nftables

Documentation

Overview

Package nftables provides nftables integration.

Index

• func ApplyNftRules(allowlist []string, httpsPortStr, httpPortStr, dnsPortStr string) error
• func ApplyNftRulesAuto(allowlist []string, httpsPortStr, httpPortStr string) error
• func ApplyNftRulesWithContext(ctx context.Context, allowlist []string, ...) error
• func GenerateNftRuleset(allowlist []string, httpsPort, httpPort, dnsPort int, mode string) string
• func StreamNfLog() error
• func StreamNfLogWithLogger(ctx context.Context, lg *slog.Logger) error
• func Version(ctx context.Context) (string, error)

Functions

func ApplyNftRules

func ApplyNftRules(allowlist []string, httpsPortStr, httpPortStr, dnsPortStr string) error

ApplyNftRules applies nftables rules using a background context.

func ApplyNftRulesAuto

func ApplyNftRulesAuto(allowlist []string, httpsPortStr, httpPortStr string) error

ApplyNftRulesAuto applies nftables rules using port numbers from environment variables or defaults.

func ApplyNftRulesWithContext

func ApplyNftRulesWithContext(
	ctx context.Context,
	allowlist []string,
	httpsPortStr,
	httpPortStr,
	dnsPortStr string) error

ApplyNftRulesWithContext generates and applies the nftables ruleset using the provided context.

func GenerateNftRuleset

func GenerateNftRuleset(allowlist []string, httpsPort, httpPort, dnsPort int, mode string) string

GenerateNftRuleset generates a complete nftables ruleset for the specified mode, ports, and allowlist.

func StreamNfLog

func StreamNfLog() error

StreamNfLog starts streaming netfilter log events using the default logger.

func StreamNfLogWithLogger

func StreamNfLogWithLogger(ctx context.Context, lg *slog.Logger) error

StreamNfLogWithLogger streams netfilter log events from group 0 using the provided logger until context is done.

func Version

func Version(ctx context.Context) (string, error)

Version returns the nftables version string.