assertions

Documentation

Index

• func AssertNotTrue(assertion Assertion, test bool, level model.SuspicionLevel, msg string)
• func AssertTrue(assertion Assertion, test bool, level model.SuspicionLevel, msg string)
• type Assertion
• type CannotBuildTransmissionError
  • func (e *CannotBuildTransmissionError) Error() string
• type KubernetesAssertion
  • func NewKubernetesAssertion(assertion Assertion) *KubernetesAssertion
  • func (a *KubernetesAssertion) AssertNode(node *v1.Node)
  • func (a *KubernetesAssertion) AssertPod(pod *v1.Pod)
• type NetstackAssertion
  • func NewNetstackAssertion(assertion Assertion, netns *netstack.NetNS) *NetstackAssertion
  • func (na *NetstackAssertion) AssertDefaultAccept()
  • func (na *NetstackAssertion) AssertDefaultIPIPTunnel(ifName string)
  • func (na *NetstackAssertion) AssertDefaultRule()
  • func (na *NetstackAssertion) AssertHostBridge(name string)
  • func (na *NetstackAssertion) AssertIPForwardedEnabled()
  • func (na *NetstackAssertion) AssertIPVSServerExists(service string, servicePort uint16, protocol model.Protocol, backend string, ...)
  • func (na *NetstackAssertion) AssertListen(localIP net.IP, localPort uint16, protocol model.Protocol)
  • func (na *NetstackAssertion) AssertNetDevice(s string, expect netstack.Interface)
  • func (na *NetstackAssertion) AssertNetfilterForward(pktIn model.Packet, pktOut []model.Packet, iif string)
  • func (na *NetstackAssertion) AssertNetfilterSend(pktIn model.Packet, pktOut []model.Packet, iif string)
  • func (na *NetstackAssertion) AssertNetfilterServe(pktIn model.Packet, iif string)
  • func (na *NetstackAssertion) AssertNoIPTables()
  • func (na *NetstackAssertion) AssertNoPolicyRoute()
  • func (na *NetstackAssertion) AssertRoute(expected RouteAssertion, packet model.Packet, iif, oif string) error
  • func (na *NetstackAssertion) AssertRpFilterDisabled(dev string)
  • func (na *NetstackAssertion) AssertSysctls(expectSysctls map[string]string, suspicionLevel model.SuspicionLevel)
  • func (na *NetstackAssertion) AssertVEthOnBridge(index int, expectedBridgeName string)
  • func (na *NetstackAssertion) AssertVEthPeerBridge(peerInterfaceName string, peerNS *netstack.NetNSInfo, ...)
  • func (na *NetstackAssertion) AssertVxlanVtep(vtep, dstHost net.IP, vxlanInterface string) error
• type RouteAssertion
  • func (a RouteAssertion) String() string

Functions

func AssertNotTrue

func AssertNotTrue(assertion Assertion, test bool, level model.SuspicionLevel, msg string)

func AssertTrue

func AssertTrue(assertion Assertion, test bool, level model.SuspicionLevel, msg string)

Types

type Assertion

type Assertion interface {
	AddSuspicion(level model.SuspicionLevel, msg string)
}

type CannotBuildTransmissionError

type CannotBuildTransmissionError struct {
	SrcNode *model.NetNode
	Err     error
}

func (*CannotBuildTransmissionError) Error

func (e *CannotBuildTransmissionError) Error() string

type KubernetesAssertion

type KubernetesAssertion struct {
	Assertion
}

func NewKubernetesAssertion

func NewKubernetesAssertion(assertion Assertion) *KubernetesAssertion

func (*KubernetesAssertion) AssertNode

func (a *KubernetesAssertion) AssertNode(node *v1.Node)

func (*KubernetesAssertion) AssertPod

func (a *KubernetesAssertion) AssertPod(pod *v1.Pod)

type NetstackAssertion

type NetstackAssertion struct {
	Assertion
	// contains filtered or unexported fields
}

func NewNetstackAssertion

func NewNetstackAssertion(assertion Assertion, netns *netstack.NetNS) *NetstackAssertion

func (*NetstackAssertion) AssertDefaultAccept

func (na *NetstackAssertion) AssertDefaultAccept()

func (*NetstackAssertion) AssertDefaultIPIPTunnel

func (na *NetstackAssertion) AssertDefaultIPIPTunnel(ifName string)

func (*NetstackAssertion) AssertDefaultRule

func (na *NetstackAssertion) AssertDefaultRule()

func (*NetstackAssertion) AssertHostBridge

func (na *NetstackAssertion) AssertHostBridge(name string)

func (*NetstackAssertion) AssertIPForwardedEnabled

func (na *NetstackAssertion) AssertIPForwardedEnabled()

func (*NetstackAssertion) AssertIPVSServerExists

func (na *NetstackAssertion) AssertIPVSServerExists(service string, servicePort uint16, protocol model.Protocol,
	backend string, backendPort uint16)

func (*NetstackAssertion) AssertListen

func (na *NetstackAssertion) AssertListen(localIP net.IP, localPort uint16, protocol model.Protocol)

func (*NetstackAssertion) AssertNetDevice

func (na *NetstackAssertion) AssertNetDevice(s string, expect netstack.Interface)

func (*NetstackAssertion) AssertNetfilterForward

func (na *NetstackAssertion) AssertNetfilterForward(pktIn model.Packet, pktOut []model.Packet, iif string)

func (*NetstackAssertion) AssertNetfilterSend

func (na *NetstackAssertion) AssertNetfilterSend(pktIn model.Packet, pktOut []model.Packet, iif string)

func (*NetstackAssertion) AssertNetfilterServe

func (na *NetstackAssertion) AssertNetfilterServe(pktIn model.Packet, iif string)

func (*NetstackAssertion) AssertNoIPTables

func (na *NetstackAssertion) AssertNoIPTables()

AssertNoIPTables assertion no iptables rules

func (*NetstackAssertion) AssertNoPolicyRoute

func (na *NetstackAssertion) AssertNoPolicyRoute()

func (*NetstackAssertion) AssertRoute

func (na *NetstackAssertion) AssertRoute(expected RouteAssertion, packet model.Packet, iif, oif string) error

func (*NetstackAssertion) AssertRpFilterDisabled

func (na *NetstackAssertion) AssertRpFilterDisabled(dev string)

func (*NetstackAssertion) AssertSysctls

func (na *NetstackAssertion) AssertSysctls(expectSysctls map[string]string, suspicionLevel model.SuspicionLevel)

func (*NetstackAssertion) AssertVEthOnBridge

func (na *NetstackAssertion) AssertVEthOnBridge(index int, expectedBridgeName string)

func (*NetstackAssertion) AssertVEthPeerBridge

func (na *NetstackAssertion) AssertVEthPeerBridge(peerInterfaceName string, peerNS *netstack.NetNSInfo, expectedBridgeName string)

func (*NetstackAssertion) AssertVxlanVtep

func (na *NetstackAssertion) AssertVxlanVtep(vtep, dstHost net.IP, vxlanInterface string) error

type RouteAssertion

type RouteAssertion struct {
	Dev      *string
	Scope    *netstack.Scope
	Type     *int
	Dst      *net.IPNet
	Src      *net.IP
	Gw       *net.IP
	Protocol *int
}

func (RouteAssertion) String

func (a RouteAssertion) String() string