nftablesutils

package module

Go to main page

Versions in this module

v0

v0.3.4

May 25, 2024

Changes in this version

+ func ExprPortRange(startPort uint16, endPort uint16) []expr.Any

v0.3.3

Oct 21, 2023

v0.3.2

Oct 19, 2023

Changes in this version

+ func SetCIDRMatcherIngoreError(direction ExprDirection, cidr string, isINet bool, isEq ...bool) []expr.Any

v0.3.1

Oct 19, 2023

v0.3.0

Oct 19, 2023

v0.2.3

Oct 18, 2023

v0.2.2

Oct 18, 2023

v0.2.1

Jul 1, 2023

v0.2.0

Jul 1, 2023

v0.1.3

Jun 30, 2023

v0.1.2

Jun 29, 2023

v0.1.1

Jun 29, 2023

Changes in this version

+ func ParseConnLimit(limitStr string) (*expr.Connlimit, error)

v0.1.0

Jun 29, 2023

Changes in this version

+ func ExprCmp(op expr.CmpOp, data []byte, reg ...uint32) *expr.Cmp

+ func ExprCmpPort(op expr.CmpOp, port uint16, reg ...uint32) *expr.Cmp

+ func GetCmpOp(isEq ...bool) expr.CmpOp

+ func IsInvert(isEq ...bool) bool

v0.0.9

Jun 27, 2023

v0.0.8

Jun 27, 2023

Changes in this version

+ func SetDynamicLimitSet(set *nftables.Set, connLimit uint32, rateStr string, burst uint32) ([]expr.Any, error)

v0.0.7

Jun 27, 2023

Changes in this version

+ func ExprDynamicLimitSet(set *nftables.Set, connLimit uint32, rateStr string, burst uint32) (*expr.Dynset, error)

v0.0.6

Jun 26, 2023

v0.0.5

Jun 22, 2023

v0.0.4

Jun 21, 2023

v0.0.3

Jun 21, 2023

Changes in this version

+ func ExprImmediateWithPort(reg uint32, port uint16) *expr.Immediate

+ func ParseLimits(rateStr string, burst uint32) (*expr.Limit, error)

+ func SetConnLimits(connLimit uint32, rateStr string, burst uint32) ([]expr.Any, error)

+ func SetDNAT(ip net.IP, portMinAndMax ...uint16) []expr.Any

+ func SetDNATRange(ipStart net.IP, ipEnd net.IP, portMinAndMax ...uint16) []expr.Any

+ func SetDNATv6(ip net.IP, portMinAndMax ...uint16) []expr.Any

+ func SetDNATv6Range(ipStart net.IP, ipEnd net.IP, portMinAndMax ...uint16) []expr.Any

+ func SetDynamicLimitDropSet(set *nftables.Set, connLimit uint32, rateStr string, burst uint32) ([]expr.Any, error)

+ func SetNATWithIPAndPort(dir ExprDirection, isIPv6 bool, ipStart net.IP, ipEnd net.IP, ...) []expr.Any

+ func SetRedirect(portMin uint16, portMax ...uint16) []expr.Any

+ func SetSNAT(ip net.IP, portMinAndMax ...uint16) []expr.Any

+ func SetSNATRange(ipStart net.IP, ipEnd net.IP, portMinAndMax ...uint16) []expr.Any

+ func SetSNATv6(ip net.IP, portMinAndMax ...uint16) []expr.Any

+ func SetSNATv6Range(ipStart net.IP, ipEnd net.IP, portMinAndMax ...uint16) []expr.Any

v0.0.2

Jun 19, 2023

v0.0.1

Jun 18, 2023

Changes in this version

+ const ConnTrackStateLen

+ const DstPortOffset

+ const IPv4AddrLen

+ const IPv4DstOffset

+ const IPv4SrcOffset

+ const IPv6AddrLen

+ const IPv6DstOffset

+ const IPv6SrcOffset

+ const PortLen

+ const ProtoICMPLen

+ const ProtoICMPOffset

+ const ProtoICMPv6Len

+ const ProtoICMPv6Offset

+ const ProtoTCPLen

+ const ProtoTCPOffset

+ const ProtoUDPLen

+ const ProtoUDPOffset

+ const SrcPortOffset

+ const StateEstablished

+ const StateNew

+ const StateRelated

+ func Accept() *expr.Verdict

+ func Bitwise(length uint32, mask []byte, xor []byte) *expr.Bitwise

+ func BitwiseWithRegisters(sourceRegister uint32, destRegister uint32, length uint32, mask []byte, ...) *expr.Bitwise

+ func CompareCtState(mask uint32) ([]expr.Any, error)

+ func CompareCtStateWithRegister(reg uint32, mask uint32) ([]expr.Any, error)

+ func CompareDestinationAddress(ip netip.Addr) ([]expr.Any, error)

+ func CompareDestinationAddressSet(set *nftables.Set) ([]expr.Any, error)

+ func CompareDestinationAddressSetWithRegister(set *nftables.Set, reg uint32) ([]expr.Any, error)

+ func CompareDestinationAddressWithRegister(ip netip.Addr, reg uint32) ([]expr.Any, error)

+ func CompareDestinationPort(port uint16) ([]expr.Any, error)

+ func CompareDestinationPortSet(set *nftables.Set) []expr.Any

+ func CompareDestinationPortSetWithRegister(set *nftables.Set, reg uint32) []expr.Any

+ func CompareDestinationPortWithRegister(port uint16, reg uint32) ([]expr.Any, error)

+ func CompareProtocolFamily(proto nftables.TableFamily) []expr.Any

+ func CompareProtocolFamilyWithRegister(proto nftables.TableFamily, reg uint32) []expr.Any

+ func CompareSourceAddress(ip netip.Addr) ([]expr.Any, error)

+ func CompareSourceAddressSet(set *nftables.Set) ([]expr.Any, error)

+ func CompareSourceAddressSetWithRegister(set *nftables.Set, reg uint32) ([]expr.Any, error)

+ func CompareSourceAddressWithRegister(ip netip.Addr, reg uint32) ([]expr.Any, error)

+ func CompareSourcePort(port uint16) ([]expr.Any, error)

+ func CompareSourcePortSet(set *nftables.Set) ([]expr.Any, error)

+ func CompareSourcePortSetWithRegister(set *nftables.Set, reg uint32) ([]expr.Any, error)

+ func CompareSourcePortWithRegister(port uint16, reg uint32) ([]expr.Any, error)

+ func CompareTransportProtocol(proto byte) []expr.Any

+ func CompareTransportProtocolWithRegister(proto byte, reg uint32) []expr.Any

+ func CreateIface(log Logger, iface, linkType string, ip net.IP, ipNet *net.IPNet) error

+ func DNAT(ip net.IP) []expr.Any

+ func DNATv6(ip net.IP) []expr.Any

+ func DestinationPort(reg uint32) *expr.Payload

+ func Drop() *expr.Verdict

+ func Equals(data []byte, reg uint32) *expr.Cmp

+ func ExprAccept() *expr.Verdict

+ func ExprBitwise(dReg, sReg, l uint32, mask, xor []byte) *expr.Bitwise

+ func ExprCmpEq(reg uint32, data []byte) *expr.Cmp

+ func ExprCmpEqIFName(name string) *expr.Cmp

+ func ExprCmpNeq(reg uint32, data []byte) *expr.Cmp

+ func ExprCmpNeqIFName(name string) *expr.Cmp

+ func ExprConnLimit(count uint32, flags uint32) *expr.Connlimit

+ func ExprCounter() *expr.Counter

+ func ExprCtState(reg uint32) *expr.Ct

+ func ExprDNAT(addrMin, addrMax uint32) *expr.NAT

+ func ExprDNATv6(addrMin, addrMax uint32) *expr.NAT

+ func ExprDrop() *expr.Verdict

+ func ExprIIFName() *expr.Meta

+ func ExprImmediate(ip net.IP) *expr.Immediate

+ func ExprLimit(t expr.LimitType, rate uint64, over bool, unit expr.LimitTime, burst uint32) *expr.Limit

+ func ExprLimits(rateStr string, burst uint32) *expr.Limit

+ func ExprLookupSet(reg uint32, name string, id uint32) *expr.Lookup

+ func ExprLookupSetFromSet(set *nftables.Set, reg uint32) *expr.Lookup

+ func ExprMasquerade(protoMin, protoMax uint32) *expr.Masq

+ func ExprMeta(meta expr.MetaKey, reg uint32) *expr.Meta

+ func ExprOIFName() *expr.Meta

+ func ExprPayloadNetHeader(reg, offset, l uint32) *expr.Payload

+ func ExprPayloadTransportHeader(reg, offset, l uint32) *expr.Payload

+ func ExprPortCmp(port uint16, op expr.CmpOp) *expr.Cmp

+ func ExprRedirect(protoMin, protoMax uint32) *expr.Redir

+ func ExprReject(t uint32, c uint8) *expr.Reject

+ func ExprSNAT(addrMin, addrMax uint32) *expr.NAT

+ func ExprSNATv6(addrMin, addrMax uint32) *expr.NAT

+ func ExprTproxy() *expr.TProxy

+ func ExprTproxy6() *expr.TProxy

+ func GetConntrackStateSet(t *nftables.Table) *nftables.Set

+ func GetConntrackStateSetElems(states []string) []nftables.SetElement

+ func GetIPv4AddrSet(t *nftables.Table) *nftables.Set

+ func GetIPv6AddrSet(t *nftables.Table) *nftables.Set

+ func GetNetInterface(interfaceName string) (ipv4NetInterfaces []NetInterface, ipv6NetInterfaces []NetInterface, err error)

+ func GetPayloadDirectives(direction ExprDirection, isIPv4 bool, isIPv6 bool) (uint32, uint32, []byte)

+ func GetPortElems(ports []uint16) []nftables.SetElement

+ func GetPortSet(t *nftables.Table) *nftables.Set

+ func IPAddr() (string, net.IP, net.IP, error)

+ func IPv4DestinationAddress(reg uint32) *expr.Payload

+ func IPv4SourceAddress(reg uint32) *expr.Payload

+ func IPv6Addr() (string, net.IP, net.IP, error)

+ func IPv6DestinationAddress(reg uint32) *expr.Payload

+ func IPv6SourceAddress(reg uint32) *expr.Payload

+ func LoadCtByKey(ctKey expr.CtKey) (*expr.Ct, error)

+ func LoadCtByKeyWithRegister(ctKey expr.CtKey, reg uint32) (*expr.Ct, error)

+ func Match(name string, revision uint32, info xt.InfoAny) *expr.Match

+ func MatchBPF(info []byte) *expr.Match

+ func MatchBPFWithVerdict(info []byte, verdict *expr.Verdict) []expr.Any

+ func MatchUnknown(name string, revision uint32, info []byte) *expr.Match

+ func NotEquals(data []byte, reg uint32) *expr.Cmp

+ func ProtoTCP(reg uint32) *expr.Payload

+ func ProtoUDP(reg uint32) *expr.Payload

+ func RedirectTo(port uint16) []expr.Any

+ func Reject() *expr.Reject

+ func RemoveIface(log Logger, iface string) error

+ func SNAT(ip net.IP) []expr.Any

+ func SNATv6(ip net.IP) []expr.Any

+ func SetCIDRMatcher(direction ExprDirection, cidr string, isINet bool) []expr.Any

+ func SetDPortRange(min uint16, max uint16) []expr.Any

+ func SetSPortRange(min uint16, max uint16) []expr.Any

+ func SourcePort(reg uint32) *expr.Payload

+ func TypeConntrackStateDatatype() nftables.SetDatatype

+ func TypeConntrackStateEstablished() []byte

+ func TypeConntrackStateNew() []byte

+ func TypeConntrackStateRelated() []byte

+ func TypeICMPTypeEchoRequest() []byte

+ func TypeICMPv6TypeEchoRequest() []byte

+ func TypeProtoICMP() []byte

+ func TypeProtoICMPV6() []byte

+ func TypeProtoTCP() []byte

+ func TypeProtoUDP() []byte

+ func ValidateAddress(ip netip.Addr) error

+ func ValidateAddressRange(start netip.Addr, end netip.Addr) error

+ func ValidatePort(port uint16) error

+ func ValidatePortRange(start uint16, end uint16) error

+ func ValidatePrefix(prefix netip.Prefix) error

+ type ExprDirection string

+ const ExprDirectionDestination

+ const ExprDirectionSource

+ type Exprs []expr.Any

+ func JoinExprs(exprs ...[]expr.Any) Exprs

+ func SetConntrackStateEstablished() Exprs

+ func SetConntrackStateNew() Exprs

+ func SetConntrackStateRelated() Exprs

+ func SetConntrackStateSet(s *nftables.Set) Exprs

+ func SetDAddrIPv6Set(s *nftables.Set) Exprs

+ func SetDAddrSet(s *nftables.Set) Exprs

+ func SetDPort(p uint16) Exprs

+ func SetDPortSet(s *nftables.Set) Exprs

+ func SetICMPTypeEchoRequest() Exprs

+ func SetICMPv6TypeEchoRequest() Exprs

+ func SetIIF(iface string) Exprs

+ func SetINetProtoICMP() Exprs

+ func SetINetProtoICMPv6() Exprs

+ func SetNIIF(iface string) Exprs

+ func SetNOIF(iface string) Exprs

+ func SetOIF(iface string) Exprs

+ func SetProtoICMP() Exprs

+ func SetProtoICMPv6() Exprs

+ func SetProtoTCP() Exprs

+ func SetProtoUDP() Exprs

+ func SetSAddrIPv6Set(s *nftables.Set) Exprs

+ func SetSAddrSet(s *nftables.Set) Exprs

+ func SetSPort(p uint16) Exprs

+ func SetSPortSet(s *nftables.Set) Exprs

+ func SetSourceIPv4Net(addr []byte, mask []byte) Exprs

+ func (e Exprs) Add(v ...expr.Any) Exprs

+ type Logger interface

+ Debugf func(format string, a ...interface{})

+ type NetInterface struct

+ Address []string

+ Name string

+ type Operator string

+ func (o Operator) CmpOp() expr.CmpOp

+ func (o Operator) Expr() *expr.Cmp

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL