v0.5.1 - Allow source-IP restrictions on WWTC rules
Summary
This release only includes one small change: you can now specify IP-ranges in wider-world-to-container rules, allowing you to restrict the source from which a service can be reached.
Other than that various dependencies have been updated.
Installation
While you can use Cargo to install dfw
as a binary, using the Docker image is the preferred
way to go, especially if you don't want to install Rust and Cargo on your host:
$ docker pull pitkley/dfw:0.5.1
$ docker run -d \
--name=dfw \
--restart=unless-stopped \
-v /var/run/docker.sock:/var/run/docker.sock:ro \
-v /path/to/your/config:/config \
--net host --cap-add=NET_ADMIN \
pitkley/dfw:0.5.1 --config-path /config
This will download a lightweight image, coming in at under 6 MB, and subsequently run it using
your configuration.