Network Firewall

Abstract

---

OpenGFW

---

• config.yaml

io:
  queueSize: 1024
  rcvBuf: 4194304
  sndBuf: 4194304
  local: false 
  rst: false 
 
workers:
  count: 4 
  queueSize: 64
  tcpMaxBufferedPagesTotal: 65536
  tcpMaxBufferedPagesPerConn: 16
  tcpTimeout: 10m 
  udpMaxStreams: 4096
 
# The path to load specific local geoip/geosite db files.
# If not set, they will be automatically downloaded from https://github.com/Loyalsoldier/v2ray-rules-dat
# ruleset:
#   geoip: geoip.dat
#   geosite: geosite.dat

• local: false, because OpenGFW runs on FORWARD chain (one OpenWRT)

  
  

• rule.yaml

- name: log horny people log: true expr: let sni = string(tls?.req?.sni); sni contains "porn" || sni contains "hentai"