With the runtime environment it is possible to use runtime for settings that should only be active for a limited amount of time. Then the permanent configuration will be loaded again. The runtime configuration is only valid up to the next service reload and restart or to a system reboot. The separation of the runtime and permanent configuration makes it possible to do evaulation and tests in runtime. The interface is complete and is used for the firewall configuration tools firewall-cmd, firewall-config and firewall-applet. With the firewalld D-Bus interface it is simple for services, applications and also users to adapt firewall settings. No restart of the service or daemon is needed. Benefits of using firewalldĬhanges can be done immediately in the runtime environment. It also provides an interface for services or applications to add firewall rules directly. There is a separation of runtime and permanent configuration options. It has support for IPv4, IPv6 firewall settings, ethernet bridges and IP sets.
Firewalld provides a dynamically managed firewall with support for network/firewall zones that define the trust level of network connections or interfaces.
0 kommentar(er)
