standalonednsproxy

type DNSPolicy struct {
	SourceEndpointId uint32       `protobuf:"varint,1,opt,name=source_endpoint_id,json=sourceEndpointId,proto3" json:"source_endpoint_id,omitempty"` // Endpoint ID of the workload this L7 DNS policy should apply to
	DnsPattern       []string     `protobuf:"bytes,2,rep,name=dns_pattern,json=dnsPattern,proto3" json:"dns_pattern,omitempty"`                      // Allowed DNS pattern this identity is allowed to resolve.
	DnsServers       []*DNSServer `protobuf:"bytes,3,rep,name=dns_servers,json=dnsServers,proto3" json:"dns_servers,omitempty"`                      // List of DNS servers to be allowed to connect.
	// contains filtered or unexported fields
}

type DNSServer struct {
	DnsServerIdentity uint32 `protobuf:"varint,1,opt,name=dns_server_identity,json=dnsServerIdentity,proto3" json:"dns_server_identity,omitempty"` // Identity of destination DNS server
	DnsServerPort     uint32 `protobuf:"varint,2,opt,name=dns_server_port,json=dnsServerPort,proto3" json:"dns_server_port,omitempty"`
	DnsServerProto    uint32 `protobuf:"varint,3,opt,name=dns_server_proto,json=dnsServerProto,proto3" json:"dns_server_proto,omitempty"`
	// contains filtered or unexported fields
}

type EndpointInfo struct {
	Id uint64   `protobuf:"varint,1,opt,name=id,proto3" json:"id,omitempty"`
	Ip [][]byte `protobuf:"bytes,2,rep,name=ip,proto3" json:"ip,omitempty"`
	// contains filtered or unexported fields
}

type FQDNDataClient interface {
	// StreamPolicyState is used by the Standalone DNS proxy to get the current policy state.
	// Policy state includes the DNS policies and the identity to IP mapping.
	// Cilium agent will stream DNS policies state to Standalone DNS proxy.
	// In case of any client side error, cilium agent will cancel the stream and SDP will have to re-subscribe.
	// In case of any server side error, cilium agent will send an error response and SDP will have to re-subscribe.
	StreamPolicyState(ctx context.Context, opts ...grpc.CallOption) (grpc.BidiStreamingClient[PolicyStateResponse, PolicyState], error)
	// UpdateMappingRequest is used by the Standalone DNS proxy to update ciliium agent with FQDN-IP mappings which in turn update L3/L4 policy maps.
	// In case of any error, SDP will either retry the connection if the error is server side or will error out.
	// Note: In case of concurrent updates, since this is called in a callback(notifyDNSMsg) from the DNS server it follows the same behavior as
	// the inbuilt dns proxy in cilium.
	UpdateMappingRequest(ctx context.Context, in *FQDNMapping, opts ...grpc.CallOption) (*UpdateMappingResponse, error)
}

type FQDNDataServer interface {
	// StreamPolicyState is used by the Standalone DNS proxy to get the current policy state.
	// Policy state includes the DNS policies and the identity to IP mapping.
	// Cilium agent will stream DNS policies state to Standalone DNS proxy.
	// In case of any client side error, cilium agent will cancel the stream and SDP will have to re-subscribe.
	// In case of any server side error, cilium agent will send an error response and SDP will have to re-subscribe.
	StreamPolicyState(grpc.BidiStreamingServer[PolicyStateResponse, PolicyState]) error
	// UpdateMappingRequest is used by the Standalone DNS proxy to update ciliium agent with FQDN-IP mappings which in turn update L3/L4 policy maps.
	// In case of any error, SDP will either retry the connection if the error is server side or will error out.
	// Note: In case of concurrent updates, since this is called in a callback(notifyDNSMsg) from the DNS server it follows the same behavior as
	// the inbuilt dns proxy in cilium.
	UpdateMappingRequest(context.Context, *FQDNMapping) (*UpdateMappingResponse, error)
}

type FQDNData_StreamPolicyStateClient = grpc.BidiStreamingClient[PolicyStateResponse, PolicyState]

type FQDNData_StreamPolicyStateServer = grpc.BidiStreamingServer[PolicyStateResponse, PolicyState]

type FQDNMapping struct {
	Fqdn           string   `protobuf:"bytes,1,opt,name=fqdn,proto3" json:"fqdn,omitempty"`                                            // dns name
	RecordIp       [][]byte `protobuf:"bytes,2,rep,name=record_ip,json=recordIp,proto3" json:"record_ip,omitempty"`                    // List of IPs corresponding to dns name
	Ttl            uint32   `protobuf:"varint,3,opt,name=ttl,proto3" json:"ttl,omitempty"`                                             // TTL of DNS record
	SourceIdentity uint32   `protobuf:"varint,4,opt,name=source_identity,json=sourceIdentity,proto3" json:"source_identity,omitempty"` // Identity of the client making the DNS request
	SourceIp       []byte   `protobuf:"bytes,5,opt,name=source_ip,json=sourceIp,proto3" json:"source_ip,omitempty"`                    // IP address of the client making the DNS request
	ResponseCode   uint32   `protobuf:"varint,6,opt,name=response_code,json=responseCode,proto3" json:"response_code,omitempty"`       // DNS Response code as specified in RFC2316
	// contains filtered or unexported fields
}

type IdentityToEndpointMapping struct {
	Identity     uint32          `protobuf:"varint,1,opt,name=identity,proto3" json:"identity,omitempty"`
	EndpointInfo []*EndpointInfo `protobuf:"bytes,2,rep,name=endpoint_info,json=endpointInfo,proto3" json:"endpoint_info,omitempty"`
	// contains filtered or unexported fields
}

type PolicyState struct {
	EgressL7DnsPolicy         []*DNSPolicy                 `protobuf:"bytes,1,rep,name=egress_l7_dns_policy,json=egressL7DnsPolicy,proto3" json:"egress_l7_dns_policy,omitempty"`
	RequestId                 string                       `protobuf:"bytes,2,opt,name=request_id,json=requestId,proto3" json:"request_id,omitempty"` // Random UUID based identifier which will be referenced in ACKs
	IdentityToEndpointMapping []*IdentityToEndpointMapping ``                                                                                         // Identity to Endpoint mapping for the DNS server and the source identity
	/* 140-byte string literal not displayed */
	// contains filtered or unexported fields
}

type PolicyStateResponse struct {
	Response  ResponseCode `protobuf:"varint,1,opt,name=response,proto3,enum=standalonednsproxy.ResponseCode" json:"response,omitempty"`
	RequestId string       `protobuf:"bytes,2,opt,name=request_id,json=requestId,proto3" json:"request_id,omitempty"` // Request ID for which response is sent to
	// contains filtered or unexported fields
}

type ResponseCode int32

type UnimplementedFQDNDataServer struct{}

type UnsafeFQDNDataServer interface {
	// contains filtered or unexported methods
}

type UpdateMappingResponse struct {
	Response ResponseCode `protobuf:"varint,1,opt,name=response,proto3,enum=standalonednsproxy.ResponseCode" json:"response,omitempty"`
	// contains filtered or unexported fields
}