iptables

Documentation

Index

• Constants
• Variables
• type Client
  • func NewClient() *Client
  • func (c *Client) AppendIptableRule(version, tableName, chainName, match, target string) error
  • func (c *Client) ChainExists(version, tableName, chainName string) bool
  • func (c *Client) CreateChain(version, tableName, chainName string) error
  • func (c *Client) DeleteIptableRule(version, tableName, chainName, match, target string) error
  • func (c *Client) GetAppendIptableRuleCmd(version, tableName, chainName, match, target string) IPTableEntry
  • func (c *Client) GetCreateChainCmd(version, tableName, chainName string) IPTableEntry
  • func (c *Client) GetInsertIptableRuleCmd(version, tableName, chainName, match, target string) IPTableEntry
  • func (c *Client) InsertIptableRule(version, tableName, chainName, match, target string) error
  • func (c *Client) RuleExists(version, tableName, chainName, match, target string) bool
  • func (c *Client) RunCmd(version, params string) error
• type IPTableEntry

Constants

const (
	CNIInputChain  = "AZURECNIINPUT"
	CNIOutputChain = "AZURECNIOUTPUT"
)

cni iptable chains

const (
	Input       = "INPUT"
	Output      = "OUTPUT"
	Forward     = "FORWARD"
	Prerouting  = "PREROUTING"
	Postrouting = "POSTROUTING"
	Swift       = "SWIFT"
	Snat        = "SNAT"
	Return      = "RETURN"
)

standard iptable chains

const (
	Filter = "filter"
	Nat    = "nat"
	Mangle = "mangle"
)

Standard Table names

const (
	Accept     = "ACCEPT"
	Drop       = "DROP"
	Masquerade = "MASQUERADE"
)

target

const (
	Insert = "I"
	Append = "A"
	Delete = "D"
)

actions

const (
	Established = "ESTABLISHED"
	Related     = "RELATED"
)

states

const (
	V4 = "4"
	V6 = "6"
)

const (
	DNSPort  = 53
	HTTPPort = 80
)

known ports

const (
	UDP = "udp"
	TCP = "tcp"
)

known protocols

Variables

var DisableIPTableLock bool

Types

type Client

type Client struct{}

func NewClient

func NewClient() *Client

func (*Client) AppendIptableRule

func (c *Client) AppendIptableRule(version, tableName, chainName, match, target string) error

Append iptable rule at end of iptable chain

func (*Client) ChainExists

func (c *Client) ChainExists(version, tableName, chainName string) bool

check if iptable chain alreay exists

func (*Client) CreateChain

func (c *Client) CreateChain(version, tableName, chainName string) error

create new iptable chain under specified table name

func (*Client) DeleteIptableRule

func (c *Client) DeleteIptableRule(version, tableName, chainName, match, target string) error

Delete matched iptable rule

func (*Client) GetAppendIptableRuleCmd

func (c *Client) GetAppendIptableRuleCmd(version, tableName, chainName, match, target string) IPTableEntry

func (*Client) GetCreateChainCmd

func (c *Client) GetCreateChainCmd(version, tableName, chainName string) IPTableEntry

func (*Client) GetInsertIptableRuleCmd

func (c *Client) GetInsertIptableRuleCmd(version, tableName, chainName, match, target string) IPTableEntry

func (*Client) InsertIptableRule

func (c *Client) InsertIptableRule(version, tableName, chainName, match, target string) error

Insert iptable rule at beginning of iptable chain

func (*Client) RuleExists

func (c *Client) RuleExists(version, tableName, chainName, match, target string) bool

check if iptable rule alreay exists

func (*Client) RunCmd

func (c *Client) RunCmd(version, params string) error

Run iptables command

type IPTableEntry

type IPTableEntry struct {
	Version string
	Params  string
}