mirror of
https://github.com/CyberMind-FR/secubox-deb.git
synced 2026-07-29 12:34:38 +00:00
CyberMind-FR
de67714c8d
New FastAPI modules migrated from OpenWrt: - secubox-ad-guard: Adware/tracker detection with device-type stats - secubox-ndpid: nDPId DPI with JA3/JA4 fingerprinting - secubox-ai-gateway: OpenAI-compatible local AI API - secubox-localrecall: Local RAG with Qdrant/Ollama - secubox-master-link: Node mesh management - secubox-threat-analyst: AI-powered threat analysis - secubox-cve-triage: NVD/EPSS CVE triage workflow - secubox-network-anomaly: IQR-based anomaly detection - secubox-dns-guard: DNS filtering with RPZ - secubox-iot-guard: IoT device security & quarantine - secubox-config-advisor: ANSSI CSPN compliance checks - secubox-mcp-server: MCP protocol for Claude integration - secubox-identity: User/role management - secubox-system-hub: System health & remote support C library: - zkp-hamiltonian: Zero-Knowledge Proof library (Blum 1986) VM configuration: - MOCHAbin-like 7-NIC topology for libvirt testing Dev environment: - VSCode tasks and extensions for SecuBox development - Claude Code CLAUDE.md project instructions Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
41 lines
1.1 KiB
XML
41 lines
1.1 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<!--
|
|
SecuBox WAN Network
|
|
|
|
Primary WAN bridge for SecuBox VM.
|
|
This network can be:
|
|
1. Bridged to a physical interface for production use
|
|
2. Isolated for development/testing
|
|
3. Connected to host's internet via NAT
|
|
|
|
The VM's eth0 connects here (equivalent to MOCHAbin's 10G SFP+)
|
|
-->
|
|
<network>
|
|
<name>secubox-wan</name>
|
|
<uuid>11111111-1111-1111-1111-111111111111</uuid>
|
|
|
|
<!-- NAT mode for development - change to bridge mode for production -->
|
|
<forward mode="nat">
|
|
<nat>
|
|
<port start="1024" end="65535"/>
|
|
</nat>
|
|
</forward>
|
|
|
|
<bridge name="virbr-sbwan" stp="on" delay="0"/>
|
|
|
|
<!-- WAN subnet (not typically used - DHCP from upstream) -->
|
|
<ip address="10.200.0.1" netmask="255.255.255.0">
|
|
<dhcp>
|
|
<range start="10.200.0.100" end="10.200.0.200"/>
|
|
<host mac="52:54:00:sb:00:00" name="secubox-wan" ip="10.200.0.10"/>
|
|
</dhcp>
|
|
</ip>
|
|
|
|
<!-- IPv6 support -->
|
|
<ip family="ipv6" address="fd00:200::1" prefix="64">
|
|
<dhcp>
|
|
<range start="fd00:200::100" end="fd00:200::1ff"/>
|
|
</dhcp>
|
|
</ip>
|
|
</network>
|