Documentation
¶
Index ¶
- type Nftables
- func (d Nftables) Compat() (bool, bool)
- func (d Nftables) InstanceClearBridgeFilter(projectName, instanceName, deviceName, parentName, hostName, hwAddr string, ...) error
- func (d Nftables) InstanceClearProxyNAT(projectName, instanceName, deviceName string) error
- func (d Nftables) InstanceSetupBridgeFilter(projectName, instanceName, deviceName, parentName, hostName, hwAddr string, ...) error
- func (d Nftables) InstanceSetupProxyNAT(projectName, instanceName, deviceName string, ...) error
- func (d Nftables) NetworkClear(networkName string, ipVersion uint) error
- func (d Nftables) NetworkSetupDHCPDNSAccess(networkName string, ipVersion uint) error
- func (d Nftables) NetworkSetupDHCPv4Checksum(networkName string) error
- func (d Nftables) NetworkSetupForwardingPolicy(networkName string, ipVersion uint, allow bool) error
- func (d Nftables) NetworkSetupOutboundNAT(networkName string, subnet *net.IPNet, srcIP net.IP, _ bool) error
- func (d Nftables) String() string
- type Xtables
- func (d Xtables) Compat() (bool, bool)
- func (d Xtables) InstanceClearBridgeFilter(projectName, instanceName, deviceName, parentName, hostName, hwAddr string, ...) error
- func (d Xtables) InstanceClearProxyNAT(projectName, instanceName, deviceName string) error
- func (d Xtables) InstanceSetupBridgeFilter(projectName, instanceName, deviceName, parentName, hostName, hwAddr string, ...) error
- func (d Xtables) InstanceSetupProxyNAT(projectName, instanceName, deviceName string, ...) error
- func (d Xtables) NetworkClear(networkName string, ipVersion uint) error
- func (d Xtables) NetworkSetupDHCPDNSAccess(networkName string, ipVersion uint) error
- func (d Xtables) NetworkSetupDHCPv4Checksum(networkName string) error
- func (d Xtables) NetworkSetupForwardingPolicy(networkName string, ipVersion uint, allow bool) error
- func (d Xtables) NetworkSetupOutboundNAT(networkName string, subnet *net.IPNet, srcIP net.IP, appendRule bool) error
- func (d Xtables) String() string
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type Nftables ¶
type Nftables struct{}
Nftables is an implmentation of LXD firewall using nftables.
func (Nftables) Compat ¶
Compat returns whether the host is compatible with this driver and whether the driver backend is in use.
func (Nftables) InstanceClearBridgeFilter ¶
func (d Nftables) InstanceClearBridgeFilter(projectName, instanceName, deviceName, parentName, hostName, hwAddr string, IPv4, IPv6 net.IP) error
InstanceClearBridgeFilter removes any filter rules that were added to apply bridged device IP filtering.
func (Nftables) InstanceClearProxyNAT ¶
InstanceClearProxyNAT remove DNAT rules for proxy devices.
func (Nftables) InstanceSetupBridgeFilter ¶
func (d Nftables) InstanceSetupBridgeFilter(projectName, instanceName, deviceName, parentName, hostName, hwAddr string, IPv4, IPv6 net.IP) error
InstanceSetupBridgeFilter sets up the filter rules to apply bridged device IP filtering.
func (Nftables) InstanceSetupProxyNAT ¶
func (d Nftables) InstanceSetupProxyNAT(projectName, instanceName, deviceName string, listen, connect *deviceConfig.ProxyAddress) error
InstanceSetupProxyNAT creates DNAT rules for proxy devices.
func (Nftables) NetworkClear ¶
NetworkClear removes the LXD network related chains.
func (Nftables) NetworkSetupDHCPDNSAccess ¶
NetworkSetupDHCPDNSAccess sets up basic nftables overrides for DHCP/DNS.
func (Nftables) NetworkSetupDHCPv4Checksum ¶
NetworkSetupDHCPv4Checksum attempts a workaround for broken DHCP clients. No-op as not supported by nftables. See https://wiki.nftables.org/wiki-nftables/index.php/Supported_features_compared_to_xtables#CHECKSUM.
func (Nftables) NetworkSetupForwardingPolicy ¶
func (d Nftables) NetworkSetupForwardingPolicy(networkName string, ipVersion uint, allow bool) error
NetworkSetupForwardingPolicy allows forwarding dependent on boolean argument
func (Nftables) NetworkSetupOutboundNAT ¶
func (d Nftables) NetworkSetupOutboundNAT(networkName string, subnet *net.IPNet, srcIP net.IP, _ bool) error
NetworkSetupOutboundNAT configures outbound NAT. If srcIP is non-nil then SNAT is used with the specified address, otherwise MASQUERADE mode is used. Append mode is always on and so the append argument is ignored.
type Xtables ¶
type Xtables struct{}
Xtables is an implmentation of LXD firewall using {ip, ip6, eb}tables
func (Xtables) Compat ¶
Compat returns whether the host is compatible with this driver and whether the driver backend is in use.
func (Xtables) InstanceClearBridgeFilter ¶
func (d Xtables) InstanceClearBridgeFilter(projectName, instanceName, deviceName, parentName, hostName, hwAddr string, IPv4, IPv6 net.IP) error
InstanceClearBridgeFilter removes any filter rules that were added to apply bridged device IP filtering.
func (Xtables) InstanceClearProxyNAT ¶
InstanceClearProxyNAT remove DNAT rules for proxy devices.
func (Xtables) InstanceSetupBridgeFilter ¶
func (d Xtables) InstanceSetupBridgeFilter(projectName, instanceName, deviceName, parentName, hostName, hwAddr string, IPv4, IPv6 net.IP) error
InstanceSetupBridgeFilter sets up the filter rules to apply bridged device IP filtering.
func (Xtables) InstanceSetupProxyNAT ¶
func (d Xtables) InstanceSetupProxyNAT(projectName, instanceName, deviceName string, listen, connect *deviceConfig.ProxyAddress) error
InstanceSetupProxyNAT creates DNAT rules for proxy devices.
func (Xtables) NetworkClear ¶
NetworkClear removes network rules from filter, mangle and nat tables.
func (Xtables) NetworkSetupDHCPDNSAccess ¶
NetworkSetupDHCPDNSAccess sets up basic iptables overrides for DHCP/DNS.
func (Xtables) NetworkSetupDHCPv4Checksum ¶
NetworkSetupDHCPv4Checksum attempts a workaround for broken DHCP clients.
func (Xtables) NetworkSetupForwardingPolicy ¶
NetworkSetupForwardingPolicy allows forwarding dependent on boolean argument
func (Xtables) NetworkSetupOutboundNAT ¶
func (d Xtables) NetworkSetupOutboundNAT(networkName string, subnet *net.IPNet, srcIP net.IP, appendRule bool) error
NetworkSetupOutboundNAT configures outbound NAT. If srcIP is non-nil then SNAT is used with the specified address, otherwise MASQUERADE mode is used.
Source Files