iptables

Documentation

Index

• Constants
• type Manager
  • func Create(wgIface iFaceMapper, ipv6Supported bool) (*Manager, error)
  • func (m *Manager) AddFiltering(ip net.IP, protocol fw.Protocol, sPort *fw.Port, dPort *fw.Port, ...) (fw.Rule, error)
  • func (m *Manager) AllowNetbird() error
  • func (m *Manager) DeleteRule(rule fw.Rule) error
  • func (m *Manager) Flush() error
  • func (m *Manager) Reset() error
• type Rule
  • func (r *Rule) GetRuleID() string

Constants

const (
	// ChainInputFilterName is the name of the chain that is used for filtering incoming packets
	ChainInputFilterName = "NETBIRD-ACL-INPUT"

	// ChainOutputFilterName is the name of the chain that is used for filtering outgoing packets
	ChainOutputFilterName = "NETBIRD-ACL-OUTPUT"
)

Types

type Manager

type Manager struct {
	// contains filtered or unexported fields
}

Manager of iptables firewall

func Create

func Create(wgIface iFaceMapper, ipv6Supported bool) (*Manager, error)

Create iptables firewall manager

func (*Manager) AddFiltering

func (m *Manager) AddFiltering(
	ip net.IP,
	protocol fw.Protocol,
	sPort *fw.Port,
	dPort *fw.Port,
	direction fw.RuleDirection,
	action fw.Action,
	ipsetName string,
	comment string,
) (fw.Rule, error)

AddFiltering rule to the firewall

Comment will be ignored because some system this feature is not supported

func (*Manager) AllowNetbird

func (m *Manager) AllowNetbird() error

AllowNetbird allows netbird interface traffic

func (*Manager) DeleteRule

func (m *Manager) DeleteRule(rule fw.Rule) error

DeleteRule from the firewall by rule definition

func (*Manager) Flush

func (m *Manager) Flush() error

Flush doesn't need to be implemented for this manager

func (*Manager) Reset

func (m *Manager) Reset() error

Reset firewall to the default state

type Rule

type Rule struct {
	// contains filtered or unexported fields
}

Rule to handle management of rules

func (*Rule) GetRuleID

func (r *Rule) GetRuleID() string

GetRuleID returns the rule id