summaryrefslogtreecommitdiff
path: root/docs/configuration/firewall/index.rst
diff options
context:
space:
mode:
authorChristian Breunig <christian@breunig.cc>2023-12-27 12:03:40 +0100
committerChristian Breunig <christian@breunig.cc>2023-12-27 12:03:44 +0100
commit97a3df172263834ed4706db37c239ab780e424c9 (patch)
tree122aec627dfa820d6a708e6c474534f76d013a5e /docs/configuration/firewall/index.rst
parent0036cdf291ecb84c81d512e7305a2bacda1dc359 (diff)
downloadvyos-documentation-97a3df172263834ed4706db37c239ab780e424c9.tar.gz
vyos-documentation-97a3df172263834ed4706db37c239ab780e424c9.zip
firewall: sync to master branch
Diffstat (limited to 'docs/configuration/firewall/index.rst')
-rw-r--r--docs/configuration/firewall/index.rst32
1 files changed, 1 insertions, 31 deletions
diff --git a/docs/configuration/firewall/index.rst b/docs/configuration/firewall/index.rst
index 5d094278..3887e26a 100644
--- a/docs/configuration/firewall/index.rst
+++ b/docs/configuration/firewall/index.rst
@@ -1,17 +1,9 @@
-:lastproofread: 2023-11-08
+:lastproofread: 2023-11-23
########
Firewall
########
-.. attention::
- Starting from VyOS 1.4-rolling-202308040557, a new firewall structure
- can be found on all vyos installations.
-
-***************
-Netfilter based
-***************
-
With VyOS being based on top of Linux and its kernel, the Netfilter project
created the iptables and now the successor nftables for the Linux kernel to
work directly on the data flows. This now extends the concept of zone-based
@@ -155,34 +147,12 @@ configuration:
ipv4
ipv6
flowtables
- zone
.. note:: **For more information**
of Netfilter hooks and Linux networking packet flows can be
found in `Netfilter-Hooks
<https://wiki.nftables.org/wiki-nftables/index.php/Netfilter_hooks>`_
-***************
-Legacy Firewall
-***************
-
-.. toctree::
- :maxdepth: 1
- :includehidden:
-
- general-legacy
-
-Traditionally firewalls weere configured with the concept of data going in and
-out of an interface. The router just listened to the data flowing through and
-responding as required if it was directed at the router itself.
-
-To configure VyOS with the
-:doc:`legacy firewall configuration </configuration/firewall/general-legacy>`
-
-As the example image below shows, the device was configured with rules blocking
-inbound or outbound traffic on each interface.
-
-.. figure:: /_static/images/firewall-traditional.png
Zone-based firewall
^^^^^^^^^^^^^^^^^^^