feat(vpnserver): add nftables-backed destination policy enforcement for TUN mode

This commit is contained in:
2026-03-30 14:32:02 +00:00
parent e513f8686b
commit 8eb26e1920
7 changed files with 302 additions and 23 deletions

View File

@@ -1,5 +1,13 @@
# Changelog
## 2026-03-30 - 1.15.0 - feat(vpnserver)
add nftables-backed destination policy enforcement for TUN mode
- add @push.rocks/smartnftables dependency and export it through the plugin layer
- apply destination policy rules via nftables when starting the server in TUN mode
- add periodic nftables health checks and best-effort cleanup on server stop
- update documentation for destination routing policy, socket transport mode, trusted client tags, events, and service generation
## 2026-03-30 - 1.14.0 - feat(nat)
add destination routing policy support for socket-mode VPN traffic