iptables

Documentation

Index

• type Interface
  • func New() (Interface, error)
• type TargetType

Types

type Interface

type Interface interface {
	AddClusterEgressRules(sourceIP, snatIP, globalNetIPTableMark string) error
	RemoveClusterEgressRules(sourceIP, snatIP, globalNetIPTableMark string) error
	AddIngressRulesForHeadlessSvc(globalIP, podIP string, targetType TargetType) error
	RemoveIngressRulesForHeadlessSvc(globalIP, podIP string, targetType TargetType) error
	GetKubeProxyClusterIPServiceChainName(service *corev1.Service, kubeProxyServiceChainPrefix string) (string, bool, error)
	AddIngressRulesForHealthCheck(cniIfaceIP, globalIP string) error
	RemoveIngressRulesForHealthCheck(cniIfaceIP, globalIP string) error
	AddEgressRulesForHeadlessSvc(key, sourceIP, snatIP, globalNetIPTableMark string, targetType TargetType) error
	RemoveEgressRulesForHeadlessSvc(key, sourceIP, snatIP, globalNetIPTableMark string, targetType TargetType) error
	AddEgressRulesForPods(namespace, ipSetName, snatIP, globalNetIPTableMark string) error
	RemoveEgressRulesForPods(namespace, ipSetName, snatIP, globalNetIPTableMark string) error
	AddEgressRulesForNamespace(namespace, ipSetName, snatIP, globalNetIPTableMark string) error
	RemoveEgressRulesForNamespace(namespace, ipSetName, snatIP, globalNetIPTableMark string) error
	FlushIPTableChain(table, chainName string) error
	DeleteIPTableChain(table, chainName string) error
	DeleteIPTableRule(table, chainName, jumpTarget string) error
}

func New

func New() (Interface, error)

type TargetType

type TargetType string

const (
	PodTarget       TargetType = "Pod"
	EndpointsTarget TargetType = "Endpoints"
)