feat(nftables):add nftables support for nftables

ts/proxies/smart-proxy/smart-proxy.ts

@@ -9,6 +9,7 @@ import { TimeoutManager } from './timeout-manager.js';
 import { PortManager } from './port-manager.js';
 import { RouteManager } from './route-manager.js';
 import { RouteConnectionHandler } from './route-connection-handler.js';
+import { NFTablesManager } from './nftables-manager.js';
 
 // External dependencies
 import { Port80Handler } from '../../http/port80/port80-handler.js';
@@ -50,6 +51,7 @@ export class SmartProxy extends plugins.EventEmitter {
   private timeoutManager: TimeoutManager;
   public routeManager: RouteManager; // Made public for route management
   private routeConnectionHandler: RouteConnectionHandler;
+  private nftablesManager: NFTablesManager;
   
   // Port80Handler for ACME certificate management
   private port80Handler: Port80Handler | null = null;
@@ -82,7 +84,7 @@ export class SmartProxy extends plugins.EventEmitter {
    *   ],
    *   defaults: {
    *     target: { host: 'localhost', port: 8080 },
-   *     security: { allowedIps: ['*'] }
+   *     security: { ipAllowList: ['*'] }
    *   }
    * });
    * ```
@@ -167,6 +169,9 @@ export class SmartProxy extends plugins.EventEmitter {
 
     // Initialize port manager
     this.portManager = new PortManager(this.settings, this.routeConnectionHandler);
+    
+    // Initialize NFTablesManager
+    this.nftablesManager = new NFTablesManager(this.settings);
   }
   
   /**
@@ -270,6 +275,13 @@ export class SmartProxy extends plugins.EventEmitter {
     // Get listening ports from RouteManager
     const listeningPorts = this.routeManager.getListeningPorts();
 
+    // Provision NFTables rules for routes that use NFTables
+    for (const route of this.settings.routes) {
+      if (route.action.forwardingEngine === 'nftables') {
+        await this.nftablesManager.provisionRoute(route);
+      }
+    }
+
     // Start port listeners using the PortManager
     await this.portManager.addPorts(listeningPorts);
 
@@ -364,6 +376,10 @@ export class SmartProxy extends plugins.EventEmitter {
       await this.certProvisioner.stop();
       console.log('CertProvisioner stopped');
     }
+    
+    // Stop NFTablesManager
+    await this.nftablesManager.stop();
+    console.log('NFTablesManager stopped');
 
     // Stop the Port80Handler if running
     if (this.port80Handler) {
@@ -432,6 +448,39 @@ export class SmartProxy extends plugins.EventEmitter {
   public async updateRoutes(newRoutes: IRouteConfig[]): Promise<void> {
     console.log(`Updating routes (${newRoutes.length} routes)`);
 
+    // Get existing routes that use NFTables
+    const oldNfTablesRoutes = this.settings.routes.filter(
+      r => r.action.forwardingEngine === 'nftables'
+    );
+    
+    // Get new routes that use NFTables
+    const newNfTablesRoutes = newRoutes.filter(
+      r => r.action.forwardingEngine === 'nftables'
+    );
+    
+    // Find routes to remove, update, or add
+    for (const oldRoute of oldNfTablesRoutes) {
+      const newRoute = newNfTablesRoutes.find(r => r.name === oldRoute.name);
+      
+      if (!newRoute) {
+        // Route was removed
+        await this.nftablesManager.deprovisionRoute(oldRoute);
+      } else {
+        // Route was updated
+        await this.nftablesManager.updateRoute(oldRoute, newRoute);
+      }
+    }
+    
+    // Find new routes to add
+    for (const newRoute of newNfTablesRoutes) {
+      const oldRoute = oldNfTablesRoutes.find(r => r.name === newRoute.name);
+      
+      if (!oldRoute) {
+        // New route
+        await this.nftablesManager.provisionRoute(newRoute);
+      }
+    }
+
     // Update routes in RouteManager
     this.routeManager.updateRoutes(newRoutes);
 
@@ -440,6 +489,9 @@ export class SmartProxy extends plugins.EventEmitter {
 
     // Update port listeners to match the new configuration
     await this.portManager.updatePorts(requiredPorts);
+    
+    // Update settings with the new routes
+    this.settings.routes = newRoutes;
 
     // If NetworkProxy is initialized, resync the configurations
     if (this.networkProxyBridge.getNetworkProxy()) {
@@ -676,6 +728,13 @@ export class SmartProxy extends plugins.EventEmitter {
     return domains;
   }
   
+  /**
+   * Get NFTables status
+   */
+  public async getNfTablesStatus(): Promise<Record<string, any>> {
+    return this.nftablesManager.getStatus();
+  }
+
   /**
    * Get status of certificates managed by Port80Handler
    */