pkg

Documentation

Index

• func AddIP(ip, name string, isIngress bool) error
• func AddIPPort(ip, name string, port uint16, isIngress bool) error
• func CreateLinkIfNotExit(name string) error
• func DelIP(ip, name string, isIngress bool) error
• func DelIPPort(ip, name string, port uint16, isIngress bool) error
• func GetContainerID(name string) string
• func LoadPinnedMap(loadedMap **ebpf.Map, name string, isIngress, isL3 bool) error
• func PrintDataflow(name string) error
• func PrintFirewall(name string)
• func RemovePinnedResource(name string) error

Functions

func AddIP

func AddIP(ip, name string, isIngress bool) error

Add an ip to the ingress/egress firewall (map)

func AddIPPort

func AddIPPort(ip, name string, port uint16, isIngress bool) error

Add an ip:port entry to the ingress/egress l4 firewall (map)

func CreateLinkIfNotExit

func CreateLinkIfNotExit(name string) error

Load ebpf bytecode to kernel (if not loaded yet), pin links and maps to bpffs

func DelIP

func DelIP(ip, name string, isIngress bool) error

Delete an ip from the ingress/egress firewall (map)

func DelIPPort

func DelIPPort(ip, name string, port uint16, isIngress bool) error

Delete an ip:port entry from the ingress/egress L4 firewall (map)

func GetContainerID

func GetContainerID(name string) string

Return container's fullid and cgroup path

eg. /sys/fs/cgroup/system.slice/docker-5b81537a967793cf5c8b562bd5b9cb6b55045ed339ed328390f70d466aa84134.scope

func LoadPinnedMap

func LoadPinnedMap(loadedMap **ebpf.Map, name string, isIngress, isL3 bool) error

Find pinned map associated to container and load

func PrintDataflow

func PrintDataflow(name string) error

Follow packet flows associated to container

func PrintFirewall

func PrintFirewall(name string)

Show all rules related to container

func RemovePinnedResource

func RemovePinnedResource(name string) error

Clean up the resources related to the container