nftables

Documentation

Index

• type Firewall
  • func NewFirewall(nps *firewallv1.ClusterwideNetworkPolicyList, svcs *corev1.ServiceList, ...) *Firewall
  • func (f *Firewall) Reconcile() error

Types

type Firewall

type Firewall struct {
	Ingress      []string
	Egress       []string
	RateLimits   []firewallv1.RateLimit
	Ipv4RuleFile string
	DryRun       bool

	InternalPrefixes string
	// contains filtered or unexported fields
}

Firewall assembles nftable rules based on k8s entities

func NewFirewall

func NewFirewall(nps *firewallv1.ClusterwideNetworkPolicyList, svcs *corev1.ServiceList, spec firewallv1.FirewallSpec) *Firewall

NewFirewall creates a new nftables firewall object based on k8s entities

func (*Firewall) Reconcile

func (f *Firewall) Reconcile() error

Reconcile drives the nftables firewall against the desired state by comparison with the current rule file.