clientip

type AutoInterface struct {
	Name string `json:"name"`
	// Kind is the link kind the kernel reports (veth, macvlan, ipvlan, tun,
	// bridge, ...), "physical" for a NIC with a device behind it, "" when it
	// has none of either.
	Kind string `json:"kind"`
	// Addresses are its addresses with their prefix length.
	Addresses []string `json:"addresses"`
	// Trusted: its network is part of the automatic set.
	Trusted bool `json:"trusted"`
	// Reason is one of the Reason* codes.
	Reason string `json:"reason"`
}

type AutoResolution struct {
	// Environment is plain, container, host-network, kubernetes,
	// podman-rootless or unknown (the Env* constants).
	Environment string `json:"environment"`
	// Runtime is the container runtime the markers name: docker, podman,
	// kubernetes, containerd, container (a marker without a name); "" outside
	// a container.
	Runtime string `json:"runtime"`
	// Networks are the container networks trusted besides loopback, as CIDR.
	Networks []string `json:"networks"`
	// ExcludedGateways are the gateway addresses found (route next hops, the
	// first host address of each trusted network): never trusted by `auto`,
	// even inside a trusted network.
	ExcludedGateways []string `json:"excluded_gateways"`
	// ExcludedSelf are filex's own addresses on the trusted networks: never
	// trusted either. A connection from one of them was made inside filex's
	// own network namespace - measured: rootless Podman on a user-defined
	// network relays every published-port connection (from the internet
	// too) from the container's own address.
	ExcludedSelf []string `json:"excluded_self"`
	// Interfaces is what was looked at and what became of each (the "why").
	Interfaces []AutoInterface `json:"interfaces"`
	// Warning is "" or one of the Warn* codes; WarningDetail says what
	// exactly (English, for the log and the page's detail line).
	Warning       string `json:"warning"`
	WarningDetail string `json:"warning_detail,omitempty"`
	// ResolvedAt is when this answer was worked out.
	ResolvedAt time.Time `json:"resolved_at"`
}

type Classes struct {
	// Auto: the automatic set - loopback plus, in a container on its own
	// network, that network minus its gateways (AutoResolution).
	Auto bool `json:"auto"`
	// Loopback: netip.Addr.IsLoopback — this machine.
	Loopback bool `json:"loopback"`
	// Private: netip.Addr.IsPrivate — the RFC 1918 (IPv4) and RFC 4193 (IPv6)
	// private ranges.
	Private bool `json:"private"`
	// LinkLocal: netip.Addr.IsLinkLocalUnicast.
	LinkLocal bool `json:"link_local"`
}

type Forwarder struct {
	Address   string    `json:"address"`
	FirstSeen time.Time `json:"first_seen"`
	LastSeen  time.Time `json:"last_seen"`
	// Count is how many requests carried the header from it.
	Count int64 `json:"count"`
}

type Iface struct {
	Name     string
	Up       bool
	Loopback bool
	// Addrs are the interface's addresses with their prefix length (the
	// host part kept: 172.18.0.5/16).
	Addrs []netip.Prefix
}

type Set struct {
	// contains filtered or unexported fields
}

type System interface {
	// GOOS is runtime.GOOS; only Linux has containers to look for.
	GOOS() string
	// ReadFile reads a file (/proc/..., /run/.containerenv).
	ReadFile(name string) ([]byte, error)
	// Stat reports whether a path exists: nil, fs.ErrNotExist, or another
	// error when it cannot be told.
	Stat(name string) error
	// Getenv reads an environment variable.
	Getenv(key string) string
	// Interfaces lists the network interfaces with their addresses.
	Interfaces() ([]Iface, error)
	// LinkKinds answers the kernel's link kind of each interface by name
	// (netlink IFLA_INFO_KIND: veth, macvlan, ipvlan, tun, bridge, ...); an
	// interface with no kind (a physical NIC, loopback) is absent or "".
	LinkKinds() (map[string]string, error)
	// ByteOrder is how /proc/net/route prints an address: the host's own.
	ByteOrder() binary.ByteOrder
	// Now is the clock.
	Now() time.Time
}