mapping

type DNATProvider ¶

type DNATProvider interface {
	SetupDNAT(externalIP net.IP, mapping *v1alpha1.Mapping, svc *v1.Service, eps *v1.Endpoints,
		setupMasquerade bool) error
	DeleteDNAT(externalIP net.IP, mapping *v1alpha1.Mapping) error
}

DNATProvider provides and interface to configure necessary DNAT rules from an External IP. The target of the translation a exact meanings to perform it are implementation specific.

SetupDNAT configures and synchronizes DNAT rules for the specified externalIP and mapping, service, endpoints trio

DeleteDNAT deletes all the configuration introduced by SetupDNAT for the specified externalIP and mapping.

func NewThroughServiceDNATProvider(iptables nettools.IPTablesHelper, ipset nettools.IPSetHelper,
	namer Namer) DNATProvider

type IPRouteSmartNatHelper ¶

type IPRouteSmartNatHelper interface {
	EnsureOnlyOneIPRuleExistsForFwMark(rule nettools.IPRule) ([]nettools.IPRule, time.Duration, error)
	etime.Refresher
}

IPRouteSmartNatHelper is a customized nettools.IPRouteProvider, which supports auto-refreshing of ip addresses and routes

func NewChanIPRouteSmartNatHelper(ipRouteHelper nettools.IPRouteHelper, ifaceProvider nettools.InterfaceProvider,
	updateChan chan time.Time, refreshOnCreate bool, gwAddressOffset int32) IPRouteSmartNatHelper

func NewIPRouteSmartNatHelper(routeHelperExecutor command.Executor, routeHelperIoOp nettools.SimpleFileOperator,
	ifaceProvider nettools.InterfaceProvider, refreshPeriod time.Duration, gwAddressOffset int32) IPRouteSmartNatHelper

type IPTablesHelp ¶

type IPTablesHelp struct {
	// contains filtered or unexported fields
}

IPTablesHelp implements IPTablesHelper interface using Linux iptables

func (h *IPTablesHelp) DeleteDNAT(externalIP net.IP, mapping *v1alpha1.Mapping) error

func (h *IPTablesHelp) DeleteMark(externalIP net.IP, mapping *v1alpha1.Mapping) error

func (h *IPTablesHelp) DeleteSNAT(externalIP net.IP, mapping *v1alpha1.Mapping) error

func (h *IPTablesHelp) SetupDNAT(externalIP net.IP, mapping *v1alpha1.Mapping, svc *v1.Service,
	eps *v1.Endpoints, setupMasquerade bool) error

func (h *IPTablesHelp) SetupMark(externalIP net.IP, mapping *v1alpha1.Mapping) error

func (h *IPTablesHelp) SetupSNAT(externalIP net.IP, mapping *v1alpha1.Mapping, svc *v1.Service,
	eps *v1.Endpoints) error

type IPTablesHelper ¶

type IPTablesHelper interface {
	SetupDNAT(externalIP net.IP, mapping *v1alpha1.Mapping, svc *v1.Service, eps *v1.Endpoints,
		setupMasquerade bool) error
	SetupSNAT(externalIP net.IP, mapping *v1alpha1.Mapping, svc *v1.Service, eps *v1.Endpoints) error
	SetupMark(externalIP net.IP, mapping *v1alpha1.Mapping) error
	DeleteDNAT(externalIP net.IP, mapping *v1alpha1.Mapping) error
	DeleteSNAT(externalIP net.IP, mapping *v1alpha1.Mapping) error
	DeleteMark(externalIP net.IP, mapping *v1alpha1.Mapping) error
}

IPTablesHelper provides high level operations tuned for smart-nat-controller on system's -

SetupDNAT sets up a DNAT rule for a traffic coming to externalIP to Service/Endpoints passed as the arguments for ports and sources listed in Maping.Spec.

SetupSNAT sets up a SNAT rule for a traffic coming from any pod listed in Endpoints and going out through the interface with externalIP.

SetupMark sets up an iptables mark rule for the set associated with this mapping and external IP ¶

DeleteDNAT deletes all DNAT entries created by SetupDNAT for externalIP and mapping passed as arguments.

DeleteSNAT deletes all SNAT entries created by SetupSNAT for externalIP and mapping passed as arguments.

DeleteMark deletes Mark entry created by SetupMark for externalIP and mapping passed as arguments.

func NewIPTablesHelper(dnatProvider DNATProvider, iptables nettools.IPTablesHelper, namer Namer,
	ifaceProvider nettools.InterfaceProvider, setupMasquerade, setupSNAT bool) (
	IPTablesHelper, error)

type LinuxSyncer ¶

type LinuxSyncer struct {
	// contains filtered or unexported fields
}

LinuxSyncer handles state synchronization between API objects and operating system configuration

func (s *LinuxSyncer) DeleteMapping(mapping *v1alpha1.Mapping, externalIP net.IP) (dirty bool, err error)

func (s *LinuxSyncer) SyncMapping(mapping *v1alpha1.Mapping, svc *v1.Service, eps *v1.Endpoints) (
	dirty bool, err error)

type Namer ¶

type Namer interface {
	Name(objectMeta metav1.ObjectMeta) ShortName
}

Namer provides a consistent, unique and concise names for full namespace/name names

Name returns a concise name for a give namespaced name

func NewNamer() Namer

type ReconcileMapping ¶

type ReconcileMapping struct {
	client.Client
	// contains filtered or unexported fields
}

ReconcileMapping reconciles a Mapping object

func (r *ReconcileMapping) Reconcile(request reconcile.Request) (reconcile.Result, error)

type Scrubber ¶

type Scrubber interface {

	// ScrubMapping does scrubbing on *v1alpha1.Mapping object, including validating ports
	// and setting their defaults if needed, validating CIDR expressions and checking if IP
	// address is local. It also checks for externalIP:port conflicts with mappings in
	// slice passed as the second argument.
	ScrubMapping(sn *v1alpha1.Mapping, others []v1alpha1.Mapping) (valid, dirty bool, validErrMessage string,
		localExternalIP *net.IP)

	// ValidateEndpoints checks if Endpoints have only 0 or 1 Subsets
	ValidateEndpoints(mapping *smartnatv1alpha1.Mapping, endpoints *v1.Endpoints) error
}

Scrubber provides validation, scrubbing and safe defaults for objects passed to it.

func NewScrubber(interfaceProvider nettools.InterfaceProvider, cfg *config.Config) Scrubber

type ShortName ¶

type ShortName = string

ShortName is a at most 24 characters long name based on original metav1.ObjectMeta namespace and name

type Syncer ¶

type Syncer interface {

	// DeleteMapping deletes all the configuration related to the
	// Mapping passed as an argument
	DeleteMapping(sn *v1alpha1.Mapping, externalIP net.IP) (dirty bool, err error)

	// SyncMapping reconciles data input and output paths, setting up everything
	// that is needed for the traffic arriving on External IP to reach
	// the given Service and then get back to a client
	SyncMapping(sn *v1alpha1.Mapping, svc *v1.Service, eps *v1.Endpoints) (dirty bool, err error)
}

Syncer runs everything required to reconcile a single Mapping

func NewSyncer(namer Namer, interfaceProvider nettools.InterfaceProvider,
	ipRouteHelper IPRouteSmartNatHelper, conntrackHelper nettools.ConntrackHelper,
	iptHelper IPTablesHelper, ipsetHelper nettools.IPSetHelper, setupSNAT,
	setupMasq bool) Syncer

type ThroughServiceDNAT ¶

type ThroughServiceDNAT struct {
	// contains filtered or unexported fields
}

ThroughServiceDNAT implements DNATProvider by doing translation from External IP to ClusterIP of the service. The translation is done using iptables and will only work if kube-proxy is not running in 'iptables' mode. 'IPVS' kube-proxy is highly recommended and the only supported configuration.

func (p *ThroughServiceDNAT) DeleteDNAT(externalIP net.IP, mapping *v1alpha1.Mapping) error

func (p *ThroughServiceDNAT) SetupDNAT(externalIP net.IP, mapping *v1alpha1.Mapping, svc *v1.Service,
	_ *v1.Endpoints, setupMasquerade bool) error