netsec

Documentation

Index

• type ContainerSecurity
  • func NewContainerSecurity(id string, pid int, sgs map[string][]uint16, pretend bool) (contSec *ContainerSecurity, err error)
  • func (c ContainerSecurity) String() string
• type NetworkSecurity
  • func New(saveFile string, pretend bool) *NetworkSecurity
  • func (n *NetworkSecurity) AddContainerSecurity(id string, pid int, sgs map[string][]uint16) error
  • func (n *NetworkSecurity) DeleteIPGroup(name string) error
  • func (n *NetworkSecurity) RemoveContainerSecurity(id string) error
  • func (n *NetworkSecurity) UpdateIPGroup(name string, ips []string) error

Types

type ContainerSecurity

type ContainerSecurity struct {
	ID             string
	Pid            int
	Pretend        bool
	SecurityGroups map[string][]uint16 // ipgroup name -> ports
	// contains filtered or unexported fields
}

func NewContainerSecurity

func NewContainerSecurity(id string, pid int, sgs map[string][]uint16, pretend bool) (contSec *ContainerSecurity, err error)

func (ContainerSecurity) String

func (c ContainerSecurity) String() string

type NetworkSecurity

type NetworkSecurity struct {
	sync.Mutex
	Pretend    bool
	SaveFile   string                        // where to save state
	DeniedIPs  map[string]bool               // list of denied IPs. map for easy existence check
	IPGroups   map[string][]string           // group name -> list of infrastructure IPs to blanket deny
	Containers map[string]*ContainerSecurity // container id -> ContainerSecurity
}

func New

func New(saveFile string, pretend bool) *NetworkSecurity

func (*NetworkSecurity) AddContainerSecurity

func (n *NetworkSecurity) AddContainerSecurity(id string, pid int, sgs map[string][]uint16) error

func (*NetworkSecurity) DeleteIPGroup

func (n *NetworkSecurity) DeleteIPGroup(name string) error

func (*NetworkSecurity) RemoveContainerSecurity

func (n *NetworkSecurity) RemoveContainerSecurity(id string) error

func (*NetworkSecurity) UpdateIPGroup

func (n *NetworkSecurity) UpdateIPGroup(name string, ips []string) error