iptables

package

v1.9.3 Latest Latest Go to latest Published: Oct 7, 2026 License: MIT Imports: 6 Imported by: 3

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/Azure/azure-container-networking

Links

Open Source Insights

Documentation ¶

Constants ¶

View Source

const (
	CNIInputChain  = "AZURECNIINPUT"
	CNIOutputChain = "AZURECNIOUTPUT"
)

cni iptable chains

View Source

const (
	Input       = "INPUT"
	Output      = "OUTPUT"
	Forward     = "FORWARD"
	Prerouting  = "PREROUTING"
	Postrouting = "POSTROUTING"
	Swift       = "SWIFT"
	Snat        = "SNAT"
	Return      = "RETURN"
)

standard iptable chains

View Source

const (
	Filter = "filter"
	Nat    = "nat"
	Mangle = "mangle"
	Raw    = "raw"
)

Standard Table names

View Source

const (
	Accept     = "ACCEPT"
	Drop       = "DROP"
	Masquerade = "MASQUERADE"
	Notrack    = "NOTRACK"
)

target

View Source

const (
	Insert = "I"
	Append = "A"
	Delete = "D"
)

actions

View Source

const (
	Established = "ESTABLISHED"
	Related     = "RELATED"
)

states

View Source

const (
	V4 = "4"
	V6 = "6"
)

View Source

const (
	DNSPort  = 53
	HTTPPort = 80
)

known ports

View Source

const (
	UDP = "udp"
	TCP = "tcp"
)

known protocols

Variables ¶

View Source

var DisableIPTableLock bool

Functions ¶

func IsRuleNotFoundErr ¶ added in v1.8.13

func IsRuleNotFoundErr(err error) bool

IsRuleNotFoundErr reports whether err is iptables' "no matching rule exists" failure from a delete, as opposed to a real failure such as a permission error or xtables lock contention. Callers that treat a missing rule as success can use this to filter, while still propagating every other error.

Types ¶

type Client ¶

type Client struct {
	// contains filtered or unexported fields
}

func NewClient ¶

func NewClient() *Client

func (*Client) AppendIptableRule ¶

func (c *Client) AppendIptableRule(version, tableName, chainName, match, target string) error

Append iptable rule at end of iptable chain

func (*Client) ChainExists ¶

func (c *Client) ChainExists(version, tableName, chainName string) bool

check if iptable chain alreay exists

func (*Client) CreateChain ¶

func (c *Client) CreateChain(version, tableName, chainName string) error

create new iptable chain under specified table name

func (*Client) DeleteIptableRule ¶

func (c *Client) DeleteIptableRule(version, tableName, chainName, match, target string) error

Delete matched iptable rule

func (*Client) GetAppendIptableRuleCmd ¶

func (c *Client) GetAppendIptableRuleCmd(version, tableName, chainName, match, target string) IPTableEntry

func (*Client) GetCreateChainCmd ¶

func (c *Client) GetCreateChainCmd(version, tableName, chainName string) IPTableEntry

func (*Client) GetInsertIptableRuleCmd ¶

func (c *Client) GetInsertIptableRuleCmd(version, tableName, chainName, match, target string) IPTableEntry

func (*Client) InsertIptableRule ¶

func (c *Client) InsertIptableRule(version, tableName, chainName, match, target string) error

Insert iptable rule at beginning of iptable chain

func (*Client) RuleExists ¶

func (c *Client) RuleExists(version, tableName, chainName, match, target string) bool

check if iptable rule alreay exists

func (*Client) RunCmd ¶

func (c *Client) RunCmd(version, params string) error

Run iptables command

type IPTableEntry ¶

type IPTableEntry struct {
	Version string
	Params  string
}

Source Files ¶

View all Source files

iptables.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL