iptm

Documentation

Index

• Variables
• func NewFakeIptOperationShim() *fakeIptOperationShim
• func NewIptOperationShim() *iptOperationShim
• type IptEntry
• type IptablesManager
  • func NewIptablesManager(exec utilexec.Interface, io ioshim, placeAzureChainFirst bool) *IptablesManager
  • func (iptMgr *IptablesManager) Add(entry *IptEntry) error
  • func (iptMgr *IptablesManager) Delete(entry *IptEntry) error
  • func (iptMgr *IptablesManager) InitNpmChains() error
  • func (iptMgr *IptablesManager) ReconcileIPTables(stopCh <-chan struct{})
  • func (iptMgr *IptablesManager) UninitNpmChains() error

Variables

var (
	// IptablesAzureChainList contains list of all NPM chains
	IptablesAzureChainList = []string{
		util.IptablesAzureChain,
		util.IptablesAzureAcceptChain,
		util.IptablesAzureIngressChain,
		util.IptablesAzureEgressChain,
		util.IptablesAzureIngressPortChain,
		util.IptablesAzureIngressFromChain,
		util.IptablesAzureEgressPortChain,
		util.IptablesAzureEgressToChain,
		util.IptablesAzureIngressDropsChain,
		util.IptablesAzureEgressDropsChain,
	}
)

Functions

func NewFakeIptOperationShim

func NewFakeIptOperationShim() *fakeIptOperationShim

TODO: we can use this method down the road for testing iptables restore

func NewIptOperationShim

func NewIptOperationShim() *iptOperationShim

Types

type IptEntry

type IptEntry struct {
	Command               string
	Name                  string
	Chain                 string
	Flag                  string
	LockWaitTimeInSeconds string
	Specs                 []string
}

IptEntry represents an iptables rule.

type IptablesManager

type IptablesManager struct {
	OperationFlag string
	// contains filtered or unexported fields
}

IptablesManager stores iptables entries.

func NewIptablesManager

func NewIptablesManager(exec utilexec.Interface, io ioshim, placeAzureChainFirst bool) *IptablesManager

NewIptablesManager creates a new instance for IptablesManager object.

func (*IptablesManager) Add

func (iptMgr *IptablesManager) Add(entry *IptEntry) error

Add adds a rule in iptables.

func (*IptablesManager) Delete

func (iptMgr *IptablesManager) Delete(entry *IptEntry) error

Delete removes a rule in iptables.

func (*IptablesManager) InitNpmChains

func (iptMgr *IptablesManager) InitNpmChains() error

InitNpmChains initializes Azure NPM chains in iptables.

func (*IptablesManager) ReconcileIPTables

func (iptMgr *IptablesManager) ReconcileIPTables(stopCh <-chan struct{})

func (*IptablesManager) UninitNpmChains

func (iptMgr *IptablesManager) UninitNpmChains() error

UninitNpmChains uninitializes Azure NPM chains in iptables.