snat

Documentation

Index

• Constants
• type Client
  • func NewSnatClient(hostIfName string, contIfName string, localIP string, snatBridgeIP string, ...) Client
  • func (client *Client) AllowIPAddressesOnSnatBridge() error
  • func (client *Client) AllowInboundFromHostToNC() error
  • func (client *Client) AllowInboundFromNCToHost() error
  • func (client *Client) BlockIPAddressesOnSnatBridge() error
  • func (client *Client) ConfigureSnatContainerInterface() error
  • func (client *Client) CreateSnatEndpoint() error
  • func (client *Client) DeleteInboundFromHostToNC() error
  • func (client *Client) DeleteInboundFromNCToHost() error
  • func (client *Client) DeleteSnatEndpoint() error
  • func (client *Client) DropArpForSnatBridgeApipaRange(snatBridgeIP, azSnatVethIfName string) error
  • func (client *Client) EnableIPForwarding() error
  • func (client *Client) MoveSnatEndpointToContainerNS(netnsPath string, nsID uintptr) error
  • func (client *Client) SetupSnatContainerInterface() error

Constants

const (
	SnatBridgeName = "azSnatbr"
	ImdsIP         = "169.254.169.254/32"
)

Types

type Client

type Client struct {
	SnatBridgeIP           string
	SkipAddressesFromBlock []string
	// contains filtered or unexported fields
}

func NewSnatClient

func NewSnatClient(hostIfName string,
	contIfName string,
	localIP string,
	snatBridgeIP string,
	hostPrimaryMac string,
	skipAddressesFromBlock []string,
	enableProxyArpOnBridge bool,
	nl netlink.NetlinkInterface,
	plClient platform.ExecClient,
	iptc ipTablesClient,
) Client

func (*Client) AllowIPAddressesOnSnatBridge

func (client *Client) AllowIPAddressesOnSnatBridge() error

AllowIPAddressesOnSnatBridge adds iptables rules that allows only specific Private IPs via linux bridge

func (*Client) AllowInboundFromHostToNC

func (client *Client) AllowInboundFromHostToNC() error

This function adds iptables rules that allows only host to NC communication and not the other way

func (*Client) AllowInboundFromNCToHost

func (client *Client) AllowInboundFromNCToHost() error

This function adds iptables rules that allows only NC to Host communication and not the other way

func (*Client) BlockIPAddressesOnSnatBridge

func (client *Client) BlockIPAddressesOnSnatBridge() error

BlockIPAddressesOnSnatBridge adds iptables rules that blocks all private IPs flowing via linux bridge

func (*Client) ConfigureSnatContainerInterface

func (client *Client) ConfigureSnatContainerInterface() error

Configures Local IP Address for container Veth

func (*Client) CreateSnatEndpoint

func (client *Client) CreateSnatEndpoint() error

func (*Client) DeleteInboundFromHostToNC

func (client *Client) DeleteInboundFromHostToNC() error

func (*Client) DeleteInboundFromNCToHost

func (client *Client) DeleteInboundFromNCToHost() error

func (*Client) DeleteSnatEndpoint

func (client *Client) DeleteSnatEndpoint() error

func (*Client) DropArpForSnatBridgeApipaRange

func (client *Client) DropArpForSnatBridgeApipaRange(snatBridgeIP, azSnatVethIfName string) error

func (*Client) EnableIPForwarding

func (client *Client) EnableIPForwarding() error

This function enables ip forwarding in VM and allow forwarding packets from the interface

func (*Client) MoveSnatEndpointToContainerNS

func (client *Client) MoveSnatEndpointToContainerNS(netnsPath string, nsID uintptr) error

Move container veth inside container network namespace

func (*Client) SetupSnatContainerInterface

func (client *Client) SetupSnatContainerInterface() error

Configure Routes and setup name for container veth