All notable changes to this project will be documented in this file. The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.
- Added logic to enable/disable and start/stop zfw log service when diverter-enable/-disable commands are run
- Added "-E" to zt-upgrade & vm-support-bundle aliases
- Added "-E" to router-registration alias
- add new line to end of ziti version print statement
bugfix: changed pid flag to versions above 0.27.9
- Added ziti auto complete
- Added pid flag to agent commands for version above 0.28.0.
- nfhelp commands
diverter-enable
- updated diverter-enable command to restart the ziti-edge-router every time
- nfhelp commands
zt-erhchecker-update
- download/update hc checker script that can be used by program like vrrp to evaluate the state of the edge-router
- Switched ip helper to ipinfo.io instead of ipify.org
- nfhelp commands
diverter-...
- all diverter aliases were updated to the new ebpf bytecode, i.e. zfw(-router) from ebpf-tproxy-splicer
- nfhelp commands
diverter-update
- updated diverter-update command to not use command alias but actual command to check for current ziti version
- nfhelp commands
diverter-update
- running this command would result in an error; logic to check for version has been moved to the function. Internal task: CLOUDDEV-1110
- nfhelp commands
diverter-update
- added logic to check for the minimum ziti version required to run ebpf, i.e.if [[ "${ZITI_CLI_VERSION}" > "0.27.2" ]]; then diverter_update...
- Updated logic to handle single ziti binary - basing all functions on ziti cli version.
- Updated pid commands from using
pidof
tosystemctl
- nfhelp commands
diverter-update
- updated the help message to include memory size requirement
- nfhelp commands
etables
- link to the etables program used to manage ebpf map content
- nfhelp commands
diverter-map-add
- add all user ingress rules to ebpf mapdiverter-map-delete
- delete all user ingress rules from ebpf mapdiverter-trace
- show ebpf trace logs
- nfhelp commands
diverter-update
- update the iptables diverter binary to latest version with the map table size option--small
- 1000 map entries--medium
- 5000 map entries--large
- 10000 map entries
zt-intercepts
- added ability to list intercepts based on the data source (i.e. iptables, ebpf map)zt-firewall-rules
- added ability to list rules based on the data source (i.e. iptables, ebpf map)
- nfhelp command
diverter-map
- user space program to access ebpf map
- bugfix: PS_COMMAND renamed to STACK_COMMAND & adjusted for versions above 0.26.11 -
- bugfix: Determining which CLI command is now based on CLI version instead of Router
- nfhelp commands
diverter-enable
- enable iptables diverter ebpf programdiverter-disable
- disable iptables diverter ebpf programdiverter-status
- check if iptables diverter ebpf program is enableddiverter-update
- update the iptables diverter binary to latest version
- bugfix: fixed paths to binaries(support/register/upgrade)
- bugfix: check to make sure cli exists before print out information
- Initial version