[LXC] Filter IPv6 destinations and CIDR ranges in firewall mode (AB#62830559) - #724

Open

Darren Hoehna (dhoehna) wants to merge 21 commits into

microsoft:mainfrom

dhoehna:user/dahoehna/lxc-net-ipv6-cidr

Commits on Jul 31, 2026

[LXC] Filter IPv6 destinations and CIDR ranges in firewall mode (AB#62830559)

Darren Hoehna (dhoehna)
and
Copilot
committed
e68567e
[LXC] Add spec-derived unit and E2E tests for IPv6/CIDR filtering (AB#62830559)
Darren Hoehna (dhoehna)
committed
ae5b5e1
[LXC] Close a false negative in the IPv6 DNS resolution tests (AB#62830559)
Darren Hoehna (dhoehna)
committed
5f4325a
[LXC] Restore the quarantined CIDR prefix test instead of relaxing it (AB#62830559)
Darren Hoehna (dhoehna)
committed
a19c254
[LXC] Fix empty-host and plus-prefix destination parsing (AB#62830559)

Darren Hoehna (dhoehna)
and
Copilot
committed
e9f23a1
[LXC] Make the four network E2E scripts actually run (AB#62830559)

Darren Hoehna (dhoehna)
and
Copilot
committed
52073d2

Commits on Aug 4, 2026

Commits on Aug 6, 2026

Address review feedback on IPv6/CIDR egress filtering

authored and
Darren Hoehna
committed
c62cd00
Test the signal-time ownership guard rather than its predicate

Darren Hoehna (dhoehna)
and
Copilot
committed
91277ca
Keep ownership of iptables state a failed rollback could not remove

Darren Hoehna (dhoehna)
and
Copilot
committed
3969778
Keep ownership when the removal path's own commands fail

Darren Hoehna (dhoehna)
and
Copilot
committed
b974fb1
Refuse a second apply while the first still owns firewall state

Darren Hoehna (dhoehna)
and
Copilot
committed
6728e84

Commits on Aug 7, 2026