Receptor firewall playground

README.md

myreceptornode2 <-- myreceptornode1

receptor --config example_configs/n1.yml
receptor --config example_configs/n2.yml
receptorctl --socket n2.sock ping myreceptornode1
Error: timeout

Success! The above timeout is due to the firewall rules feature.

Note that the firewall rule that restricts myreceptornode1 from issuing commands to myreceptornode2 is fully expressed in myreceptornode2 config. This is desirable. myreceptornode1 could be a bad actor or be compromised and disregard local firewall rules.

n1.yml

---
- log-level: debug
- control-service:
    service: control
    filename: n1.sock
- tcp-listener:
    port: 9900
- work-command:
    worktype: worker
    command: ansible-runner
    params: worker
- node:
    id: myreceptornode1

n2.yml

---
- log-level: debug
- control-service:
    service: control
    filename: n2.sock
- tcp-peer:
    address: myreceptornode1:9900
- work-command:
    worktype: worker
    command: ansible-runner
    params: worker
- node:
   id: myreceptornode2
   firewallrules:
     - "ToNode=myreceptornode1:drop"