config

Documentation

Index

• Variables
• type Config
• type IPRouteConfig
  • func (r IPRouteConfig) Ensure(enabled bool) error
• type IPRuleConfig
  • func (r IPRuleConfig) Ensure(enabled bool) error
• type IPTablesChainSpec
• type IPTablesRuleConfig
  • func (r IPTablesRuleConfig) Ensure(enabled bool) error
• type IPTablesRuleSpec
• type Set
• type SysctlConfig
  • func (s SysctlConfig) Ensure(enabled bool) error

Variables

var ExcludeDNSIPRuleConfigs = []Config{
	IPRuleConfig{
		Rule: netlink.Rule{
			Table:             unix.RT_TABLE_MAIN,
			Priority:          hairpinDNSRequestRulePriority,
			Dport:             netlink.NewRulePortRange(53, 53),
			SuppressIfgroup:   -1,
			SuppressPrefixlen: -1,
			Mark:              -1,
			Mask:              -1,
			Goto:              -1,
			Flow:              -1,
		},
		RuleAdd:  netlink.RuleAdd,
		RuleDel:  netlink.RuleDel,
		RuleList: netlink.RuleList,
	},
	IPRuleConfig{
		Rule: netlink.Rule{
			Table:             unix.RT_TABLE_MAIN,
			Priority:          hairpinDNSResponseRulePriority,
			Sport:             netlink.NewRulePortRange(53, 53),
			SuppressIfgroup:   -1,
			SuppressPrefixlen: -1,
			Mark:              -1,
			Mask:              -1,
			Goto:              -1,
			Flow:              -1,
		},
		RuleAdd:  netlink.RuleAdd,
		RuleDel:  netlink.RuleDel,
		RuleList: netlink.RuleList,
	},
}

var PolicyRoutingConfigSet = Set{
	false,
	"PolicyRouting",
	nil,
}

PolicyRoutingConfigSet defines the Policy Routing rules

var SourceValidMarkConfig = SysctlConfig{
	Key:          sysctlSrcValidMark,
	Value:        "1",
	DefaultValue: "0",
	SysctlFunc:   sysctl.Sysctl,
}

Types

type Config

type Config interface {
	Ensure(enabled bool) error
}

Config interface

type IPRouteConfig

type IPRouteConfig struct {
	Route    netlink.Route
	RouteAdd routeAdder
	RouteDel routeDeler
}

IPRouteConfig defines route config

func (IPRouteConfig) Ensure

func (r IPRouteConfig) Ensure(enabled bool) error

Ensure IPRouteConfig

type IPRuleConfig

type IPRuleConfig struct {
	Rule     netlink.Rule
	RuleAdd  ruleAdder
	RuleDel  ruleDeler
	RuleList ruleLister
}

IPRuleConfig defines the config for ip rule

func (IPRuleConfig) Ensure

func (r IPRuleConfig) Ensure(enabled bool) error

Ensure IPRuleConfig

type IPTablesChainSpec

type IPTablesChainSpec struct {
	TableName, ChainName string
	IsDefaultChain       bool // Is a System default chain, if yes, we won't delete it.
	IPT                  iptabler
}

IPTablesChainSpec defines iptable chain

type IPTablesRuleConfig

type IPTablesRuleConfig struct {
	Spec      IPTablesChainSpec
	RuleSpecs []IPTablesRuleSpec
	IPT       iptabler
}

IPTablesRuleConfig defines iptable rule

func (IPTablesRuleConfig) Ensure

func (r IPTablesRuleConfig) Ensure(enabled bool) error

Ensure IPTablesRuleConfig

type IPTablesRuleSpec

type IPTablesRuleSpec []string

IPTablesRuleSpec defines the config for ip table rule

type Set

type Set struct {
	Enabled     bool
	FeatureName string
	Configs     []Config
}

Set defines the set of Config

type SysctlConfig

type SysctlConfig struct {
	Key, Value, DefaultValue string
	SysctlFunc               sysctler
}

SysctlConfig defines sysctl config

func (SysctlConfig) Ensure

func (s SysctlConfig) Ensure(enabled bool) error

Ensure SysctlConfig