Skip to content

A socket proxy for the Charon/Vici protocol. That enables command filtering

License

Notifications You must be signed in to change notification settings

spheromak/vici-proxy

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

6 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

StrongSwan VICI proxy

A small proxy to allow finer control over the VICI socket.

The intent is to restrict what commands can be sent to VICI in order to allow unprivileged access to some commands.

Usage

Simple usage should be to invoke with an allow-list that enables stats

vici-proxy -a stats

Arguments

--allow -a  The allow list can be specified multiple times. Keywords match vici commands (default ``)
--deny -d The deny list can be specified multiple times. Keywords match vici commands, special keyword `all` denys all. Allow rules apply first. (default `all`)
--listen -l The socket file to listen on. (defaults: /var/run/proxy.vici)

TODO:

  • AllowList of commands
  • authentication
  • DenyList of commands

About

A socket proxy for the Charon/Vici protocol. That enables command filtering

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages