util

Documentation

Index

• Constants
• func AddressSet(isValid func(ip net.IP) bool, addrs []net.Addr) sets.Set[string]
• func AppendPortIfNeeded(addr string, port int32) string
• func EnsureSysctl(sysctl utilsysctl.Interface, name string, newVal int) error
• func FilterInterfaceAddrsByCIDRStrings(nw NetworkInterfacer, cidrStrings []string) ([]net.IP, error)
• func FilterInterfaceAddrsByCIDRs(nw NetworkInterfacer, cidrs []*net.IPNet) ([]net.IP, error)
• func GetClusterIPByFamily(ipFamily v1.IPFamily, service *v1.Service) string
• func GetIPFamilyFromIP(ip net.IP) v1.IPFamily
• func IPPart(s string) string
• func IsVIPMode(ing v1.LoadBalancerIngress) bool
• func IsZeroCIDR(cidr string) bool
• func LogAndEmitIncorrectIPVersionEvent(recorder events.EventRecorder, ...)
• func MapCIDRsByIPFamily(cidrsStrings []string) map[v1.IPFamily][]*net.IPNet
• func MapIPsByIPFamily(ipStrings []string) map[v1.IPFamily][]net.IP
• func OtherIPFamily(ipFamily v1.IPFamily) v1.IPFamily
• func ShouldSkipService(service *v1.Service) bool
• type LineBuffer
  • func NewDiscardLineBuffer() LineBuffer
  • func NewLineBuffer() LineBuffer
• type LocalTrafficDetector
  • func NewDetectLocalByBridgeInterface(interfaceName string) LocalTrafficDetector
  • func NewDetectLocalByCIDR(cidr string) LocalTrafficDetector
  • func NewDetectLocalByInterfaceNamePrefix(interfacePrefix string) LocalTrafficDetector
  • func NewNoOpLocalDetector() LocalTrafficDetector
• type NetworkInterfacer
• type NodePortAddresses
  • func NewNodePortAddresses(family v1.IPFamily, cidrStrings []string) *NodePortAddresses
  • func (npa *NodePortAddresses) ContainsIPv4Loopback() bool
  • func (npa *NodePortAddresses) GetNodeIPs(nw NetworkInterfacer) ([]net.IP, error)
  • func (npa *NodePortAddresses) MatchAll() bool
  • func (npa *NodePortAddresses) String() string
• type RealNetwork
  • func (RealNetwork) InterfaceAddrs() ([]net.Addr, error)

Constants

const (
	// IPv4ZeroCIDR is the CIDR block for the whole IPv4 address space
	IPv4ZeroCIDR = "0.0.0.0/0"

	// IPv6ZeroCIDR is the CIDR block for the whole IPv6 address space
	IPv6ZeroCIDR = "::/0"
)

Functions

func AddressSet

func AddressSet(isValid func(ip net.IP) bool, addrs []net.Addr) sets.Set[string]

AddressSet validates the addresses in the slice using the "isValid" function. Addresses that pass the validation are returned as a string Set.

func AppendPortIfNeeded

func AppendPortIfNeeded(addr string, port int32) string

AppendPortIfNeeded appends the given port to IP address unless it is already in "ipv4:port" or "[ipv6]:port" format.

func EnsureSysctl

func EnsureSysctl(sysctl utilsysctl.Interface, name string, newVal int) error

EnsureSysctl sets a kernel sysctl to a given numeric value.

func FilterInterfaceAddrsByCIDRStrings

func FilterInterfaceAddrsByCIDRStrings(nw NetworkInterfacer, cidrStrings []string) ([]net.IP, error)

FilterInterfaceAddrsByCIDRStrings is a wrapper around FilterInterfaceAddrsByCIDRs which accepts CIDRs as list of strings.

func FilterInterfaceAddrsByCIDRs

func FilterInterfaceAddrsByCIDRs(nw NetworkInterfacer, cidrs []*net.IPNet) ([]net.IP, error)

FilterInterfaceAddrsByCIDRs filters the IP addresses of the provided NetworkInterfacer, returning only those that belong to any of the CIDRs specified in the given list.

func GetClusterIPByFamily

func GetClusterIPByFamily(ipFamily v1.IPFamily, service *v1.Service) string

GetClusterIPByFamily returns a service clusterip by family

func GetIPFamilyFromIP

func GetIPFamilyFromIP(ip net.IP) v1.IPFamily

GetIPFamilyFromIP Returns the IP family of ipStr, or IPFamilyUnknown if ipStr can't be parsed as an IP

func IPPart

func IPPart(s string) string

IPPart returns just the IP part of an IP or IP:port or endpoint string. If the IP part is an IPv6 address enclosed in brackets (e.g. "[fd00:1::5]:9999"), then the brackets are stripped as well.

func IsVIPMode

func IsVIPMode(ing v1.LoadBalancerIngress) bool

func IsZeroCIDR

func IsZeroCIDR(cidr string) bool

IsZeroCIDR checks whether the input CIDR string is either the IPv4 or IPv6 zero CIDR

func LogAndEmitIncorrectIPVersionEvent

func LogAndEmitIncorrectIPVersionEvent(recorder events.EventRecorder, fieldName, fieldValue, svcNamespace, svcName string, svcUID types.UID)

LogAndEmitIncorrectIPVersionEvent logs and emits incorrect IP version event.

func MapCIDRsByIPFamily

func MapCIDRsByIPFamily(cidrsStrings []string) map[v1.IPFamily][]*net.IPNet

MapCIDRsByIPFamily maps a slice of CIDRs to their respective IP families (v4 or v6)

func MapIPsByIPFamily

func MapIPsByIPFamily(ipStrings []string) map[v1.IPFamily][]net.IP

MapIPsByIPFamily maps a slice of IPs to their respective IP families (v4 or v6)

func OtherIPFamily

func OtherIPFamily(ipFamily v1.IPFamily) v1.IPFamily

OtherIPFamily returns the other ip family

func ShouldSkipService

func ShouldSkipService(service *v1.Service) bool

ShouldSkipService checks if a given service should skip proxying

Types

type LineBuffer

type LineBuffer interface {
	// Write takes a list of arguments, each a string or []string, joins all the
	// individual strings with spaces, terminates with newline, and writes them to the
	// buffer. Any other argument type will panic.
	Write(args ...interface{})

	// WriteBytes writes bytes to the buffer, and terminates with newline.
	WriteBytes(bytes []byte)

	// Reset clears the buffer
	Reset()

	// Bytes returns the contents of the buffer as a []byte
	Bytes() []byte

	// String returns the contents of the buffer as a string
	String() string

	// Lines returns the number of lines in the buffer. Note that more precisely, this
	// returns the number of times Write() or WriteBytes() was called; it assumes that
	// you never wrote any newlines to the buffer yourself.
	Lines() int
}

LineBuffer is an interface for writing lines of input to a bytes.Buffer

func NewDiscardLineBuffer

func NewDiscardLineBuffer() LineBuffer

NewDiscardLineBuffer returns a dummy LineBuffer that counts the number of writes but throws away the data. (This is used for iptables proxy partial syncs, to keep track of how many rules we managed to avoid having to sync.)

func NewLineBuffer

func NewLineBuffer() LineBuffer

NewLineBuffer returns a new "real" LineBuffer

type LocalTrafficDetector

type LocalTrafficDetector interface {
	// IsImplemented returns true if the implementation does something, false
	// otherwise. You should not call the other methods if IsImplemented() returns
	// false.
	IsImplemented() bool

	// IfLocal returns iptables arguments that will match traffic from a local pod.
	IfLocal() []string

	// IfNotLocal returns iptables arguments that will match traffic that is not from
	// a local pod.
	IfNotLocal() []string

	// IfLocalNFT returns nftables arguments that will match traffic from a local pod.
	IfLocalNFT() []string

	// IfNotLocalNFT returns nftables arguments that will match traffic that is not
	// from a local pod.
	IfNotLocalNFT() []string
}

LocalTrafficDetector generates iptables or nftables rules to detect traffic from local pods.

func NewDetectLocalByBridgeInterface

func NewDetectLocalByBridgeInterface(interfaceName string) LocalTrafficDetector

NewDetectLocalByBridgeInterface returns a LocalTrafficDetector that considers traffic from interfaceName to be from a local pod, and traffic from other interfaces to be non-local.

func NewDetectLocalByCIDR

func NewDetectLocalByCIDR(cidr string) LocalTrafficDetector

NewDetectLocalByCIDR returns a LocalTrafficDetector that considers traffic from the provided cidr to be from a local pod, and other traffic to be non-local. cidr is assumed to be valid.

func NewDetectLocalByInterfaceNamePrefix

func NewDetectLocalByInterfaceNamePrefix(interfacePrefix string) LocalTrafficDetector

NewDetectLocalByInterfaceNamePrefix returns a LocalTrafficDetector that considers traffic from interfaces starting with interfacePrefix to be from a local pod, and traffic from other interfaces to be non-local.

func NewNoOpLocalDetector

func NewNoOpLocalDetector() LocalTrafficDetector

NewNoOpLocalDetector returns a no-op implementation of LocalTrafficDetector.

type NetworkInterfacer

type NetworkInterfacer interface {
	InterfaceAddrs() ([]net.Addr, error)
}

NetworkInterfacer defines an interface for several net library functions. Production code will forward to net library functions, and unit tests will override the methods for testing purposes.

type NodePortAddresses

type NodePortAddresses struct {
	// contains filtered or unexported fields
}

NodePortAddresses is used to handle the --nodeport-addresses flag

func NewNodePortAddresses

func NewNodePortAddresses(family v1.IPFamily, cidrStrings []string) *NodePortAddresses

NewNodePortAddresses takes an IP family and the `--nodeport-addresses` value (which is assumed to contain only valid CIDRs, potentially of both IP families) and returns a NodePortAddresses object for the given family. If there are no CIDRs of the given family then the CIDR "0.0.0.0/0" or "::/0" will be added (even if there are CIDRs of the other family).

func (*NodePortAddresses) ContainsIPv4Loopback

func (npa *NodePortAddresses) ContainsIPv4Loopback() bool

ContainsIPv4Loopback returns true if npa's CIDRs contain an IPv4 loopback address.

func (*NodePortAddresses) GetNodeIPs

func (npa *NodePortAddresses) GetNodeIPs(nw NetworkInterfacer) ([]net.IP, error)

GetNodeIPs return all matched node IP addresses for npa's CIDRs. If no matching IPs are found, it returns an empty list. NetworkInterfacer is injected for test purpose.

func (*NodePortAddresses) MatchAll

func (npa *NodePortAddresses) MatchAll() bool

MatchAll returns true if npa matches all node IPs (of npa's given family)

func (*NodePortAddresses) String

func (npa *NodePortAddresses) String() string

type RealNetwork

type RealNetwork struct{}

RealNetwork implements the NetworkInterfacer interface for production code, just wrapping the underlying net library function calls.

func (RealNetwork) InterfaceAddrs

func (RealNetwork) InterfaceAddrs() ([]net.Addr, error)

InterfaceAddrs wraps net.InterfaceAddrs(), it's a part of NetworkInterfacer interface.