implement firewall

Author: vlad9486

Cargo.lock

@@ -104,6 +104,7 @@ Before running, you can use environment variables for configuration:
 * `DRY`. Set any value (for example `DRY=1`) to disable BPF. This is useful for inspecting the database.
 * `HTTPS_KEY_PATH` and `HTTPS_CERT_PATH`. By default, the variables are not set. Set the path to crypto stuff in order to enable them (https).
 * `DEBUGGER_INDEX_LEDGER_HASH`. By default it is disabled, set any value to enable indexing ledger hash, it may be cpu expensive.
+* `FIREWALL_INTERFACE`. Set interface name where firewall will be attached. Default is `eth0`.
 
 Line in log `libbpf: BTF loading error: -22` may be ignored. It is because we wrote BPF module in Rust, which generate incompatible debug information. 
 

README.md

@@ -30,6 +30,7 @@ env_logger = { version = "0.10.0", default-features = false, optional = true }
 hex = { version = "0.4.3", optional = true }
 libbpf-sys = { version = "1.0.4", optional = true }
 libc = { version = "0.2.138", optional = true }
+network-types = { version = "0.0.4", optional = true }
 
 serde = { version = "1.0", optional = true }
 serde_json = { version = "1.0", optional = true }
@@ -42,7 +43,7 @@ simulator = { path = "../simulator", optional = true }
 
 [features]
 default = ["user"]
-kern = ["ebpf-kern/macros", "typenum"]
+kern = ["ebpf-kern/macros", "typenum", "network-types"]
 user = [
     "ebpf-user/macros",
     "ctrlc/termination",