iptables

Documentation

Index

• Constants
• type Chains
• type FirewallOpener
  • func NewFirewallOpener(ruleTranslator RuleTranslator, iptables IPTables) *FirewallOpener
  • func (f *FirewallOpener) BulkOpen(logger lager.Logger, instance, handle string, rules []garden.NetOutRule) error
  • func (f *FirewallOpener) Open(logger lager.Logger, instance, handle string, rule garden.NetOutRule) error
• type IPTables
• type IPTablesController
  • func New(iptablesBinPath, iptablesRestoreBinPath string, ...) *IPTablesController
  • func (iptables *IPTablesController) BulkPrependRules(chain string, rules []Rule) error
  • func (iptables *IPTablesController) CreateChain(table, chain string) error
  • func (iptables *IPTablesController) DeleteChain(table, chain string) error
  • func (iptables *IPTablesController) DeleteChainReferences(table, targetChain, referencedChain string) error
  • func (iptables *IPTablesController) FlushChain(table, chain string) error
  • func (iptables *IPTablesController) InstanceChain(instanceId string) string
  • func (iptables *IPTablesController) PrependRule(chain string, rule Rule) error
• type InstanceChainCreator
  • func NewInstanceChainCreator(iptables *IPTablesController) *InstanceChainCreator
  • func (cc *InstanceChainCreator) Create(logger lager.Logger, handle, instanceId, bridgeName string, ip net.IP, ...) error
  • func (cc *InstanceChainCreator) Destroy(logger lager.Logger, instanceId string) error
• type Locksmith
• type PortForwarder
  • func NewPortForwarder(iptables *IPTablesController) *PortForwarder
  • func (p *PortForwarder) Forward(spec kawasaki.PortForwarderSpec) error
• type Rule
• type RuleTranslator
  • func NewRuleTranslator() RuleTranslator
• type SingleFilterRule
  • func (r SingleFilterRule) Flags(chain string) (params []string)
• type Starter
  • func NewStarter(iptables *IPTablesController, allowHostAccess bool, nicPrefix string, ...) *Starter
  • func (s Starter) Start() error

Constants

const LockKey = "/var/run/garden-iptables.lock"

const SetupScript = `` /* 7530-byte string literal not displayed */

Types

type Chains

type Chains struct {
	Prerouting, Postrouting, Input, Forward, Default string
}

type FirewallOpener

type FirewallOpener struct {
	// contains filtered or unexported fields
}

func NewFirewallOpener

func NewFirewallOpener(ruleTranslator RuleTranslator, iptables IPTables) *FirewallOpener

func (*FirewallOpener) BulkOpen

func (f *FirewallOpener) BulkOpen(logger lager.Logger, instance, handle string, rules []garden.NetOutRule) error

func (*FirewallOpener) Open

func (f *FirewallOpener) Open(logger lager.Logger, instance, handle string, rule garden.NetOutRule) error

type IPTables

type IPTables interface {
	CreateChain(table, chain string) error
	DeleteChain(table, chain string) error
	FlushChain(table, chain string) error
	DeleteChainReferences(table, targetChain, referencedChain string) error
	PrependRule(chain string, rule Rule) error
	BulkPrependRules(chain string, rules []Rule) error
	InstanceChain(instanceId string) string
}

type IPTablesController

type IPTablesController struct {
	// contains filtered or unexported fields
}

func New

func New(iptablesBinPath, iptablesRestoreBinPath string, runner commandrunner.CommandRunner, locksmith Locksmith, chainPrefix string) *IPTablesController

func (*IPTablesController) BulkPrependRules

func (iptables *IPTablesController) BulkPrependRules(chain string, rules []Rule) error

func (*IPTablesController) CreateChain

func (iptables *IPTablesController) CreateChain(table, chain string) error

func (*IPTablesController) DeleteChain

func (iptables *IPTablesController) DeleteChain(table, chain string) error

func (*IPTablesController) DeleteChainReferences

func (iptables *IPTablesController) DeleteChainReferences(table, targetChain, referencedChain string) error

func (*IPTablesController) FlushChain

func (iptables *IPTablesController) FlushChain(table, chain string) error

func (*IPTablesController) InstanceChain

func (iptables *IPTablesController) InstanceChain(instanceId string) string

func (*IPTablesController) PrependRule

func (iptables *IPTablesController) PrependRule(chain string, rule Rule) error

type InstanceChainCreator

type InstanceChainCreator struct {
	// contains filtered or unexported fields
}

func NewInstanceChainCreator

func NewInstanceChainCreator(iptables *IPTablesController) *InstanceChainCreator

func (*InstanceChainCreator) Create

func (cc *InstanceChainCreator) Create(logger lager.Logger, handle, instanceId, bridgeName string, ip net.IP, network *net.IPNet) error

func (*InstanceChainCreator) Destroy

func (cc *InstanceChainCreator) Destroy(logger lager.Logger, instanceId string) error

type Locksmith

type Locksmith interface {
	Lock(key string) (locksmith.Unlocker, error)
}

type PortForwarder

type PortForwarder struct {
	// contains filtered or unexported fields
}

func NewPortForwarder

func NewPortForwarder(iptables *IPTablesController) *PortForwarder

func (*PortForwarder) Forward

func (p *PortForwarder) Forward(spec kawasaki.PortForwarderSpec) error

type Rule

type Rule interface {
	Flags(chain string) []string
}

type RuleTranslator

type RuleTranslator interface {
	TranslateRule(handle string, gardenRule garden.NetOutRule) ([]Rule, error)
}

func NewRuleTranslator

func NewRuleTranslator() RuleTranslator

type SingleFilterRule

type SingleFilterRule struct {
	Protocol garden.Protocol
	Networks *garden.IPRange
	Ports    *garden.PortRange
	ICMPs    *garden.ICMPControl
	Log      bool
	Handle   string
}

func (SingleFilterRule) Flags

func (r SingleFilterRule) Flags(chain string) (params []string)

type Starter

type Starter struct {
	// contains filtered or unexported fields
}

func NewStarter

func NewStarter(iptables *IPTablesController, allowHostAccess bool, nicPrefix string, denyNetworks []string, destroyContainersOnStartup bool, logger lager.Logger) *Starter

func (Starter) Start

func (s Starter) Start() error