Skip to content

v0.8.4-rc

@fallard84 fallard84 tagged this 02 Jan 22:07
- Queue all new connections to the agent and drop dependency on
tetragon. Also removed dependency on nftables for the allowlist.
Nftables will queue all new connections and all packets to/from DNS port
and the agent will be responsible to allow non-DNS connections to
dynamically allowed IPs.
- Identify process responsible for DNS queries and new TCP connections.
Also support process running in docker containers. Collecting process
info can be disabled using option `collect-process-info`.
- Improve the bullfrog results in the job summary using a table format
- Allow TCP handshake for DNS-over-TCP to untrusted DNS servers to
identify the domain in the payload
- Capture processing time of each packet handled by the agent to provide
more visibility into the performance impact of bullfrog.

- Refactored the agent code to move the core business logic outside the
main package to improve testability
- Increased test coverage in the action and agent
- Simplified the action post-processing since we don't need to correlate
decisions from the agent and tetragon logs.
- Bumped agent to go 1.24
- Fixed vagrant provisioning to allow building the go app inside vagrant
- Added all required build dependency in devbox
Assets 2
Loading