Hello seL4 team,
I am try trying to use camkes to write a simple firewall. I am wondering if you can direct me to any existing camkes project which uses tcp/ip and network driver that I can look into as starting point. There is a seL4 based webserver but it seems to use vm and Linux.
Thank you for your time.
- Amir
+1 Please share results.
El jue., 15 jul. 2021 12:19, Amirreza Zarraby amrzar@gmail.com escribió:
Hello seL4 team,
I am try trying to use camkes to write a simple firewall. I am wondering if you can direct me to any existing camkes project which uses tcp/ip and network driver that I can look into as starting point. There is a seL4 based webserver but it seems to use vm and Linux.
Thank you for your time.
- Amir
Devel mailing list -- devel@sel4.systems To unsubscribe send an email to devel-leave@sel4.systems
There are two examples using PicoTCP in the CAmkES repository: https://github.com/seL4/camkes/tree/master/apps
There's also a firewall component that was previously used in the camkes-vm-examples cma34cr app: "camkes-vm-examples/cma34cr_centos.camkes at master · seL4/camkes-vm-examples · GitHub" https://github.com/seL4/camkes-vm-examples/blob/master/apps/x86/cma34cr_cent...
The component itself is here: "camkes-vm/components/Firewall at master · seL4/camkes-vm · GitHub" https://github.com/seL4/camkes-vm/tree/master/components/Firewall
What's in the repository is a stub that forwards all ethernet frames between a client device and ethernet device. Any firewall rules would need to be implemented by modifying this component.
There's an old pull request that a work-in-progress implementation of a firewall component in rust that aimed to support TCP/UDP filtering rules: "Simple Rust app by podhrmic · Pull Request #4 · seL4/camkes-vm · GitHub" https://github.com/seL4/camkes-vm/pull/4/files. I think a manifest and setup instructions for where this work ended up is here: "GitHub - GaloisInc/rustwall_vm: High-level repo containing manifest and recipes for building seL4 with camkes (+vm) and Rust support" https://github.com/GaloisInc/rustwall_vm
On Thu, 15 Jul 2021, 23:34 Alexander Fasching, fasching.a91@gmail.com wrote:
There are two examples using PicoTCP in the CAmkES repository: https://github.com/seL4/camkes/tree/master/apps _______________________________________________ Devel mailing list -- devel@sel4.systems To unsubscribe send an email to devel-leave@sel4.systems
-
Alexander Fasching -
Amirreza Zarraby -
Hugo V.C. -
Kent Mcleod