secrules

Documentation

Index

• Constants
• Variables
• type SecurityGroupRuleSet
  • func (srs *SecurityGroupRuleSet) AddRule(rule SecurityRule)
  • func (srs *SecurityGroupRuleSet) IsEqual(src SecurityGroupRuleSet) bool
  • func (srs *SecurityGroupRuleSet) String() string
• type SecurityGroupSubRuleSet
• type SecurityGroupSubSubRuleSet
• type SecurityRule
  • func MustParseSecurityRule(s string) *SecurityRule
  • func ParseSecurityRule(pattern string) (*SecurityRule, error)
  • func (rule *SecurityRule) GetPortsString() string
  • func (rule *SecurityRule) IsWildMatch() bool
  • func (rule *SecurityRule) ParseCIDR(cidr string) bool
  • func (rule *SecurityRule) ParsePorts(seg string) error
  • func (rule *SecurityRule) String() (result string)
  • func (rule *SecurityRule) ValidateRule() error
• type SecurityRuleSet
  • func (srs SecurityRuleSet) AllowList() SecurityRuleSet
  • func (srs SecurityRuleSet) Equals(srs1 SecurityRuleSet) bool
  • func (srs SecurityRuleSet) Len() int
  • func (srs SecurityRuleSet) Less(i, j int) bool
  • func (srs SecurityRuleSet) String() string
  • func (srs SecurityRuleSet) Swap(i, j int)
• type TSecurityRuleAction
• type TSecurityRuleDirection
• type TSecurityRuleRelation

Constants

const (
	SecurityRuleIngress = TSecurityRuleDirection("in")
	SecurityRuleEgress  = TSecurityRuleDirection("out")
)

const (
	SecurityRuleAllow = TSecurityRuleAction("allow")
	SecurityRuleDeny  = TSecurityRuleAction("deny")
)

const (
	RELATION_INDEPENDENT = TSecurityRuleRelation("INDEPENDT")
	RELATION_IDENTICAL   = TSecurityRuleRelation("IDENTICAL")
	RELATION_SUBSET      = TSecurityRuleRelation("SUBSET")
	RELATION_SUPERSET    = TSecurityRuleRelation("SUPERSET")
	RELATION_NEXT_AHEAD  = TSecurityRuleRelation("NEXT_AHEAD")
	RELATION_NEXT_AFTER  = TSecurityRuleRelation("NEXT_AFTER")
	RELATION_OVERLAP     = TSecurityRuleRelation("OVERLAP")
)

const (
	DIR_IN  = "in"
	DIR_OUT = "out"
)

const PROTO_ANY = "any"

const ACTION_ALLOW = "allow" const ACTION_DENY = "deny"

const PROTO_ICMP = "icmp"

const PROTO_TCP = "tcp"

const PROTO_UDP = "udp"

const SEG_ACTION = 0

const SEG_END = 4

const SEG_IP = 1

const SEG_PORT = 3

const SEG_PROTO = 2

Variables

var (
	ErrInvalidProtocolAny  = errors.New("invalid protocol any with port option")
	ErrInvalidProtocolICMP = errors.New("invalid protocol icmp with port option")
	ErrInvalidPriority     = errors.New("invalid priority")
	ErrInvalidDirection    = errors.New("invalid direction")
	ErrInvalidAction       = errors.New("invalid action")
	ErrInvalidNet          = errors.New("invalid net")
	ErrInvalidIPAddr       = errors.New("invalid ip address")
	ErrInvalidProtocol     = errors.New("invalid protocol")
	ErrInvalidPortRange    = errors.New("invalid port range")
	ErrInvalidPort         = errors.New("invalid port")
)

Types

type SecurityGroupRuleSet

type SecurityGroupRuleSet struct {
	// contains filtered or unexported fields
}

func (*SecurityGroupRuleSet) AddRule

func (srs *SecurityGroupRuleSet) AddRule(rule SecurityRule)

func (*SecurityGroupRuleSet) IsEqual

func (srs *SecurityGroupRuleSet) IsEqual(src SecurityGroupRuleSet) bool

func (*SecurityGroupRuleSet) String

func (srs *SecurityGroupRuleSet) String() string

type SecurityGroupSubRuleSet

type SecurityGroupSubRuleSet struct {
	// contains filtered or unexported fields
}

type SecurityGroupSubSubRuleSet

type SecurityGroupSubSubRuleSet struct {
	// contains filtered or unexported fields
}

type SecurityRule

type SecurityRule struct {
	Priority    int // [1, 100]
	Action      TSecurityRuleAction
	IPNet       *net.IPNet
	Protocol    string
	Direction   TSecurityRuleDirection
	PortStart   int
	PortEnd     int
	Ports       []int
	Description string
}

func MustParseSecurityRule

func MustParseSecurityRule(s string) *SecurityRule

func ParseSecurityRule

func ParseSecurityRule(pattern string) (*SecurityRule, error)

func (*SecurityRule) GetPortsString

func (rule *SecurityRule) GetPortsString() string

func (*SecurityRule) IsWildMatch

func (rule *SecurityRule) IsWildMatch() bool

func (*SecurityRule) ParseCIDR

func (rule *SecurityRule) ParseCIDR(cidr string) bool

func (*SecurityRule) ParsePorts

func (rule *SecurityRule) ParsePorts(seg string) error

func (*SecurityRule) String

func (rule *SecurityRule) String() (result string)

func (*SecurityRule) ValidateRule

func (rule *SecurityRule) ValidateRule() error

type SecurityRuleSet

type SecurityRuleSet []SecurityRule

func (SecurityRuleSet) AllowList

func (srs SecurityRuleSet) AllowList() SecurityRuleSet

convert to pure allow list

requirements on srs

• ordered by priority
• same direction

func (SecurityRuleSet) Equals

func (srs SecurityRuleSet) Equals(srs1 SecurityRuleSet) bool

func (SecurityRuleSet) Len

func (srs SecurityRuleSet) Len() int

func (SecurityRuleSet) Less

func (srs SecurityRuleSet) Less(i, j int) bool

func (SecurityRuleSet) String

func (srs SecurityRuleSet) String() string

func (SecurityRuleSet) Swap

func (srs SecurityRuleSet) Swap(i, j int)

type TSecurityRuleAction

type TSecurityRuleAction string

type TSecurityRuleDirection

type TSecurityRuleDirection string

type TSecurityRuleRelation

type TSecurityRuleRelation string