policy

Overview ¶

Package policy wires the `solo-provisioner network policy` verbs to the internal/network/policy manager. It is a generic, category-agnostic primitive: the verbs manage per-category classification and ACL rules in the `inet weaver-workload-policy` nftables table (the workload traffic plane), keyed only on the operator-supplied --name, --stamp/--deny, --ports, and --cidrs. It knows nothing about block/consensus/mirror/relay nodes; today `block node install` is its only caller, but nothing in this package assumes that.