ssongliu 79ff565995 fix: Firewall remove status filtering (#11868) 2026-02-11 14:02:34 +08:00
KOMATA e5b7e99cce feat: retrieve listening processes in firewall port page (#11665) 
* feat: Add endpoint to retrieve listening processes and update related services

* fix: Update listening process retrieval logic to include socket type checks

* refactor:  accept context for improved request handling
 2026-01-16 16:54:15 +08:00
ssongliu ef6e342737 fix: Fix ICMP ping disable status update abnormality issue (#11571) 2026-01-06 04:01:43 +00:00
ssongliu 8fb3e78554 chore: Fix some internationalization content (#11528) 
Refs #11517
 2025-12-31 14:35:38 +00:00
ssongliu 50947f4ddc feat: ICMP ping disable compatibility with Debian 13 (#11514) 
Refs  #11472
 2025-12-29 09:35:36 +00:00
HynoR dc47eb5ae4 feat: Add UDP port 443 acceptance rule to firewall and iptables configuration 2025-12-22 15:55:47 +08:00
ssongliu 3b306f990a chore: Optimize iptables initial state loading speed (#11085) 2025-11-26 22:29:48 +08:00
ssongliu e4fbd3cf86 fix: Fix the issue of abnormal ufw status loading (#10949) 2025-11-13 21:36:35 +08:00
ssongliu 402931862f fix: Fix the issue where iptables description does not take effect (#10947) 2025-11-13 08:36:47 +00:00
ssongliu 55cbf572e0 fix: Fix the issue where deleting rules in iptables advanced settings… (#10942) 
… fails
 2025-11-13 06:38:47 +00:00
ssongliu 0bc9e85734 fix: Fix the issue of abnormal iptables range port addition (#10938) 2025-11-12 22:26:59 +08:00
ssongliu 5b0fccd19a fix: Fix the issue of license status refresh after import (#10934) 2025-11-12 18:29:10 +08:00
KOMATA afd62e8539 fix: Fix bug in iptables firewall module (#10927) 2025-11-12 11:49:24 +08:00
ssongliu 102f7c316d fix: display iptables default allowed ports (#10922) 2025-11-11 14:22:42 +00:00
KOMATA ffc81ea85a fix: enhance ping status and update logic in firewall service (#10920) 
* fix: Update ping status check method

* fix: Enhance ping status update logic and support for alternative sysctl configuration path
 2025-11-11 22:20:09 +08:00
ssongliu 6db79f4b7b feat: support iptables firewall control (#10903) 2025-11-10 21:17:53 +08:00
ssongliu c06ba18023 feat: compatible with openrc and sysvinit (#10723) 2025-10-22 18:32:42 +08:00
双向极端andlive d0bb9165bf feat: Add inbound interface restriction option for ufw forward rules (#10345) (#10549) 
* 修复https防窜站关闭时修改默认站点报错的问题

* feat: Add inbound interface restriction option for ufw forward rules (#10345)

---------

Co-authored-by: live <Anxys@outlook.com>
 2025-10-02 20:33:20 +08:00
ssongliu ea25b800d2 fix: Add Docker restart option to firewall operations (#10253) 
Refs #10247
 2025-09-03 09:29:30 +00:00
蘭 d68a0b076b feat: transfer some code (#9124) 
refs #9067
 2025-06-17 03:56:53 +00:00
ssongliu c59105f050 feat: Encapsulate command execution methods (#8401) 2025-04-15 22:15:18 +08:00
ssongliu 949e3c25a7 feat: The application installation jumps to the script library (#8317) 2025-04-03 16:15:57 +00:00
ssongliu 578fa45bb3 fix: Enable the ping ban function to be compatible with some IPv6 mac… (#8285) 2025-04-01 09:23:52 +00:00
ssongliu b3cd10b743 fix: Delete the data generated by the current snapshot (#8245) 2025-03-25 18:18:41 +08:00
ssongliu 47d8c405dd fix: Merge dev code up to pr #8141 (#8147) 2025-03-14 10:08:31 +08:00
ssongliu 2ed3aaa99b fix: Fix the firewall startup failure (#8141) 2025-03-13 07:09:06 +00:00
zhengkunwang ce22f8a2d8 feat(appstore): Optimize custom application repository logic (#8133) 2025-03-12 17:44:03 +08:00
ssongliu 5963e28b25 fix: Fix ollama model log exception (#8037) 2025-02-28 07:26:56 +00:00
ssongliu 8283cd7d02 feat: adjust internationalization errors and the positions of global … (#7767) 2025-01-24 03:00:07 +00:00
zhengkunwang223 75142b33a4 feat(common): Standardize Permissions for Creating Folders and Files 2024-12-20 16:13:23 +08:00
ssongliu 7008774bb5 feat: merge code from dev (#7439) 2024-12-19 22:21:00 +08:00
ssongliu 55a6cdcf10 feat: uniform application service status return (#7426) 2024-12-18 10:06:15 +00:00
ssongliu a627aa9915 feat: merge from dev (#7366) 
* feat: merge from dev

* feat: Merge mobile style code from the dev branch
 2024-12-17 15:59:21 +08:00
ssongliu 8d28b7db94 pref: backend 重命名 agent 2024-07-23 14:48:37 +08:00