diff options
| author | Robert Göhler <github@ghlr.de> | 2023-11-29 22:12:17 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-11-29 22:12:17 +0100 |
| commit | 7e8c713d4510321eeb429af9ef4b5661fd3c68b3 (patch) | |
| tree | 6d882da2f8ee79bc169518d2b61a6fade0ed77e6 /docs/configuration/firewall/index.rst | |
| parent | a52a2ed397195a0d0741aac4dff0de5999f6e7f3 (diff) | |
| parent | 165d18010937b5efa056332268bf148535276c90 (diff) | |
| download | vyos-documentation-7e8c713d4510321eeb429af9ef4b5661fd3c68b3.tar.gz vyos-documentation-7e8c713d4510321eeb429af9ef4b5661fd3c68b3.zip | |
Merge pull request #1162 from nicolas-fort/RemoveLegacy
Firewall: Remove <Legacy> firewall documentation from current branch.…
Diffstat (limited to 'docs/configuration/firewall/index.rst')
| -rw-r--r-- | docs/configuration/firewall/index.rst | 32 |
1 files changed, 1 insertions, 31 deletions
diff --git a/docs/configuration/firewall/index.rst b/docs/configuration/firewall/index.rst index 5d094278..3887e26a 100644 --- a/docs/configuration/firewall/index.rst +++ b/docs/configuration/firewall/index.rst @@ -1,17 +1,9 @@ -:lastproofread: 2023-11-08 +:lastproofread: 2023-11-23 ######## Firewall ######## -.. attention:: - Starting from VyOS 1.4-rolling-202308040557, a new firewall structure - can be found on all vyos installations. - -*************** -Netfilter based -*************** - With VyOS being based on top of Linux and its kernel, the Netfilter project created the iptables and now the successor nftables for the Linux kernel to work directly on the data flows. This now extends the concept of zone-based @@ -155,34 +147,12 @@ configuration: ipv4 ipv6 flowtables - zone .. note:: **For more information** of Netfilter hooks and Linux networking packet flows can be found in `Netfilter-Hooks <https://wiki.nftables.org/wiki-nftables/index.php/Netfilter_hooks>`_ -*************** -Legacy Firewall -*************** - -.. toctree:: - :maxdepth: 1 - :includehidden: - - general-legacy - -Traditionally firewalls weere configured with the concept of data going in and -out of an interface. The router just listened to the data flowing through and -responding as required if it was directed at the router itself. - -To configure VyOS with the -:doc:`legacy firewall configuration </configuration/firewall/general-legacy>` - -As the example image below shows, the device was configured with rules blocking -inbound or outbound traffic on each interface. - -.. figure:: /_static/images/firewall-traditional.png Zone-based firewall ^^^^^^^^^^^^^^^^^^^ |