Features
- Allow users to name set and use the same set in multiple rules (#314)
- User-defined set keys by combining compatible matchers (#313)
- Handle required and incompatible options in
bfcli(#312) - Add the rule ID to the logged data #309
- Allow counter and log keywords to be used in any order (#335)
tcp.(d|s)port,udp.(d|s)portcan be used as a set key (#329)- Add support for marking packets (#336)
- Add new matcher to matcher on packet mark (#336)
- Ensure the daemon recovers when an error occurs when processing a request (#333)
- libbpfilter headers can be included in sources building without compiler extensions (#325)
Fixes
- Fix wrongful BPF link pin on program update (#327)
- iptables: properly generate
ip4.(s|d)netandip4.(s|d)addrmatchers (#341) - iptables: fix memory leak when replacing the ruleset (#327)
- iptables: fix the BPF link being discard when a BPF Netfilter program is updated (#327)
- iptables: fix missing hook options when replacing the ruleset (#327)
Developers
- Add a "Contributing" documentation page with all the current
@todos (#326) - Copy the packet size from the program's argument instead of computing it (#310)
- Mark git as optional build dependency (#319)
- Fix error in quick start doc (#317)
- Fix command to rename xxd symbols (#308)
- Do not use
xxd -non EPEL9 (#307) - Store L3 proto in logs using the host byteorder (#337)
- Build libbpfilter as a shared library #332
Contributors
- @qdeslandes
- @AliGhaffarian (first contribution to the project in this release #317)
- @sudipm-mukherjee (first contribution to the project in this release #319)
Full Changelog: v0.5.0...v0.6.0