Firewall RulesΒΆ

Receptor has the ability to accept, drop, or reject traffic based on any combination of the following:

  • FromNode
  • ToNode
  • FromService
  • ToService

Firewall rules are added under the node entry in a Receptor configuration file:

# Accepts everything
---
node:
  firewallrules:
    - action: "accept"

# Drops traffic from `foo` to `bar`'s control service
---
node:
  firewallrules:
    - action: "drop"
      fromnode: "foo"
      tonode: "bar"
      toservice: "control"

# Rejects traffic originating from nodes like abcb, adfb, etc
---
node:
  firewallrules:
    - action: "reject"
      fromnode: "/a.*b/"

# Rejects traffic destined for nodes like abcb, AdfB, etc
---
node:
  firewallrules:
    - action: "reject"
      tonode: "/(?i)a.*b/"