standalonednsproxy

type DNSPolicy struct {
	SourceEndpointId uint32       `protobuf:"varint,1,opt,name=source_endpoint_id,json=sourceEndpointId,proto3" json:"source_endpoint_id,omitempty"` // Endpoint ID of the workload this L7 DNS policy should apply to
	DnsPattern       []string     `protobuf:"bytes,2,rep,name=dns_pattern,json=dnsPattern,proto3" json:"dns_pattern,omitempty"`                      // Allowed DNS pattern this identity is allowed to resolve.
	DnsServers       []*DNSServer `protobuf:"bytes,3,rep,name=dns_servers,json=dnsServers,proto3" json:"dns_servers,omitempty"`                      // List of DNS servers to be allowed to connect.
	// contains filtered or unexported fields
}

type DNSResponseData struct {
	IsResponse  bool     `protobuf:"varint,1,opt,name=is_response,json=isResponse,proto3" json:"is_response,omitempty"`           // Whether this is a DNS response (true) or request (false)
	Cnames      []string `protobuf:"bytes,2,rep,name=cnames,proto3" json:"cnames,omitempty"`                                      // CNAME records from the DNS response
	Qtypes      []uint32 `protobuf:"varint,3,rep,packed,name=qtypes,proto3" json:"qtypes,omitempty"`                              // DNS question types
	AnswerTypes []uint32 `protobuf:"varint,4,rep,packed,name=answer_types,json=answerTypes,proto3" json:"answer_types,omitempty"` // DNS answer record types
	// contains filtered or unexported fields
}

type DNSServer struct {
	DnsServerIdentity uint32 `protobuf:"varint,1,opt,name=dns_server_identity,json=dnsServerIdentity,proto3" json:"dns_server_identity,omitempty"` // Identity of destination DNS server
	DnsServerPort     uint32 `protobuf:"varint,2,opt,name=dns_server_port,json=dnsServerPort,proto3" json:"dns_server_port,omitempty"`
	DnsServerProto    uint32 `protobuf:"varint,3,opt,name=dns_server_proto,json=dnsServerProto,proto3" json:"dns_server_proto,omitempty"`
	// contains filtered or unexported fields
}

type EndpointInfo struct {
	Id uint64   `protobuf:"varint,1,opt,name=id,proto3" json:"id,omitempty"`
	Ip [][]byte `protobuf:"bytes,2,rep,name=ip,proto3" json:"ip,omitempty"`
	// contains filtered or unexported fields
}

type FQDNDataClient interface {
	// StreamPolicyState is used by the Standalone DNS proxy to get the current policy state.
	// Policy state includes the DNS policies and the identity to IP mapping.
	// Cilium agent will stream DNS policies state to Standalone DNS proxy.
	// In case of any client side error, cilium agent will cancel the stream and SDP will have to re-subscribe.
	// In case of any server side error, cilium agent will send an error response and SDP will have to re-subscribe.
	StreamPolicyState(ctx context.Context, opts ...grpc.CallOption) (grpc.BidiStreamingClient[PolicyStateResponse, PolicyState], error)
	// UpdateMappingRequest is used by the Standalone DNS proxy to update ciliium agent with FQDN-IP mappings which in turn update L3/L4 policy maps.
	// In case of any error, SDP will either retry the connection if the error is server side or will error out.
	// Note: In case of concurrent updates, since this is called in a callback(notifyDNSMsg) from the DNS server it follows the same behavior as
	// the inbuilt dns proxy in cilium.
	UpdateMappingRequest(ctx context.Context, in *FQDNMapping, opts ...grpc.CallOption) (*UpdateMappingResponse, error)
}

type FQDNDataServer interface {
	// StreamPolicyState is used by the Standalone DNS proxy to get the current policy state.
	// Policy state includes the DNS policies and the identity to IP mapping.
	// Cilium agent will stream DNS policies state to Standalone DNS proxy.
	// In case of any client side error, cilium agent will cancel the stream and SDP will have to re-subscribe.
	// In case of any server side error, cilium agent will send an error response and SDP will have to re-subscribe.
	StreamPolicyState(grpc.BidiStreamingServer[PolicyStateResponse, PolicyState]) error
	// UpdateMappingRequest is used by the Standalone DNS proxy to update ciliium agent with FQDN-IP mappings which in turn update L3/L4 policy maps.
	// In case of any error, SDP will either retry the connection if the error is server side or will error out.
	// Note: In case of concurrent updates, since this is called in a callback(notifyDNSMsg) from the DNS server it follows the same behavior as
	// the inbuilt dns proxy in cilium.
	UpdateMappingRequest(context.Context, *FQDNMapping) (*UpdateMappingResponse, error)
}

type FQDNData_StreamPolicyStateClient = grpc.BidiStreamingClient[PolicyStateResponse, PolicyState]

type FQDNData_StreamPolicyStateServer = grpc.BidiStreamingServer[PolicyStateResponse, PolicyState]

type FQDNMapping struct {
	Fqdn           string       `protobuf:"bytes,1,opt,name=fqdn,proto3" json:"fqdn,omitempty"`                                            // dns name
	RecordIp       [][]byte     `protobuf:"bytes,2,rep,name=record_ip,json=recordIp,proto3" json:"record_ip,omitempty"`                    // List of IPs corresponding to dns name
	Ttl            uint32       `protobuf:"varint,3,opt,name=ttl,proto3" json:"ttl,omitempty"`                                             // TTL of DNS record
	SourceIdentity uint32       `protobuf:"varint,4,opt,name=source_identity,json=sourceIdentity,proto3" json:"source_identity,omitempty"` // Identity of the client making the DNS request
	SourceIp       []byte       `protobuf:"bytes,5,opt,name=source_ip,json=sourceIp,proto3" json:"source_ip,omitempty"`                    // IP address of the client making the DNS request
	ResponseCode   uint32       `protobuf:"varint,6,opt,name=response_code,json=responseCode,proto3" json:"response_code,omitempty"`       // DNS Response code as specified in RFC2316
	MetricsData    *MetricsData `protobuf:"bytes,7,opt,name=metrics_data,json=metricsData,proto3" json:"metrics_data,omitempty"`           // Metrics and access logging data collected by the standalone DNS proxy.
	// contains filtered or unexported fields
}

type IdentityToEndpointMapping struct {
	Identity     uint32          `protobuf:"varint,1,opt,name=identity,proto3" json:"identity,omitempty"`
	EndpointInfo []*EndpointInfo `protobuf:"bytes,2,rep,name=endpoint_info,json=endpointInfo,proto3" json:"endpoint_info,omitempty"`
	// contains filtered or unexported fields
}

type IdentityToPrefixMapping struct {
	Identity uint32   `protobuf:"varint,1,opt,name=identity,proto3" json:"identity,omitempty"`
	Prefix   [][]byte `protobuf:"bytes,2,rep,name=prefix,proto3" json:"prefix,omitempty"`
	// contains filtered or unexported fields
}

type MetricsData struct {
	ProcessingStats *ProcessingStats `protobuf:"bytes,1,opt,name=processing_stats,json=processingStats,proto3" json:"processing_stats,omitempty"`   // Proxy request processing timing statistics
	DnsResponseData *DNSResponseData `protobuf:"bytes,2,opt,name=dns_response_data,json=dnsResponseData,proto3" json:"dns_response_data,omitempty"` // DNS response metadata extracted from the DNS message
	SourcePort      uint32           `protobuf:"varint,3,opt,name=source_port,json=sourcePort,proto3" json:"source_port,omitempty"`                 // Source port of the endpoint making the DNS request
	ServerAddr      string           `protobuf:"bytes,4,opt,name=server_addr,json=serverAddr,proto3" json:"server_addr,omitempty"`                  // IP:port of the destination DNS server as "ip:port" string (e.g., "8.8.8.8:53")
	ServerIdentity  uint32           `protobuf:"varint,5,opt,name=server_identity,json=serverIdentity,proto3" json:"server_identity,omitempty"`     // Security identity of the destination DNS server
	Protocol        string           `protobuf:"bytes,6,opt,name=protocol,proto3" json:"protocol,omitempty"`                                        // L4 protocol used for the DNS request (e.g., "udp", "tcp")
	Allowed         bool             `protobuf:"varint,7,opt,name=allowed,proto3" json:"allowed,omitempty"`                                         // Whether the DNS request was allowed by policy
	ErrorMessage    string           `protobuf:"bytes,8,opt,name=error_message,json=errorMessage,proto3" json:"error_message,omitempty"`            // Error message if the DNS request encountered an error (empty if no error)
	ErrorType       ProxyErrorType   ``                                                                                                             // Structured error classification for metrics without relying on string matching.
	/* 128-byte string literal not displayed */
	// contains filtered or unexported fields
}

type PolicyState struct {
	EgressL7DnsPolicy         []*DNSPolicy                 `protobuf:"bytes,1,rep,name=egress_l7_dns_policy,json=egressL7DnsPolicy,proto3" json:"egress_l7_dns_policy,omitempty"`
	RequestId                 string                       `protobuf:"bytes,2,opt,name=request_id,json=requestId,proto3" json:"request_id,omitempty"` // Random UUID based identifier which will be referenced in ACKs
	IdentityToEndpointMapping []*IdentityToEndpointMapping ``                                                                                         // Identity to Endpoint mapping for the DNS server and the source identity
	/* 140-byte string literal not displayed */
	IdentityToPrefixMapping []*IdentityToPrefixMapping `` // Identity to Prefix mapping for the identity
	/* 134-byte string literal not displayed */
	// contains filtered or unexported fields
}

type PolicyStateResponse struct {
	Response  ResponseCode `protobuf:"varint,1,opt,name=response,proto3,enum=standalonednsproxy.ResponseCode" json:"response,omitempty"`
	RequestId string       `protobuf:"bytes,2,opt,name=request_id,json=requestId,proto3" json:"request_id,omitempty"` // Request ID for which response is sent to
	// contains filtered or unexported fields
}

type ProcessingStats struct {
	TotalTimeNs            int64 `protobuf:"varint,1,opt,name=total_time_ns,json=totalTimeNs,proto3" json:"total_time_ns,omitempty"`
	ProcessingTimeNs       int64 `protobuf:"varint,2,opt,name=processing_time_ns,json=processingTimeNs,proto3" json:"processing_time_ns,omitempty"`
	UpstreamTimeNs         int64 `protobuf:"varint,3,opt,name=upstream_time_ns,json=upstreamTimeNs,proto3" json:"upstream_time_ns,omitempty"`
	SemaphoreAcquireTimeNs int64 `` /* 132-byte string literal not displayed */
	PolicyCheckTimeNs      int64 `protobuf:"varint,5,opt,name=policy_check_time_ns,json=policyCheckTimeNs,proto3" json:"policy_check_time_ns,omitempty"`
	// contains filtered or unexported fields
}

type ProxyErrorType int32

type ResponseCode int32

type UnimplementedFQDNDataServer struct{}

type UnsafeFQDNDataServer interface {
	// contains filtered or unexported methods
}

type UpdateMappingResponse struct {
	Response ResponseCode `protobuf:"varint,1,opt,name=response,proto3,enum=standalonednsproxy.ResponseCode" json:"response,omitempty"`
	// contains filtered or unexported fields
}