net/igmp-proxy: expose per-interface multicast whitelist in the GUI

Aperta
  • Qualcosa non va?
#5,755 0 commenti 0 reazioni 0 assegnatari Vedi su GitHub

I maintainer di solito rispondono entro 1 giorno

Nessuno ha ancora preso questa issue.

Valutazione

Difficoltà
3/5
Tempo stimato
1-2 giorni
Idoneità per principianti
76/100
Tipo di issue
Funzionalità
Chiarezza
Specificata chiaramente
Stato di attività
Attiva
Stack tecnologico
php
Ambito
frontend, networking

Direzione di ricerca

Start at /services_igmpproxy_edit.php and compare the requested Whitelist rows with the existing Network(s) layout. Review the attached patch and trace the plugin's persistent storage and configuration generation paths. Done means upstream and downstream interfaces accept validated multicast whitelist entries, preserve empty-field behavior, and regenerate the expected configuration.

Scritto dal modello di indicizzazione a partire dal testo della issue.

Descrizione

Important notices

Before you add a new report, we ask you kindly to acknowledge the following:

Is your feature request related to a problem? Please describe.

The IGMP Proxy GUI does not expose igmpproxy's whitelist option. I need to restrict the multicast groups allowed on individual interfaces without manually editing the generated configuration.

This is useful in networks where multicast serves several purposes, such as IPTV and local services. An upstream whitelist limits the multicast groups requested on the ISP’s IPTV VLAN, preventing requests for unrelated local groups from being forwarded to the ISP.

The existing Network(s) field configures altnet, which controls source networks rather than multicast group whitelisting.

Describe the solution you'd like

Add a Whitelist section below Network(s) in the interface editor at /services_igmpproxy_edit.php, available for both upstream and downstream interfaces.

It should follow the existing Network(s) layout: a Network input, a CIDR dropdown, and add/remove buttons for each row.

Leaving the field empty should preserve the existing behavior of allowing all multicast groups.

Describe alternatives you've considered

Manually editing /usr/local/etc/igmpproxy.conf, but those changes are overwritten when OPNsense regenerates the configuration. A GUI setting would make the whitelist persistent and easier to maintain.

Additional context

A patch is available that adds GUI input, validation, persistent storage, and configuration generation. It rejects invalid or non-multicast ranges and removes duplicate entries.

I also successfully applied and tested the patch on my live OPNsense system.

Image
Lingua principale
PHP
Stelle
1.2k
Fork
905
Merge medio
4g 12h
PR unite (30g)
22

Preparare l'ambiente

Come iniziare

  1. Leggi tutta la issue e poi la guida ai contributi del progetto.
  2. Commenta sulla issue per dire che te ne occupi tu — evita che due persone facciano lo stesso lavoro.
  3. Fai un fork del repository e lavora su un branch.
  4. Apri una pull request che faccia riferimento al numero della issue.

Altre issue di opnsense/plugins

Tutte le issue di opnsense/plugins

Issue simili

Altre issue su PHP

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.