CloudVE / CloudVE/cloudbridge

Firewall rule uniformity

Open
#86 3 comments 0 reactions 0 assignees View on GitHub
backlog design decision
Dominant language
Python
Stars
117
Forks
51
Avg merge
9h 17m
Merged PRs (30d)
5

Description

Firewall rules can currently be one of TCP, UDP or ICMP. However, Azure does not support a direct ICMP property: https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-nsg

Instead, you have to allow all traffic with * and explicitly disable TCP and UDP to simulate ICMP.

GCE seems to support ICMP.

Potential solutions:
1. Allow TCP and UDP only
2. Attempt to simulate ICMP in Azure.

Contributor guide

No contributing guide indexed for this repository

Research direction

No file or test is named. Begin with the firewall-rule interface described in the issue and the linked Azure NSG documentation, then compare it with GCE's stated ICMP support. Done requires choosing and implementing a consistent cross-cloud behavior between allowing only TCP/UDP and simulating ICMP in Azure.

Written by the indexing model from the issue text.

Assessment

Tech stack
azure, gcp, python
Domain
cloud, networking, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.