diff --git a/src/zfw.c b/src/zfw.c index 64465dc..4b5a794 100644 --- a/src/zfw.c +++ b/src/zfw.c @@ -189,43 +189,43 @@ int range_fd = -1; union bpf_attr egress_range_map; int egress_range_fd = -1; -const char *tproxy_map_path = "/sys/fs/bpf/tc/globals/zt_tproxy_map"; -const char *tproxy6_map_path = "/sys/fs/bpf/tc/globals/zt_tproxy6_map"; -const char *count_map_path = "/sys/fs/bpf/tc/globals/tuple_count_map"; -const char *count6_map_path = "/sys/fs/bpf/tc/globals/tuple6_count_map"; -const char *diag_map_path = "/sys/fs/bpf/tc/globals/diag_map"; -const char *if_map_path = "/sys/fs/bpf/tc/globals/ifindex_ip_map"; -const char *if6_map_path = "/sys/fs/bpf/tc/globals/ifindex_ip6_map"; -const char *matched6_map_path ="/sys/fs/bpf/tc/globals/matched6_map"; -const char *matched_map_path = "/sys/fs/bpf/tc//globals/matched_map"; -const char *egress_matched6_map_path ="/sys/fs/bpf/tc/globals/egress_matched6_map"; -const char *egress_matched_map_path = "/sys/fs/bpf/tc//globals/egress_matched_map"; -const char *tcp_map_path = "/sys/fs/bpf/tc/globals/tcp_map"; -const char *tcp_ingress_map_path = "/sys/fs/bpf/tc/globals/tcp_ingress_map"; -const char *udp_map_path = "/sys/fs/bpf/tc/globals/udp_map"; -const char *udp_ingress_map_path = "/sys/fs/bpf/tc/globals/udp_ingress_map"; -const char *tun_map_path = "/sys/fs/bpf/tc/globals/tun_map"; -const char *if_tun_map_path = "/sys/fs/bpf/tc/globals/ifindex_tun_map"; -const char *transp_map_path = "/sys/fs/bpf/tc/globals/zet_transp_map"; -const char *rb_map_path = "/sys/fs/bpf/tc/globals/rb_map"; -const char *ddos_saddr_map_path = "/sys/fs/bpf/tc/globals/ddos_saddr_map"; -const char *ddos_dport_map_path = "/sys/fs/bpf/tc/globals/ddos_dport_map"; -const char *syn_count_map_path = "/sys/fs/bpf/tc/globals/syn_count_map"; -const char *tp_ext_map_path = "/sys/fs/bpf/tc/globals/tproxy_extension_map"; -const char *if_list_ext_map_path = "/sys/fs/bpf/tc/globals/if_list_extension_map"; -const char *wildcard_port_map_path = "/sys/fs/bpf/tc/globals/wildcard_port_map"; -const char *range_map_path = "/sys/fs/bpf/tc/globals/range_map"; -const char *egress_range_map_path = "/sys/fs/bpf/tc/globals/egress_range_map"; -const char *egress_if_list_ext_map_path = "/sys/fs/bpf/tc/globals/egress_if_list_extension_map"; -const char *egress_ext_map_path = "/sys/fs/bpf/tc/globals/egress_extension_map"; -const char *egress_map_path = "/sys/fs/bpf/tc/globals/zt_egress_map"; -const char *egress6_map_path = "/sys/fs/bpf/tc/globals/zt_egress6_map"; -const char *egress_count_map_path = "/sys/fs/bpf/tc/globals/egress_count_map"; -const char *egress_count6_map_path = "/sys/fs/bpf/tc/globals/egress6_count_map"; -const char *masquerade_map_path = "/sys/fs/bpf/tc/globals/masquerade_map"; -const char *masquerade_reverse_map_path = "/sys/fs/bpf/tc/globals/masquerade_reverse_map"; -const char *icmp_masquerade_map_path = "/sys/fs/bpf/tc/globals/icmp_masquerade_map"; -const char *icmp_echo_map_path = "/sys/fs/bpf/tc/globals/icmp_echo_map"; +const char *tproxy_map_path = "/run/zfw/maps/tc/globals/zt_tproxy_map"; +const char *tproxy6_map_path = "/run/zfw/maps/tc/globals/zt_tproxy6_map"; +const char *count_map_path = "/run/zfw/maps/tc/globals/tuple_count_map"; +const char *count6_map_path = "/run/zfw/maps/tc/globals/tuple6_count_map"; +const char *diag_map_path = "/run/zfw/maps/tc/globals/diag_map"; +const char *if_map_path = "/run/zfw/maps/tc/globals/ifindex_ip_map"; +const char *if6_map_path = "/run/zfw/maps/tc/globals/ifindex_ip6_map"; +const char *matched6_map_path ="/run/zfw/maps/tc/globals/matched6_map"; +const char *matched_map_path = "/run/zfw/maps/tc//globals/matched_map"; +const char *egress_matched6_map_path ="/run/zfw/maps/tc/globals/egress_matched6_map"; +const char *egress_matched_map_path = "/run/zfw/maps/tc//globals/egress_matched_map"; +const char *tcp_map_path = "/run/zfw/maps/tc/globals/tcp_map"; +const char *tcp_ingress_map_path = "/run/zfw/maps/tc/globals/tcp_ingress_map"; +const char *udp_map_path = "/run/zfw/maps/tc/globals/udp_map"; +const char *udp_ingress_map_path = "/run/zfw/maps/tc/globals/udp_ingress_map"; +const char *tun_map_path = "/run/zfw/maps/tc/globals/tun_map"; +const char *if_tun_map_path = "/run/zfw/maps/tc/globals/ifindex_tun_map"; +const char *transp_map_path = "/run/zfw/maps/tc/globals/zet_transp_map"; +const char *rb_map_path = "/run/zfw/maps/tc/globals/rb_map"; +const char *ddos_saddr_map_path = "/run/zfw/maps/tc/globals/ddos_saddr_map"; +const char *ddos_dport_map_path = "/run/zfw/maps/tc/globals/ddos_dport_map"; +const char *syn_count_map_path = "/run/zfw/maps/tc/globals/syn_count_map"; +const char *tp_ext_map_path = "/run/zfw/maps/tc/globals/tproxy_extension_map"; +const char *if_list_ext_map_path = "/run/zfw/maps/tc/globals/if_list_extension_map"; +const char *wildcard_port_map_path = "/run/zfw/maps/tc/globals/wildcard_port_map"; +const char *range_map_path = "/run/zfw/maps/tc/globals/range_map"; +const char *egress_range_map_path = "/run/zfw/maps/tc/globals/egress_range_map"; +const char *egress_if_list_ext_map_path = "/run/zfw/maps/tc/globals/egress_if_list_extension_map"; +const char *egress_ext_map_path = "/run/zfw/maps/tc/globals/egress_extension_map"; +const char *egress_map_path = "/run/zfw/maps/tc/globals/zt_egress_map"; +const char *egress6_map_path = "/run/zfw/maps/tc/globals/zt_egress6_map"; +const char *egress_count_map_path = "/run/zfw/maps/tc/globals/egress_count_map"; +const char *egress_count6_map_path = "/run/zfw/maps/tc/globals/egress6_count_map"; +const char *masquerade_map_path = "/run/zfw/maps/tc/globals/masquerade_map"; +const char *masquerade_reverse_map_path = "/run/zfw/maps/tc/globals/masquerade_reverse_map"; +const char *icmp_masquerade_map_path = "/run/zfw/maps/tc/globals/icmp_masquerade_map"; +const char *icmp_echo_map_path = "/run/zfw/maps/tc/globals/icmp_echo_map"; char doc[] = "zfw -- ebpf firewall configuration tool"; const char *if_map_path; char *diag_interface;