ovssnat

Documentation

Index

• Constants
• func AddMasqueradeRule(snatBridgeIPWithPrefix string) error
• func AddVlanDropRule() error
• func CreateSnatBridge(snatBridgeIP string, mainInterface string) error
• func DeleteMasqueradeRule() error
• func DeleteSnatBridge(bridgeName string) error
• type OVSSnatClient
  • func NewSnatClient(hostIfName string, contIfName string, localIP string, snatBridgeIP string, ...) OVSSnatClient
  • func (client *OVSSnatClient) AllowIPAddressesOnSnatBrdige() error
  • func (client *OVSSnatClient) AllowInboundFromHostToNC() error
  • func (client *OVSSnatClient) AllowInboundFromNCToHost() error
  • func (client *OVSSnatClient) BlockIPAddressesOnSnatBrdige() error
  • func (client *OVSSnatClient) ConfigureSnatContainerInterface() error
  • func (client *OVSSnatClient) CreateSnatEndpoint(bridgeName string) error
  • func (client *OVSSnatClient) DeleteInboundFromHostToNC() error
  • func (client *OVSSnatClient) DeleteInboundFromNCToHost() error
  • func (client *OVSSnatClient) DeleteSnatEndpoint() error
  • func (client *OVSSnatClient) MoveSnatEndpointToContainerNS(netnsPath string, nsID uintptr) error
  • func (client *OVSSnatClient) SetupSnatContainerInterface() error

Constants

const (
	SnatBridgeName = "azSnatbr"
	ImdsIP         = "169.254.169.254/32"
)

Functions

func AddMasqueradeRule

func AddMasqueradeRule(snatBridgeIPWithPrefix string) error

*

This function adds iptable rules that will snat all traffic that has source ip in apipa range and coming via linux bridge

*

func AddVlanDropRule

func AddVlanDropRule() error

*

Drop all vlan traffic on linux bridge

*

func CreateSnatBridge

func CreateSnatBridge(snatBridgeIP string, mainInterface string) error

*

This function creates linux bridge which will be used for outbound connectivity by NCs

*

func DeleteMasqueradeRule

func DeleteMasqueradeRule() error

func DeleteSnatBridge

func DeleteSnatBridge(bridgeName string) error

Types

type OVSSnatClient

type OVSSnatClient struct {
	SkipAddressesFromBlock []string
	// contains filtered or unexported fields
}

func NewSnatClient

func NewSnatClient(hostIfName string, contIfName string, localIP string, snatBridgeIP string, skipAddressesFromBlock []string) OVSSnatClient

func (*OVSSnatClient) AllowIPAddressesOnSnatBrdige

func (client *OVSSnatClient) AllowIPAddressesOnSnatBrdige() error

*

This fucntion adds iptables rules  that allows only specific Private IPs via linux bridge

*

func (*OVSSnatClient) AllowInboundFromHostToNC

func (client *OVSSnatClient) AllowInboundFromHostToNC() error

*

This function adds iptables rules that allows only host to NC communication and not the other way

*

func (*OVSSnatClient) AllowInboundFromNCToHost

func (client *OVSSnatClient) AllowInboundFromNCToHost() error

*

This function adds iptables rules that allows only NC to Host communication and not the other way

*

func (*OVSSnatClient) BlockIPAddressesOnSnatBrdige

func (client *OVSSnatClient) BlockIPAddressesOnSnatBrdige() error

*

This fucntion adds iptables rules  that blocks all private IPs flowing via linux bridge

*

func (*OVSSnatClient) ConfigureSnatContainerInterface

func (client *OVSSnatClient) ConfigureSnatContainerInterface() error

func (*OVSSnatClient) CreateSnatEndpoint

func (client *OVSSnatClient) CreateSnatEndpoint(bridgeName string) error

func (*OVSSnatClient) DeleteInboundFromHostToNC

func (client *OVSSnatClient) DeleteInboundFromHostToNC() error

func (*OVSSnatClient) DeleteInboundFromNCToHost

func (client *OVSSnatClient) DeleteInboundFromNCToHost() error

func (*OVSSnatClient) DeleteSnatEndpoint

func (client *OVSSnatClient) DeleteSnatEndpoint() error

func (*OVSSnatClient) MoveSnatEndpointToContainerNS

func (client *OVSSnatClient) MoveSnatEndpointToContainerNS(netnsPath string, nsID uintptr) error

*

Move container veth inside container network namespace

*

func (*OVSSnatClient) SetupSnatContainerInterface

func (client *OVSSnatClient) SetupSnatContainerInterface() error

*

Configure Routes and setup name for container veth

*