[Bubblewrap/LXC] Address common network policy gaps - model 1 - #631

Closed

Darren Hoehna (dhoehna) wants to merge 9 commits into

microsoft:mainfrom

dhoehna:user/dahoehna/lxc-net-model1-ipv6-cidr-port-proto

Commits on Jul 10, 2026

[LXC/Bwrap] Network model 1: IPv6+CIDR, port, and protocol filtering (AB#62830559)

Darren Hoehna (dhoehna)
and
Copilot
committed
8e87c5b

Commits on Jul 13, 2026

Address Copilot review feedback on network_iptables (PR #631)

Darren Hoehna (dhoehna)
and
Copilot
committed
0b8560b

Commits on Jul 15, 2026

Merge microsoft/mxc main (47a172c) into lxc-net-model1-ipv6-cidr-port-proto

Darren Hoehna (dhoehna)
and
Copilot
committed
30384c8

Commits on Jul 16, 2026

Address net-model-1 review feedback: ip6tables probe, apply rollback, fail-closed egress default

Darren Hoehna (dhoehna)
and
Copilot
committed
96af8f9

Commits on Jul 20, 2026

Commits on Jul 31, 2026

test(lxc): run the IPv6/CIDR network config in the LXC suite

Darren Hoehna (dhoehna)
and
Copilot
committed
1c794d7
Add egress port ranges, invalid-CIDR coverage, and correct LXC network docs

Darren Hoehna (dhoehna)
and
Copilot
committed
a00c75c
Reject inverted egress port ranges instead of skipping them

Darren Hoehna (dhoehna)
and
Copilot
committed
2e1a249