ipsec

Documentation

Index

• Constants
• func Test() error
• type Engine
  • func NewEngine(localSubnets []string, localCluster types.SubmarinerCluster, ...) *Engine
  • func (i *Engine) InstallCable(endpoint types.SubmarinerEndpoint) error
  • func (i *Engine) PrintConns()
  • func (i *Engine) ReloadEngine() error
  • func (i *Engine) RemoveCable(cableId string) error
  • func (i *Engine) StartEngine(ignition bool) error
  • func (i *Engine) StopEngine() error
  • func (i *Engine) SyncCables(clusterId string, endpoints []types.SubmarinerEndpoint) error
• type IPSecSpecification

Constants

const (

	// DefaultReplayWindowSize specifies the replay window size for charon
	DefaultReplayWindowSize = "1024"

	// DefaultIkeSaRekeyInterval specifies the default rekey interval for IKE_SA
	DefaultIkeSaRekeyInterval = "4h"

	// DefaultChildSaRekeyInterval specifies the default rekey interval for CHILD_SA
	DefaultChildSaRekeyInterval = "1h"
)

Functions

func Test

func Test() error

Types

type Engine

type Engine struct {
	sync.Mutex

	LocalSubnets              []string
	LocalCluster              types.SubmarinerCluster
	LocalEndpoint             types.SubmarinerEndpoint
	SecretKey                 string
	ReplayWindowSize          string
	IPSecIkeSaRekeyInterval   string
	IPSecChildSaRekeyInterval string

	Debug   bool
	LogFile string
}

func NewEngine

func NewEngine(localSubnets []string, localCluster types.SubmarinerCluster, localEndpoint types.SubmarinerEndpoint) *Engine

func (*Engine) InstallCable

func (i *Engine) InstallCable(endpoint types.SubmarinerEndpoint) error

func (*Engine) PrintConns

func (i *Engine) PrintConns()

func (*Engine) ReloadEngine

func (i *Engine) ReloadEngine() error

func (*Engine) RemoveCable

func (i *Engine) RemoveCable(cableId string) error

func (*Engine) StartEngine

func (i *Engine) StartEngine(ignition bool) error

func (*Engine) StopEngine

func (i *Engine) StopEngine() error

func (*Engine) SyncCables

func (i *Engine) SyncCables(clusterId string, endpoints []types.SubmarinerEndpoint) error

type IPSecSpecification

type IPSecSpecification struct {
	PSK     string
	Debug   bool
	LogFile string
}