sgfilter

type Admitter func(remote net.Addr) bool

type DefaultGroupSource interface {
	// DefaultGroupID returns the default group of vpcID; an empty vpcID means the default VPC.
	DefaultGroupID(vpcID string) string
}

type Dialer interface {
	DialContext(ctx context.Context, network, address string) (net.Conn, error)
}

type Enforcer struct {
	// contains filtered or unexported fields
}

type Flow struct {
	Protocol string
	Peer     Peer
	Port     int
}

type Group struct {
	ID      string
	Ingress []Rule
	Egress  []Rule
}

type Peer struct {
	Addr   netip.Addr
	Groups []string
}

type Proxy struct {
	// contains filtered or unexported fields
}

type Rule struct {
	Protocol string
	CIDRs    []netip.Prefix
	Groups   []string
	FromPort int
	ToPort   int
}

type Source interface {
	// SecurityGroups returns the named groups; unknown IDs are omitted.
	SecurityGroups(ids []string) []Group
	// GroupsOfAddr lists the security groups attached to the interface owning addr.
	GroupsOfAddr(addr netip.Addr) []string
}