iptables

Documentation

Index

• type InterfaceState
  • func (i *InterfaceState) Address() device.WGAddress
  • func (i *InterfaceState) IsUserspaceBind() bool
  • func (i *InterfaceState) Name() string
• type Manager
  • func Create(wgIface iFaceMapper) (*Manager, error)
  • func (m *Manager) AddNatRule(pair firewall.RouterPair) error
  • func (m *Manager) AddPeerFiltering(ip net.IP, protocol firewall.Protocol, sPort *firewall.Port, ...) ([]firewall.Rule, error)
  • func (m *Manager) AddRouteFiltering(sources []netip.Prefix, destination netip.Prefix, proto firewall.Protocol, ...) (firewall.Rule, error)
  • func (m *Manager) AllowNetbird() error
  • func (m *Manager) DeletePeerRule(rule firewall.Rule) error
  • func (m *Manager) DeleteRouteRule(rule firewall.Rule) error
  • func (m *Manager) Flush() error
  • func (m *Manager) Init(stateManager *statemanager.Manager) error
  • func (m *Manager) IsServerRouteSupported() bool
  • func (m *Manager) RemoveNatRule(pair firewall.RouterPair) error
  • func (m *Manager) Reset(stateManager *statemanager.Manager) error
  • func (m *Manager) SetLegacyManagement(isLegacy bool) error
• type Rule
  • func (r *Rule) GetRuleID() string
• type ShutdownState
  • func (s *ShutdownState) Cleanup() error
  • func (s *ShutdownState) Name() string

Types

type InterfaceState

type InterfaceState struct {
	NameStr       string          `json:"name"`
	WGAddress     iface.WGAddress `json:"wg_address"`
	UserspaceBind bool            `json:"userspace_bind"`
}

func (*InterfaceState) Address

func (i *InterfaceState) Address() device.WGAddress

func (*InterfaceState) IsUserspaceBind

func (i *InterfaceState) IsUserspaceBind() bool

func (*InterfaceState) Name

func (i *InterfaceState) Name() string

type Manager

type Manager struct {
	// contains filtered or unexported fields
}

Manager of iptables firewall

func Create

func Create(wgIface iFaceMapper) (*Manager, error)

Create iptables firewall manager

func (*Manager) AddNatRule

func (m *Manager) AddNatRule(pair firewall.RouterPair) error

func (*Manager) AddPeerFiltering

func (m *Manager) AddPeerFiltering(
	ip net.IP,
	protocol firewall.Protocol,
	sPort *firewall.Port,
	dPort *firewall.Port,
	direction firewall.RuleDirection,
	action firewall.Action,
	ipsetName string,
	comment string,
) ([]firewall.Rule, error)

AddPeerFiltering adds a rule to the firewall

Comment will be ignored because some system this feature is not supported

func (*Manager) AddRouteFiltering

func (m *Manager) AddRouteFiltering(
	sources []netip.Prefix,
	destination netip.Prefix,
	proto firewall.Protocol,
	sPort *firewall.Port,
	dPort *firewall.Port,
	action firewall.Action,
) (firewall.Rule, error)

func (*Manager) AllowNetbird

func (m *Manager) AllowNetbird() error

AllowNetbird allows netbird interface traffic

func (*Manager) DeletePeerRule

func (m *Manager) DeletePeerRule(rule firewall.Rule) error

DeletePeerRule from the firewall by rule definition

func (*Manager) DeleteRouteRule

func (m *Manager) DeleteRouteRule(rule firewall.Rule) error

func (*Manager) Flush

func (m *Manager) Flush() error

Flush doesn't need to be implemented for this manager

func (*Manager) Init

func (m *Manager) Init(stateManager *statemanager.Manager) error

func (*Manager) IsServerRouteSupported

func (m *Manager) IsServerRouteSupported() bool

func (*Manager) RemoveNatRule

func (m *Manager) RemoveNatRule(pair firewall.RouterPair) error

func (*Manager) Reset

func (m *Manager) Reset(stateManager *statemanager.Manager) error

Reset firewall to the default state

func (*Manager) SetLegacyManagement

func (m *Manager) SetLegacyManagement(isLegacy bool) error

type Rule

type Rule struct {
	// contains filtered or unexported fields
}

Rule to handle management of rules

func (*Rule) GetRuleID

func (r *Rule) GetRuleID() string

GetRuleID returns the rule id

type ShutdownState

type ShutdownState struct {
	sync.Mutex

	InterfaceState *InterfaceState `json:"interface_state,omitempty"`

	RouteRules        routeRules    `json:"route_rules,omitempty"`
	RouteIPsetCounter *ipsetCounter `json:"route_ipset_counter,omitempty"`

	ACLEntries    aclEntries  `json:"acl_entries,omitempty"`
	ACLIPsetStore *ipsetStore `json:"acl_ipset_store,omitempty"`
}

func (*ShutdownState) Cleanup

func (s *ShutdownState) Cleanup() error

func (*ShutdownState) Name

func (s *ShutdownState) Name() string