iptablesctrl

Documentation

Index

• Constants
• func PuPortSetName(contextID string, mark string, prefix string) string
• type Instance
  • func NewInstance(fqc *fqconfig.FilterQueue, mode constants.ModeType, portset portset.PortSet) (*Instance, error)
  • func (i *Instance) CleanAllSynAckPacketCaptures() error
  • func (i *Instance) CleanGlobalRules() error
  • func (i *Instance) CleanUp() error
  • func (i *Instance) ConfigureRules(version int, contextID string, containerInfo *policy.PUInfo) error
  • func (i *Instance) DeleteRules(version int, contextID string, port string, mark string, uid string, ...) error
  • func (i *Instance) InitializeChains() error
  • func (i *Instance) Run(ctx context.Context) error
  • func (i *Instance) SetTargetNetworks(current, networks []string) error
  • func (i *Instance) UpdateRules(version int, contextID string, containerInfo *policy.PUInfo, ...) error

Constants

const (

	// PuPortSet The prefix for portset names
	PuPortSet = "PUPort-"

	// ProxyPort DefaultProxyPort
	ProxyPort = "5000"
)

Functions

func PuPortSetName

func PuPortSetName(contextID string, mark string, prefix string) string

PuPortSetName returns the name of the pu portset

Types

type Instance

type Instance struct {
	// contains filtered or unexported fields
}

Instance is the structure holding all information about a implementation

func NewInstance

func NewInstance(fqc *fqconfig.FilterQueue, mode constants.ModeType, portset portset.PortSet) (*Instance, error)

NewInstance creates a new iptables controller instance

func (*Instance) CleanAllSynAckPacketCaptures

func (i *Instance) CleanAllSynAckPacketCaptures() error

CleanAllSynAckPacketCaptures cleans the capture rules for SynAck packets irrespective of NFQUEUE

func (*Instance) CleanGlobalRules

func (i *Instance) CleanGlobalRules() error

CleanGlobalRules cleans the capture rules for SynAck packets

func (*Instance) CleanUp

func (i *Instance) CleanUp() error

CleanUp requires the implementor to clean up all ACLs

func (*Instance) ConfigureRules

func (i *Instance) ConfigureRules(version int, contextID string, containerInfo *policy.PUInfo) error

ConfigureRules implmenets the ConfigureRules interface

func (*Instance) DeleteRules

func (i *Instance) DeleteRules(version int, contextID string, port string, mark string, uid string, proxyPort string, proxyPortSetName string) error

DeleteRules implements the DeleteRules interface

func (*Instance) InitializeChains

func (i *Instance) InitializeChains() error

InitializeChains initializes the chains.

func (*Instance) Run

func (i *Instance) Run(ctx context.Context) error

Run starts the iptables controller

func (*Instance) SetTargetNetworks

func (i *Instance) SetTargetNetworks(current, networks []string) error

SetTargetNetworks updates ths target networks for SynAck packets

func (*Instance) UpdateRules

func (i *Instance) UpdateRules(version int, contextID string, containerInfo *policy.PUInfo, oldContainerInfo *policy.PUInfo) error

UpdateRules implements the update part of the interface