filternet

command
v0.0.0-...-73c5c68 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Jan 9, 2023 License: GPL-3.0 Imports: 7 Imported by: 0

Documentation

Overview

Command filternet executes a command inside a network namespace applying optional netem constraints and iptables rules.

Filternet will create a network namespace. You can configure the namespace name using the --namespace-name flag. Otherwise, we'll use the default name: "jafar".

Then, filternet will create two network interfaces named `<namespace-name>-0` and `<namespace-name>-1`. Thus, by default those interface will be named "jafar0" and "jafar1".

The first interface will live in the current namespace while the second one will live in the new namespace.

Filternet will apply netem policies to outgoing and incoming traffic. By default there are no policies, but you can specify them using the `--download` and `--upload` flags.

You can also apply optional blocking policies using the `--firewall-rule` command line flag. Repeating such a flag multiple times installs additional rules. You should use these rules to block outgoing traffic.

You can also apply optional DNAT rules with `--dnat-rule`. Any time you repeat this flag you add a new rule. You should use these rules to hijack outgoing traffic towards proxies you control, which may apply additional blocking policies.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL