iptables

Documentation

Index

• Constants
• type Manager
  • func CreateIPtablesManager(protocol Protocol) (*Manager, error)
  • func (mgr *Manager) RecordLocalPodIP(podIP net.IP)
  • func (mgr *Manager) RecordNodeIP(nodeIP net.IP)
  • func (mgr *Manager) RecordRemoteNodeIP(nodeIP net.IP)
  • func (mgr *Manager) RecordRemoteSubnet(subnetCidr *net.IPNet, isOverlay bool)
  • func (mgr *Manager) RecordSubnet(subnetCidr *net.IPNet, isOverlay, isLocalBGP bool)
  • func (mgr *Manager) Reset()
  • func (mgr *Manager) SetBgpIfName(bgpIfName string)
  • func (mgr *Manager) SetOverlayIfName(overlayIfName string)
  • func (mgr *Manager) SyncRules() error
• type Protocol

Constants

const (
	ChainRamaPostRouting = "RAMA-POSTROUTING"
	ChainRamaForward     = "RAMA-FORWARD"
	ChainRamaPreRouting  = "RAMA-PREROUTING"
)

const (
	TableNAT    = "nat"
	TableFilter = "filter"
	TableMangle = "mangle"

	ChainPostRouting = "POSTROUTING"
	ChainPreRouting  = "PREROUTING"
	ChainForward     = "FORWARD"

	CustomChainPrefix = "HYBRIDNET-"

	ChainHybridnetPostRouting = CustomChainPrefix + "POSTROUTING"
	ChainHybridnetForward     = CustomChainPrefix + "FORWARD"
	ChainHybridnetPreRouting  = CustomChainPrefix + "PREROUTING"

	ChainHybridnetFromRuleSkip = CustomChainPrefix + "FROM-RULE-SKIP"

	HybridnetOverlayNetSetName  = "HYBRIDNET-OVERLAY-NET"
	HybridnetAllIPSetName       = "HYBRIDNET-ALL"
	HybridnetNodeIPSetName      = "HYBRIDNET-NODE-IP"
	HybridnetLocalPodIPSetName  = "HYBRIDNET-LOCAL-POD-IP"
	HybridnetLocalBGPNetSetName = "HYBRIDNET-LOCAL-BGP-NET"

	PodToNodeBackTrafficMarkString = "0x20"
	FuleNATedPodTrafficMarkString  = "0x40"
	PodToNodeBackTrafficMark       = 0x20
	FuleNATedPodTrafficMark        = 0x40

	KubeProxyMasqueradeMark = 0x4000
)

Types

type Manager

type Manager struct {
	// contains filtered or unexported fields
}

func CreateIPtablesManager

func CreateIPtablesManager(protocol Protocol) (*Manager, error)

func (*Manager) RecordLocalPodIP

func (mgr *Manager) RecordLocalPodIP(podIP net.IP)

func (*Manager) RecordNodeIP

func (mgr *Manager) RecordNodeIP(nodeIP net.IP)

func (*Manager) RecordRemoteNodeIP

func (mgr *Manager) RecordRemoteNodeIP(nodeIP net.IP)

func (*Manager) RecordRemoteSubnet

func (mgr *Manager) RecordRemoteSubnet(subnetCidr *net.IPNet, isOverlay bool)

func (*Manager) RecordSubnet

func (mgr *Manager) RecordSubnet(subnetCidr *net.IPNet, isOverlay, isLocalBGP bool)

func (*Manager) Reset

func (mgr *Manager) Reset()

func (*Manager) SetBgpIfName

func (mgr *Manager) SetBgpIfName(bgpIfName string)

func (*Manager) SetOverlayIfName

func (mgr *Manager) SetOverlayIfName(overlayIfName string)

func (*Manager) SyncRules

func (mgr *Manager) SyncRules() error

type Protocol

type Protocol byte

Protocol defines the ip protocol either ipv4 or ipv6

const (
	// ProtocolIpv4 represents ipv4 protocol in iptables
	ProtocolIpv4 Protocol = iota + 1
	// ProtocolIpv6 represents ipv6 protocol in iptables
	ProtocolIpv6
)