trireme-lib: go.aporeto.io/trireme-lib/controller/constants Index | Files

package constants

import "go.aporeto.io/trireme-lib/controller/constants"

Index

Package Files

constants.go

Constants

const (
    // DefaultProcMountPoint The default proc mountpoint
    DefaultProcMountPoint = "/proc"
    // DefaultAporetoProcMountPoint The aporeto proc mountpoint just in case we are launched with some specific docker config
    DefaultAporetoProcMountPoint = "/aporetoproc"
    // DefaultSecretsPath is the default path for the secrets proxy.
    DefaultSecretsPath = "@secrets"
)
const (
    // DefaultRemoteArg is the default arguments for a remote enforcer
    DefaultRemoteArg = "enforce"
    // DefaultConnMark is the default conn mark for all data packets
    DefaultConnMark = uint32(0xEEEE)
    // DefaultExternalConnMark is the default conn mark for all data packets
    DefaultExternalConnMark = uint32(0xEEEF)
    // DeleteConnmark is the mark used to trigger udp handshake.
    DeleteConnmark = uint32(0xABCD)
)
const (

    // EnvMountPoint is an environment variable which will contain the mount point
    EnvMountPoint = "TRIREME_ENV_PROC_MOUNTPOINT"

    // EnvEnforcerType is an environment variable which will indicate what enforcer type we want to use
    EnvEnforcerType = "TRIREME_ENV_ENFORCER_TYPE"

    // EnvContextSocket stores the path to the context specific socket
    EnvContextSocket = "TRIREME_ENV_SOCKET_PATH"

    // EnvStatsChannel stores the path to the stats channel
    EnvStatsChannel = "TRIREME_ENV_STATS_CHANNEL_PATH"

    // EnvDebugChannel stores the path to the debug channel
    EnvDebugChannel = "TRIREME_ENV_DEBUG_CHANNEL_PATH"

    // EnvRPCClientSecret is the secret used between RPC client/server
    EnvRPCClientSecret = "TRIREME_ENV_SECRET"

    // EnvStatsSecret is the secret to be used for the stats channel
    EnvStatsSecret = "TRIREME_ENV_STATS_SECRET"

    // EnvContainerPID is the PID of the container
    EnvContainerPID = "TRIREME_ENV_CONTAINER_PID"

    // EnvNSPath is the path of the network namespace
    EnvNSPath = "TRIREME_ENV_NS_PATH"

    // EnvNsenterErrorState stores the error state as reported by remote enforcer
    EnvNsenterErrorState = "TRIREME_ENV_NSENTER_ERROR_STATE"

    // EnvNsenterLogs stores the logs as reported by remote enforcer
    EnvNsenterLogs = "TRIREME_ENV_NSENTER_LOGS"

    // EnvLogLevel store the log level to be used.
    EnvLogLevel = "TRIREME_ENV_LOG_LEVEL"

    // EnvLogFormat store the log format to be used.
    EnvLogFormat = "TRIREME_ENV_LOG_FORMAT"

    // EnvLogToConsole specifies if logs should be sent out to console.
    EnvLogToConsole = "TRIREME_ENV_LOG_TO_CONSOLE"

    // EnvLogToConsoleEnable specifies value to enable logging to console.
    EnvLogToConsoleEnable = "1"

    // EnvLogID store the context Id for the log file to be used.
    EnvLogID = "TRIREME_ENV_LOG_ID"

    // EnvCompressedTags stores whether we should be using compressed tags.
    EnvCompressedTags = "TRIREME_ENV_COMPRESSED_TAGS"

    // EnvDisableLogWrite tells us if we are running in kubernetes, if true don't write the logs to a file.
    EnvDisableLogWrite = "TRIREME_ENV_DISABLE_LOG_WRITE"
)
const (
    TCPProtoNum    = "6"
    UDPProtoNum    = "17"
    TCPProtoString = "TCP"
    UDPProtoString = "UDP"
    AllProtoString = "ALL"
)

Protocol constants

const (
    StatsChannel = "/var/run/statschannel.sock"
    DebugChannel = "/var/run/debugchannel.sock"
)

sockets

const (
    // SynTokenCacheValiditity determines how often the data path creates new tokens.
    SynTokenCacheValiditity = 10 * time.Second

    // DatapathTokenValidity determines how long the tokens are valid.
    DatapathTokenValidity = 1 * time.Minute
)

Token and cache default validities. These have performance implications. The faster the datapath issues new tokens it affects performance. However, making it too slow can potentially allow reuse of the tokens. The token issuance rate must be always faster than the expiration rate.

const (
    CallbackURIExtension = "/aporeto/oidc/callback"
)

API service related constants

const (
    Ipv6Disabled = true
)

Ipv6Disabled is a flag to disable ipv6 in trireme

const (
    PortNumberLabelString = "@sys:port"
)

PortNumberLabelString is the label to use for port numbers

type LogLevel Uses

type LogLevel string

LogLevel corresponds to log level of any logger. eg: zap.

const (
    Info  LogLevel = "Info"
    Debug LogLevel = "Debug"
    Trace LogLevel = "Trace"
    Error LogLevel = "Error"
    Warn  LogLevel = "Warn"
)

Various log levels.

type ModeType Uses

type ModeType int

ModeType defines the mode of the enforcement and supervisor.

const (
    // RemoteContainer indicates that the Supervisor is implemented in the
    // container namespace
    RemoteContainer ModeType = iota
    // LocalServer indicates that the Supervisor applies to Linux processes
    LocalServer
    // Sidecar indicates the controller to be in sidecar mode
    Sidecar
    // LocalEnvoyAuthorizer indicates to use a local envoyproxy as enforcer/authorizer
    LocalEnvoyAuthorizer
    // RemoteContainerEnvoyAuthorizer indicates to use the envoyproxy enforcer/authorizer for containers
    RemoteContainerEnvoyAuthorizer
)

Package constants imports 1 packages (graph) and is imported by 49 packages. Updated 2019-10-18. Refresh now. Tools for package owners.