ovssnat

Documentation

Index

• Constants
• type OVSSnatClient
  • func NewSnatClient(hostIfName string, contIfName string, localIP string, snatBridgeIP string, ...) OVSSnatClient
  • func (client *OVSSnatClient) AllowIPAddressesOnSnatBridge() error
  • func (client *OVSSnatClient) AllowInboundFromHostToNC() error
  • func (client *OVSSnatClient) AllowInboundFromNCToHost() error
  • func (client *OVSSnatClient) BlockIPAddressesOnSnatBridge() error
  • func (client *OVSSnatClient) ConfigureSnatContainerInterface() error
  • func (client *OVSSnatClient) CreateSnatEndpoint(bridgeName string) error
  • func (client *OVSSnatClient) DeleteInboundFromHostToNC() error
  • func (client *OVSSnatClient) DeleteInboundFromNCToHost() error
  • func (client *OVSSnatClient) DeleteSnatEndpoint() error
  • func (client *OVSSnatClient) MoveSnatEndpointToContainerNS(netnsPath string, nsID uintptr) error
  • func (client *OVSSnatClient) SetupSnatContainerInterface() error

Constants

const (
	SnatBridgeName = "azSnatbr"
	ImdsIP         = "169.254.169.254/32"
)

Types

type OVSSnatClient

type OVSSnatClient struct {
	SkipAddressesFromBlock []string
	// contains filtered or unexported fields
}

func NewSnatClient

func NewSnatClient(hostIfName string,
	contIfName string,
	localIP string,
	snatBridgeIP string,
	hostPrimaryMac string,
	skipAddressesFromBlock []string,
	nl netlink.NetlinkInterface,
	ovsctlClient ovsctl.OvsInterface,
	plClient platform.ExecClient,
) OVSSnatClient

func (*OVSSnatClient) AllowIPAddressesOnSnatBridge

func (client *OVSSnatClient) AllowIPAddressesOnSnatBridge() error

AllowIPAddressesOnSnatBridge adds iptables rules that allows only specific Private IPs via linux bridge

func (*OVSSnatClient) AllowInboundFromHostToNC

func (client *OVSSnatClient) AllowInboundFromHostToNC() error

*

This function adds iptables rules that allows only host to NC communication and not the other way

*

func (*OVSSnatClient) AllowInboundFromNCToHost

func (client *OVSSnatClient) AllowInboundFromNCToHost() error

*

This function adds iptables rules that allows only NC to Host communication and not the other way

*

func (*OVSSnatClient) BlockIPAddressesOnSnatBridge

func (client *OVSSnatClient) BlockIPAddressesOnSnatBridge() error

BlockIPAddressesOnSnatBridge adds iptables rules that blocks all private IPs flowing via linux bridge

func (*OVSSnatClient) ConfigureSnatContainerInterface

func (client *OVSSnatClient) ConfigureSnatContainerInterface() error

func (*OVSSnatClient) CreateSnatEndpoint

func (client *OVSSnatClient) CreateSnatEndpoint(bridgeName string) error

func (*OVSSnatClient) DeleteInboundFromHostToNC

func (client *OVSSnatClient) DeleteInboundFromHostToNC() error

func (*OVSSnatClient) DeleteInboundFromNCToHost

func (client *OVSSnatClient) DeleteInboundFromNCToHost() error

func (*OVSSnatClient) DeleteSnatEndpoint

func (client *OVSSnatClient) DeleteSnatEndpoint() error

func (*OVSSnatClient) MoveSnatEndpointToContainerNS

func (client *OVSSnatClient) MoveSnatEndpointToContainerNS(netnsPath string, nsID uintptr) error

*

Move container veth inside container network namespace

*

func (*OVSSnatClient) SetupSnatContainerInterface

func (client *OVSSnatClient) SetupSnatContainerInterface() error

*

Configure Routes and setup name for container veth

*