bypass4netns

Documentation

Index

• Constants
• func OpenMemWithNSEnterAgent(pid uint32) error
• type C2CConnectionHandleConfig
• type ForwardPortMapping
• type Handler
  • func NewHandler(socketPath, comSocketPath, tracerAgentLogPath string, ignoreBind bool) *Handler
  • func (h *Handler) SetForwardingPort(mapping ForwardPortMapping) error
  • func (h *Handler) SetIgnoredSubnets(subnets []net.IPNet, autoUpdate bool)
  • func (h *Handler) SetReadyFd(fd int) error
  • func (h *Handler) StartHandle(c2cConfig *C2CConnectionHandleConfig, multinodeConfig *MultinodeConfig)
• type MultinodeConfig

Constants

const (
	PROCESS pidInfoPidType = iota
	THREAD
)

const (
	SeccompAddFdFlagSetFd        = 1
	SeccompUserNotifFlagContinue = 1
	SeccompIocMagic              = '!'
)

const (
	// NotBypassableSocket  means that the fd is not socket or not bypassed
	NotBypassable socketState = iota

	// NotBypassed means that the socket is not bypassed.
	NotBypassed

	// Bypassed means that the socket is replaced by one created on the host
	Bypassed

	// Error happened after bypass. Nothing can be done to recover from this state.
	Error
)

const ETCD_MULTINODE_PREFIX = "bypass4netns/multinode/"

Functions

func OpenMemWithNSEnterAgent

func OpenMemWithNSEnterAgent(pid uint32) error

Types

type C2CConnectionHandleConfig

type C2CConnectionHandleConfig struct {
	Enable       bool
	TracerEnable bool
}

type ForwardPortMapping

type ForwardPortMapping struct {
	HostPort  int
	ChildPort int
}

type Handler

type Handler struct {
	// contains filtered or unexported fields
}

func NewHandler

func NewHandler(socketPath, comSocketPath, tracerAgentLogPath string, ignoreBind bool) *Handler

NewHandler creates new seccomp notif handler

func (*Handler) SetForwardingPort

func (h *Handler) SetForwardingPort(mapping ForwardPortMapping) error

SetForwardingPort checks and configures port forwarding

func (*Handler) SetIgnoredSubnets

func (h *Handler) SetIgnoredSubnets(subnets []net.IPNet, autoUpdate bool)

SetIgnoreSubnets configures subnets to ignore in bypass4netns.

func (*Handler) SetReadyFd

func (h *Handler) SetReadyFd(fd int) error

SetReadyFd configure ready notification file descriptor

func (*Handler) StartHandle

func (h *Handler) StartHandle(c2cConfig *C2CConnectionHandleConfig, multinodeConfig *MultinodeConfig)

StartHandle starts seccomp notif handler

type MultinodeConfig

type MultinodeConfig struct {
	Enable      bool
	EtcdAddress string
	HostAddress string
	// contains filtered or unexported fields
}