Repository navigation

(11) config - #1763

Merged

daniel-noland merged 19 commits into

pr/daniel-noland/model-checkingfrom

pr/daniel-noland/config-algebra

Sep 22, 2026

Merged

(11) config#1763
daniel-noland merged 19 commits into
pr/daniel-noland/model-checkingfrom
pr/daniel-noland/config-algebra

Commits on Sep 22, 2026
- fix(hardware): bind unclaimed NICs to vfio-pci
  
  daniel-noland
  and
  claude
  committed
  3c415ea
- test(dataplane): build replies from delivered addresses
  
  daniel-noland
  and
  claude
  committed
  a0c7c83
- fix(nat): retry burst flow lookup with the original key
  
  daniel-noland
  and
  claude
  committed
  a6e0138
- feat(config): generate static NAT exposes
  
  daniel-noland
  and
  claude
  committed
  250541f
- test(dataplane): use endpoint-owned addresses for inbound traffic
  
  daniel-noland
  and
  claude
  committed
  0cb3753
- feat(config): generate port-forwarding exposes
  
  daniel-noland
  and
  claude
  committed
  6622a4c
- feat(config): generate peering ACLs
  
  daniel-noland
  and
  claude
  committed
  04b1e20
- test(config): measure ACL schema coverage
  
  daniel-noland
  and
  claude
  committed
  1d39b2e
- feat(config): generate stateful peering ACLs
  
  daniel-noland
  and
  claude
  committed
  877bf75
- feat(config): generate overlapping ACL rules
  
  daniel-noland
  and
  claude
  committed
  0fc18e0
- feat(config): vary gateway groups, ACL logging, and timeouts
  
  daniel-noland
  and
  claude
  committed
  1d96e08
- feat(config): narrow ACL rules by protocol, port, and destination
  
  daniel-noland
  and
  claude
  committed
  f404c5d
- feat(config): vary port-forwarding protocols
  
  daniel-noland
  and
  claude
  committed
  7daa368
- feat(config): generate address exclusions
  
  daniel-noland
  and
  claude
  committed
  96f7a38
- feat(config): generate default-route exposes
  
  daniel-noland
  and
  claude
  committed
  4fac88b
- test(dataplane): reject traffic to excluded addresses
  
  daniel-noland
  and
  claude
  committed
  02d3b8a
- fix(config): make PermitByProtocol's exception narrow to the prefix it names
  
  daniel-noland
  and
  claude
  committed
  dc341eb
- test(dataplane): use the shared fleet accessor in race regressions
  daniel-noland
  committed
  ec2337c
- test(config): draw enough configurations to reach a one-rule ACL
  
  daniel-noland
  and
  claude
  committed
  0f77ac8

Commits

Commits on Sep 22, 2026