Reserve an explicit Lazaret network topology
Launch slirp4netns on 10.137.54.0/24, update its gateway and DNS routes, and refuse configured allows or specific denies that collide with the enclosing Lazaret /23 while preserving broad RFC 1918 denial.
This commit is contained in:
parent
73e3e9fdee
commit
1c86e1aa0e
1 changed files with 87 additions and 7 deletions
|
|
@ -344,7 +344,7 @@ impl NetworkFixture {
|
|||
)?;
|
||||
fs::write(
|
||||
runtime_domain.join("state-anchor/runtime-files/resolv.conf"),
|
||||
b"nameserver 10.0.2.3\n",
|
||||
b"nameserver 10.137.54.3\n",
|
||||
)?;
|
||||
let host_loopback = TcpListener::bind((Ipv4Addr::LOCALHOST, 0))?;
|
||||
let host_loopback_port = host_loopback.local_addr()?.port();
|
||||
|
|
|
|||
Loading…
Reference in a new issue