network

Documentation

Index

• Constants
• func SecurityGroupHasAllowRuleForDestination(nsg *aznetwork.SecurityGroup, protocol aznetwork.SecurityRuleProtocol, ...) bool
• func SecurityGroupHasDenyAllRuleForDestination(nsg *aznetwork.SecurityGroup, dstAddresses []netip.Addr) bool
• func SecurityGroupNotHasRuleForDestination(nsg *aznetwork.SecurityGroup, dstAddresses []netip.Addr) bool
• type SecurityGroupValidator
  • func NewSecurityGroupValidator(nsgs []*aznetwork.SecurityGroup) *SecurityGroupValidator
  • func (v *SecurityGroupValidator) HasDenyAllRuleForDestination(dstAddresses []netip.Addr) bool
  • func (v *SecurityGroupValidator) HasExactAllowRule(protocol aznetwork.SecurityRuleProtocol, srcPrefixes []string, ...) bool
  • func (v *SecurityGroupValidator) NotHasRuleForDestination(dstAddresses []netip.Addr) bool

Constants

const (
	IPV6Prefix = "IPv6"
)

Functions

func SecurityGroupHasAllowRuleForDestination

func SecurityGroupHasAllowRuleForDestination(
	nsg *aznetwork.SecurityGroup,
	protocol aznetwork.SecurityRuleProtocol,
	srcPrefixes []string,
	dstAddresses []netip.Addr, dstPorts []string,
) bool

func SecurityGroupHasDenyAllRuleForDestination

func SecurityGroupHasDenyAllRuleForDestination(nsg *aznetwork.SecurityGroup, dstAddresses []netip.Addr) bool

func SecurityGroupNotHasRuleForDestination

func SecurityGroupNotHasRuleForDestination(nsg *aznetwork.SecurityGroup, dstAddresses []netip.Addr) bool

Types

type SecurityGroupValidator

type SecurityGroupValidator struct {
	// contains filtered or unexported fields
}

func NewSecurityGroupValidator

func NewSecurityGroupValidator(nsgs []*aznetwork.SecurityGroup) *SecurityGroupValidator

func (*SecurityGroupValidator) HasDenyAllRuleForDestination

func (v *SecurityGroupValidator) HasDenyAllRuleForDestination(dstAddresses []netip.Addr) bool

HasDenyAllRuleForDestination checks if the security group has a rule that denies all traffic to the given destination addresses.

func (*SecurityGroupValidator) HasExactAllowRule

func (v *SecurityGroupValidator) HasExactAllowRule(
	protocol aznetwork.SecurityRuleProtocol,
	srcPrefixes []string,
	dstAddresses []netip.Addr,
	dstPorts []string,
) bool

HasExactAllowRule checks if the security group has a rule that allows traffic from the given source prefixes to the given destination addresses and ports.

func (*SecurityGroupValidator) NotHasRuleForDestination

func (v *SecurityGroupValidator) NotHasRuleForDestination(dstAddresses []netip.Addr) bool

NotHasRuleForDestination checks if the security group has a rule specifying the given destination addresses.