iptables

Documentation

Index

• Constants
• Variables
• func AppendIptableRule(version, tableName, chainName, match, target string) error
• func ChainExists(version, tableName, chainName string) bool
• func CreateChain(version, tableName, chainName string) error
• func DeleteIptableRule(version, tableName, chainName, match, target string) error
• func InsertIptableRule(version, tableName, chainName, match, target string) error
• func RuleExists(version, tableName, chainName, match, target string) bool

Constants

const (
	CNIInputChain  = "AZURECNIINPUT"
	CNIOutputChain = "AZURECNIOUTPUT"
)

cni iptable chains

const (
	Input       = "INPUT"
	Output      = "OUTPUT"
	Forward     = "FORWARD"
	Prerouting  = "PREROUTING"
	Postrouting = "POSTROUTING"
)

standard iptable chains

const (
	Filter = "filter"
	Nat    = "nat"
	Mangle = "mangle"
)

Standard Table names

const (
	Accept     = "ACCEPT"
	Drop       = "DROP"
	Masquerade = "MASQUERADE"
)

target

const (
	Insert = "I"
	Append = "A"
	Delete = "D"
)

actions

const (
	Established = "ESTABLISHED"
	Related     = "RELATED"
)

states

const (
	V4 = "4"
	V6 = "6"
)

Variables

var (
	DisableIPTableLock bool
)

Functions

func AppendIptableRule

func AppendIptableRule(version, tableName, chainName, match, target string) error

Append iptable rule at end of iptable chain

func ChainExists

func ChainExists(version, tableName, chainName string) bool

check if iptable chain alreay exists

func CreateChain

func CreateChain(version, tableName, chainName string) error

create new iptable chain under specified table name

func DeleteIptableRule

func DeleteIptableRule(version, tableName, chainName, match, target string) error

Delete matched iptable rule

func InsertIptableRule

func InsertIptableRule(version, tableName, chainName, match, target string) error

Insert iptable rule at beginning of iptable chain

func RuleExists

func RuleExists(version, tableName, chainName, match, target string) bool

check if iptable rule alreay exists