iptables

Documentation

Index

• Constants
• func Lock(lockFilePath string, timeout time.Duration) (func() error, error)
• func MakeChainLine(chain string) string
• type Client
  • func New() (*Client, error)
  • func (c *Client) EnsureChain(table string, chain string) error
  • func (c *Client) EnsureRule(table string, chain string, ruleSpec []string) error
  • func (c *Client) Restore(data []byte, flush bool) error
  • func (c *Client) Save() ([]byte, error)

Constants

const (
	NATTable    = "nat"
	FilterTable = "filter"
	MangleTable = "mangle"
	RawTable    = "raw"

	AcceptTarget     = "ACCEPT"
	MasqueradeTarget = "MASQUERADE"
	MarkTarget       = "MARK"
	ConnTrackTarget  = "CT"

	PreRoutingChain  = "PREROUTING"
	ForwardChain     = "FORWARD"
	PostRoutingChain = "POSTROUTING"
)

const (
	XtablesLockFilePath = "/var/run/xtables.lock"
)

Functions

func Lock

func Lock(lockFilePath string, timeout time.Duration) (func() error, error)

Lock acquires the provided file lock. It's thread-safe. It will block until the lock is acquired or the timeout is reached.

func MakeChainLine

func MakeChainLine(chain string) string

Types

type Client

type Client struct {
	// contains filtered or unexported fields
}

func New

func New() (*Client, error)

func (*Client) EnsureChain

func (c *Client) EnsureChain(table string, chain string) error

ensureChain checks if target chain already exists, creates it if not.

func (*Client) EnsureRule

func (c *Client) EnsureRule(table string, chain string, ruleSpec []string) error

ensureRule checks if target rule already exists, appends it if not.

func (*Client) Restore

func (c *Client) Restore(data []byte, flush bool) error

Restore calls iptable-restore to restore iptables with the provided content. If flush is true, all previous contents of the respective tables will be flushed. Otherwise only involved chains will be flushed.

func (*Client) Save

func (c *Client) Save() ([]byte, error)

Save calls iptables-saves to dump chains and tables in iptables.