ipsec

Documentation

Index

• Constants
• type IPSecController
  • func NewIPsecController(k8sClientSet kubernetes.Interface, kniMap *ebpf.Map, decryptProg *ebpf.Program) (*IPSecController, error)
  • func (c *IPSecController) CleanAllIPsec()
  • func (c *IPSecController) Run(stop <-chan struct{})
  • func (c *IPSecController) Stop()
• type IpSecHandler
  • func NewIpSecHandler() *IpSecHandler
  • func (is *IpSecHandler) Clean(ip string) error
  • func (is *IpSecHandler) CreateXfrmRule(localNode, remoteNode *v1alpha1.KmeshNodeInfo) error
  • func (is *IpSecHandler) Flush() error
  • func (is *IpSecHandler) LoadIPSecKeyFromFile(filePath string) error
  • func (h *IpSecHandler) StartWatch(f func()) error
  • func (is *IpSecHandler) StopWatch()
• type IpSecKey

Constants

const (
	IpSecKeyFile = "./kmesh-ipsec/ipSec"
)

const (
	MaxRetries = 5
)

Types

type IPSecController

type IPSecController struct {
	// contains filtered or unexported fields
}

func NewIPsecController

func NewIPsecController(k8sClientSet kubernetes.Interface, kniMap *ebpf.Map, decryptProg *ebpf.Program) (*IPSecController, error)

func (*IPSecController) CleanAllIPsec

func (c *IPSecController) CleanAllIPsec()

func (*IPSecController) Run

func (c *IPSecController) Run(stop <-chan struct{})

func (*IPSecController) Stop

func (c *IPSecController) Stop()

type IpSecHandler

type IpSecHandler struct {
	Spi int
	// contains filtered or unexported fields
}

func NewIpSecHandler

func NewIpSecHandler() *IpSecHandler

func (*IpSecHandler) Clean

func (is *IpSecHandler) Clean(ip string) error

func (*IpSecHandler) CreateXfrmRule

func (is *IpSecHandler) CreateXfrmRule(localNode, remoteNode *v1alpha1.KmeshNodeInfo) error

func (*IpSecHandler) Flush

func (is *IpSecHandler) Flush() error

func (*IpSecHandler) LoadIPSecKeyFromFile

func (is *IpSecHandler) LoadIPSecKeyFromFile(filePath string) error

func (*IpSecHandler) StartWatch

func (h *IpSecHandler) StartWatch(f func()) error

func (*IpSecHandler) StopWatch

func (is *IpSecHandler) StopWatch()

type IpSecKey

type IpSecKey struct {
	Spi         int    `json:"spi"`
	AeadKeyName string `json:"aeadKeyName"`
	AeadKey     []byte `json:"aeadKey"`
	Length      int    `json:"length"`
}