riotkit / firewalled-zone Goto Github PK

This could potentially lead to leaking any of firewall or internet type nodes IP addresses and expose them for the attacks from the internet.

The architecture consists of multiple chained nodes together.
Node on the right in the chain can verify node on the left.

Example:

• internal-1 can validate firewall-1
• firewall-1 can validate exit-1

Kinds of validation:

• SSH host fingerprint
• TLS certificate validation between - internet left and right node, when on exit node then validation of internet visible certificate and right node

Reporting to Matrix/Signal channel.

• UFW support
• Support for disabling internet traffic, except specified applications (e.g. APT)

The service should decide if the content should be cached or not.