acl

Documentation

Index

• type DefaultManager
  • func Create(iface IFaceMapper) (manager *DefaultManager, err error)
  • func (d *DefaultManager) ApplyFiltering(networkMap *mgmProto.NetworkMap)
  • func (d *DefaultManager) Stop()
• type IFaceMapper
• type Manager

Types

type DefaultManager

type DefaultManager struct {
	// contains filtered or unexported fields
}

DefaultManager uses firewall manager to handle

func Create

func Create(iface IFaceMapper) (manager *DefaultManager, err error)

Create creates a firewall manager instance for the Linux

func (*DefaultManager) ApplyFiltering

func (d *DefaultManager) ApplyFiltering(networkMap *mgmProto.NetworkMap)

ApplyFiltering firewall rules to the local firewall manager processed by ACL policy.

If allowByDefault is ture it appends allow ALL traffic rules to input and output chains.

func (*DefaultManager) Stop

func (d *DefaultManager) Stop()

Stop ACL controller and clear firewall state

type IFaceMapper

type IFaceMapper interface {
	Name() string
	Address() iface.WGAddress
	IsUserspaceBind() bool
	SetFilter(iface.PacketFilter) error
}

IFaceMapper defines subset methods of interface required for manager

type Manager

type Manager interface {
	ApplyFiltering(networkMap *mgmProto.NetworkMap)
	Stop()
}

Manager is a ACL rules manager