plugin

type CapabilitiesResponse struct {
	Scope             string
	ConnectivityScope string
	// GwAllocChecker makes libnetwork call /NetworkDriver.GwAllocCheck, whose 404 is then a real error (#110).
	GwAllocChecker bool
}

type CreateEndpointRequest struct {
	NetworkID  string
	EndpointID string
	Interface  *EndpointInterface
	Options    map[string]interface{}
	// contains filtered or unexported fields
}

type CreateEndpointResponse struct {
	Interface *EndpointInterface
}

type CreateNetworkRequest struct {
	NetworkID string
	Options   map[string]interface{}
	IPv4Data  []*IPAMData
	IPv6Data  []*IPAMData
}

type DHCPNetworkOptions struct {
	// Mode selects the attachment strategy: bridge (the default, needs `bridge`), macvlan or ipvlan (need `parent`).
	Mode   string `mapstructure:"mode"`
	Bridge string
	Parent string `mapstructure:"parent"`
	// Gateway, if set, overrides the DHCP-supplied default gateway, e.g. to egress via a VPN router.
	Gateway string
	// IPv6 switches DHCPv6 on and equals `ipv6_mode=dhcp`; read it only through ipv6Enabled (#817).
	IPv6 bool
	// IPv4Off is stored from the engine's enable_ipv4=false at CreateNetwork and refused as an option (#1135).
	IPv4Off bool `mapstructure:"ipv4_off"`
	// IPv6Mode is off, dhcp, slaac or auto, proto.Mode6's spellings; a value disagreeing with IPv6 is refused (#817).
	IPv6Mode string `mapstructure:"ipv6_mode"`
	// IPv6AutoStrict makes `ipv6_mode=auto` fail an endpoint whose DHCPv6 server stays silent instead of falling back
	// to SLAAC and counting dhcpv6_auto_fallbacks (#817).
	IPv6AutoStrict bool `mapstructure:"ipv6_auto_strict"`
	// IPv6MainPrefix, a CIDR, picks which SLAAC address Docker is told about, since RFC 4862 section 5.5.3 forms one
	// per autonomous prefix; unset or unmatched uses the first advertised prefix (#818).
	IPv6MainPrefix string `mapstructure:"ipv6_main_prefix"`
	// IPv6Temporary puts an IA_TA (RFC 8415 section 21.5) beside the IA_NA in every Solicit and Request (#927).
	IPv6Temporary bool `mapstructure:"ipv6_temporary"`
	// IPv6PD asks for an IA_PD prefix of this length beside the address, 0 for none (RFC 8415 section 21.21, #214).
	IPv6PD int `mapstructure:"ipv6_pd"`
	// IPv6IID is how SLAAC forms the interface identifier: eui64 (unset) from the MAC, or stable-privacy per RFC 7217
	// from a secret in STATE_DIR (#1032).
	IPv6IID      string        `mapstructure:"ipv6_iid"`
	LeaseTimeout time.Duration `mapstructure:"lease_timeout"`
	// IgnoreConflicts skips CreateNetwork's check for another Docker network on this bridge or range; it is unrelated
	// to conflict_check's RFC 5227 detection on the wire.
	IgnoreConflicts bool `mapstructure:"ignore_conflicts"`
	// ConflictCheck is the RFC 5227 mode, wait, async or off, empty meaning dhcp.DefaultConflictCheck (#882, D23).
	ConflictCheck string `mapstructure:"conflict_check"`
	SkipRoutes    bool   `mapstructure:"skip_routes"`
	// PropagateDNS writes option 6 or 23 into the container's /etc/resolv.conf on every bind or renew.
	PropagateDNS bool `mapstructure:"propagate_dns"`
	// PropagateMTU sets the container link's MTU from option 26 on every bind or renew.
	PropagateMTU bool `mapstructure:"propagate_mtu"`
	// MTU, 68..65535, is set on every container link this network creates and is then its only source; 0 is unset (#1037).
	MTU int `mapstructure:"mtu"`
	// ClientID overrides the derived option 61 for every endpoint, sent with type byte 0x00; see resolveClientID
	// (#371).
	ClientID string `mapstructure:"client_id"`
	// VendorClass overrides option 60, default "docker-net-dhcp", for class-based server policy.
	VendorClass string `mapstructure:"vendor_class"`
	// UserClass is the one class value of DHCPv4 option 77 (RFC 3004), 1 to 254 octets; empty sends no option (#1120).
	UserClass string `mapstructure:"user_class"`
	// RapidCommit puts option 80 (RFC 4039) in every DISCOVER and option 14 (RFC 8415 18.2.1) in every Solicit (#1031, #926).
	RapidCommit bool `mapstructure:"rapid_commit"`
	// ValidateDHCP runs a one-shot DHCP probe on a macvlan or ipvlan parent at CreateNetwork (#108).
	ValidateDHCP bool `mapstructure:"validate_dhcp"`
	// RegisterDNS sends the hostname in option 81 (v4) and 39 (v6) with S=1; without it v6 sends no name (#261, #1029).
	RegisterDNS bool `mapstructure:"register_dns"`
	// AuditLog appends every lease event on this network to STATE_DIR/leases.jsonl (#109).
	AuditLog bool `mapstructure:"audit_log"`

	// DHCPServers is an ordered, exhaustive preference list of DHCPv4 servers, e.g. "1.1.1.1,2.2.2.2" (#111).
	DHCPServers string `mapstructure:"dhcp_servers"`
	// DenyServers lists DHCPv4 servers never to take a lease from, composed with DHCPServers by serverPolicy (#669).
	DenyServers string `mapstructure:"dhcp_deny_servers"`
	// ReleaseLease is `never` (the default, leases expire) or `on_stop` (release when the endpoint leaves) (#962).
	ReleaseLease string `mapstructure:"release_lease"`
	// HostIfname names bridge mode's host-side link: empty for `dh-` plus 12 hex, or `container_name` or `hostname`
	// (#978).
	HostIfname string `mapstructure:"host_ifname"`
	// RequireMAC refuses an endpoint whose MAC the user did not set, so a MAC-keyed reservation always matches (#1036).
	RequireMAC bool `mapstructure:"require_mac"`
	// LinkLocalFallback gives an endpoint an RFC 3927 169.254/16 address when no DHCPv4 lease arrives in time (#904).
	LinkLocalFallback bool `mapstructure:"link_local_fallback"`
	// MacvlanMode is the macvlan child's kernel mode, bridge (the default), vepa, private or passthru (#905).
	MacvlanMode string `mapstructure:"macvlan_mode"`
	// IPvlanMode is the ipvlan child's kernel mode; l2 (the default) is the only accepted value, see parseIPvlanMode
	// (#905).
	IPvlanMode string `mapstructure:"ipvlan_mode"`
	// Vlan is an 802.1Q ID; the children attach to `<parent>.<id>`, created when missing (#902).
	Vlan string `mapstructure:"vlan"`
	// ForceCreate creates a bridge-mode network with parent although the firewall check expects its frames dropped;
	// the check still runs and logs its verdict (#903).
	ForceCreate bool `mapstructure:"force_create"`
}

type DelegatedPrefixHealth struct {
	Prefix         string `json:"prefix"`
	PreferredUntil string `json:"preferred_until,omitempty"`
	ExpiresAt      string `json:"expires_at,omitempty"`
}

type DeleteEndpointRequest struct {
	NetworkID  string
	EndpointID string
}

type DeleteNetworkRequest struct {
	NetworkID string
}

type EndpointHealth struct {
	Endpoint string `json:"endpoint"`
	Network  string `json:"network"`
	Mode     string `json:"mode"`
	// Address is the lease the renewal client currently holds, in CIDR form.
	Address string `json:"address,omitempty"`
	// LeaseState is `bound` when the client holds the lease its last recorded event bound, `link_local` on the
	// RFC 3927 fallback (#904), `acquiring` otherwise.
	LeaseState string `json:"lease_state"`
	// RenewAt, RebindAt and ExpiresAt are T1, T2 and the lease end as RFC 3339 times; an empty
	// ExpiresAt on a bound endpoint is an infinite lease (RFC 2131 section 3.3).
	RenewAt   string `json:"renew_at,omitempty"`
	RebindAt  string `json:"rebind_at,omitempty"`
	ExpiresAt string `json:"expires_at,omitempty"`
	// IPv6TemporaryAddress is the first IA_TA address of the endpoint's DHCPv6 lease, CIDR form, empty if none (#927).
	IPv6TemporaryAddress string `json:"ipv6_temporary_address,omitempty"`
	// NAT64Prefixes are the RFC 8781 PREF64 prefixes of the last IPv6 lease or router event, absent if none (#1028).
	NAT64Prefixes []string `json:"nat64_prefixes,omitempty"`
	// The lease's still-valid IA_PD prefixes, and whether one overlapped another endpoint's when granted (#214).
	DelegatedPrefixes []DelegatedPrefixHealth `json:"delegated_prefixes,omitempty"`
	PrefixOverlap     bool                    `json:"prefix_overlap,omitempty"`
	// Server is the DHCP server that granted the lease (option 54).
	Server string `json:"server,omitempty"`
	// LastEvent is the v4 client's most recent lifecycle event, such as `bound`, `renew` or `nak`, with its time.
	LastEvent   string `json:"last_event,omitempty"`
	LastEventAt string `json:"last_event_at,omitempty"`
	// ConflictCheck is the RFC 5227 mode this client runs in and ACDPhase is where that check has got to.
	ConflictCheck string `json:"conflict_check"`
	ACDPhase      string `json:"acd_phase"`
}

type EndpointInterface struct {
	Address     string
	AddressIPv6 string
	MacAddress  string
}

type GwAllocCheckRequest struct {
	Options map[string]interface{}
}

type GwAllocCheckResponse struct {
	SkipIPv4 bool
	SkipIPv6 bool
}

type HealthCheck struct {
	Status        string `json:"status"`
	ObservedValue int64  `json:"observedValue"`
	ObservedUnit  string `json:"observedUnit"`
	// Time is when the counter behind this check last moved, not when the response was built.
	Time string `json:"time"`
	// Output is omitted for a passing check, per section 4.8.
	Output string `json:"output,omitempty"`
}

type HealthResponse struct {
	// Status and Checks follow draft-inadarei-api-health-check-06 sections 3.1 and 3.6; `fail` is `healthy: false`.
	Status string `json:"status"`
	// Version, Commit and Library are the build identity (pkg/buildinfo), also the net_dhcp_build_info labels.
	Version string `json:"version"`
	Commit  string `json:"commit"`
	Library string `json:"library"`
	// EngineVersion and APIVersion are what the daemon answered at startup, or `unknown` when its socket was not yet
	// serving (#383, #670).
	EngineVersion string `json:"engine_version"`
	APIVersion    string `json:"api_version"`
	Healthy       bool   `json:"healthy"`
	// InstanceID names the serving process, so two reads compare as a delta only when it matches (#405).
	InstanceID      string  `json:"instance_id"`
	UptimeSeconds   float64 `json:"uptime_seconds"`
	ActiveEndpoints int     `json:"active_endpoints"`
	// LinkLocalEndpoints counts the endpoints on the RFC 3927 fallback now, from the array's snapshot (#904).
	LinkLocalEndpoints int   `json:"link_local_endpoints"`
	PendingHints       int   `json:"pending_hints"`
	RecoveredOK        int32 `json:"recovered_ok"`
	// RecoveryFailed counts failed recoveries of a still-running container, which then has no renewal client; Healthy-affecting.
	RecoveryFailed int32 `json:"recovery_failed"`
	// RecoveryDeferred counts recoveries retried once the daemon socket came up (#383); not Healthy-affecting.
	RecoveryDeferred int32 `json:"recovery_deferred"`
	// RecoveryAbortedContainerGone counts recoveries abandoned because the container had exited (#376); not
	// Healthy-affecting.
	RecoveryAbortedContainerGone int32 `json:"recovery_aborted_container_gone"`
	// RecoveryNetworkGone counts networks removed between NetworkList and NetworkInspect (#648); not Healthy-affecting.
	RecoveryNetworkGone int32 `json:"recovery_network_gone"`
	// StaleNetworksDropped counts persisted networks Docker no longer had at start, whose file and pool binding were
	// removed (#1174); not Healthy-affecting.
	StaleNetworksDropped int32 `json:"stale_networks_dropped"`
	// RecoveryFingerprintsSkipped counts adopted endpoints with no hostname to fingerprint, so no tombstone (#721);
	// not Healthy-affecting.
	RecoveryFingerprintsSkipped int32 `json:"recovery_fingerprints_skipped"`
	// RecoveryAlreadyManaged counts endpoints a Join registered before the recovery walk (#480); not Healthy-affecting.
	RecoveryAlreadyManaged int32 `json:"recovery_already_managed"`
	// JoinStartFailures counts renewal client Start failures at Join (#317); Healthy-affecting.
	JoinStartFailures int32 `json:"join_start_failures"`
	// JoinAbortedContainerGone counts attaches abandoned because the container exited first (#373); not
	// Healthy-affecting.
	JoinAbortedContainerGone int32 `json:"join_aborted_container_gone"`
	// JoinAbortedNoContainer counts attaches no container claimed, whose address is left to expire (#566, #800,
	// #962); not Healthy-affecting.
	JoinAbortedNoContainer int32 `json:"join_aborted_no_container"`

	// JoinAttachSlow counts attaches that succeeded after outlasting AwaitTimeout (#406); not healthy-affecting.
	JoinAttachSlow int32 `json:"join_attach_slow"`

	// JoinAttachCompleted counts successful attaches, the population the three duration buckets partition.
	JoinAttachCompleted int32 `json:"join_attach_completed"`
	// JoinAttachUnder1s and JoinAttach1sToBudget with JoinAttachSlow sum to JoinAttachCompleted (#403).
	JoinAttachUnder1s    int32 `json:"join_attach_under_1s"`
	JoinAttach1sToBudget int32 `json:"join_attach_1s_to_budget"`
	// JoinAttachMsMax is the longest successful attach in milliseconds, saturating at MaxInt32 (#403).
	JoinAttachMsMax int32 `json:"join_attach_ms_max"`

	// RestartLinkUpWaited counts child links brought up after the departing link released the address (#408); not
	// healthy-affecting.
	RestartLinkUpWaited int32 `json:"restart_link_up_waited"`
	// RestartLinkUpTimeouts counts that wait outlasting its budget, failing with `address already in use` (#422); not
	// healthy-affecting.
	RestartLinkUpTimeouts int32 `json:"restart_link_up_timeouts"`

	// JoinAbortedEndpointLeft counts attaches cancelled because the endpoint left first; not healthy-affecting.
	JoinAbortedEndpointLeft int32 `json:"join_aborted_endpoint_left"`
	// JoinAbortedLinkWithdrawn counts attaches whose located link left the sandbox (#1236); not healthy-affecting.
	JoinAbortedLinkWithdrawn int32 `json:"join_aborted_link_withdrawn"`
	// TombstoneWriteFailures counts failed tombstone writes and reads refused since #724; Healthy-affecting.
	TombstoneWriteFailures int32 `json:"tombstone_write_failures"`
	// TombstoneQuarantines counts unparseable tombstone files moved aside as tombstones.json.corrupt-<ts>, since
	// something wrote garbage into stateDir (#724); Healthy-affecting.
	TombstoneQuarantines int32 `json:"tombstone_quarantines"`
	// UnsafeHostnamesRejected counts container hostnames dropped for a control character (#692); not healthy-affecting.
	UnsafeHostnamesRejected int32 `json:"unsafe_hostnames_rejected"`

	// HostnamesAppliedLate, HostnameLookupFailures and HostnameApplyFailures are the outcomes of a late v4 hostname
	// (#961).
	HostnamesAppliedLate   int32 `json:"hostnames_applied_late"`
	HostnameLookupFailures int32 `json:"hostname_lookup_failures"`
	HostnameApplyFailures  int32 `json:"hostname_apply_failures"`

	// HostIfnamesApplied, HostIfnameConflicts and HostIfnameFailures are the bridge-mode host link naming outcomes
	// (#978).
	HostIfnamesApplied  int32 `json:"host_ifnames_applied"`
	HostIfnameConflicts int32 `json:"host_ifname_conflicts"`
	HostIfnameFailures  int32 `json:"host_ifname_failures"`
	// UnsafeOptionValuesDropped counts server-chosen DHCP strings refused or truncated (#703, #704); not
	// healthy-affecting.
	UnsafeOptionValuesDropped int32 `json:"unsafe_option_values_dropped"`
	// NetworkOptionsRejected counts endpoint operations refusing a network's stored options (#705, #727); not
	// healthy-affecting.
	NetworkOptionsRejected int32 `json:"network_options_rejected"`
	// IPAMReplayHits counts stored endpoint addresses confirmed from a lease record at a daemon restart (#110).
	IPAMReplayHits int32 `json:"ipam_replay_hits"`
	// IPAMReplayMiss counts stored endpoint addresses refused because no lease record holds them (#110).
	IPAMReplayMiss int32 `json:"ipam_replay_miss"`
	// IPAMRebindAmbiguous counts address requests that met more than one removed endpoint, so the server chose (#110).
	IPAMRebindAmbiguous int32 `json:"ipam_rebind_ambiguous"`
	// IPAMReserveDuplicateMAC counts address requests refused for a hardware address already leasing (#110).
	IPAMReserveDuplicateMAC int32 `json:"ipam_reserve_duplicate_mac"`
	// IPAMStrandedRecords counts CREATED records a previous process left without an endpoint, given up at start-up
	// (#1047).
	IPAMStrandedRecords int32 `json:"ipam_stranded_records"`
	// IPAMReleaseUnknown counts released addresses no lease record holds, the normal order after a retain (#110).
	IPAMReleaseUnknown int32 `json:"ipam_release_unknown"`
	// DNSPropagationPIDMismatches counts DNS writes refused because the container PID was recycled (#688).
	DNSPropagationPIDMismatches int32 `json:"dns_propagation_pid_mismatches"`
	// NetnsPIDMismatches counts sandbox netns opens refused because the container PID was recycled (#695).
	NetnsPIDMismatches int32 `json:"netns_pid_mismatches"`
	// SandboxKeyEntries, SandboxKeyEntryFailures and SandboxPIDFallbacks count the sandbox key route, its refusals and
	// the /proc/<pid>/ns/net fallback, the evidence for whether the PID route is still needed (#725).
	SandboxKeyEntries       int32 `json:"sandbox_key_entries"`
	SandboxKeyEntryFailures int32 `json:"sandbox_key_entry_failures"`
	SandboxPIDFallbacks     int32 `json:"sandbox_pid_fallbacks"`

	// SandboxKeyNotANamespace (the expected arm under sandbox_netns_propagation=0), SandboxKeyNotPermitted (a
	// non-default `dockerd --exec-root`), SandboxKeyWrongNSType, SandboxKeyUnavailable and SandboxKeyAbsent sum to
	// SandboxKeyEntryFailures (#725).
	SandboxKeyAbsent        int32 `json:"sandbox_key_absent"`
	SandboxKeyNotPermitted  int32 `json:"sandbox_key_not_permitted"`
	SandboxKeyNotANamespace int32 `json:"sandbox_key_not_a_namespace"`
	SandboxKeyWrongNSType   int32 `json:"sandbox_key_wrong_ns_type"`
	SandboxKeyUnavailable   int32 `json:"sandbox_key_unavailable"`

	// DockerAPINonGETRefusals counts Docker API requests refused for a method other than GET (#691).
	DockerAPINonGETRefusals int32 `json:"docker_api_non_get_refusals"`
	// DHCPRoutesApplied counts option-121 routes handed to Docker, and DHCPDefaultRouteSuperseded the Joins whose
	// routes cover 0.0.0.0/0 by union, so egress bypasses the option-3 router (#700).
	DHCPRoutesApplied          int32 `json:"dhcp_routes_applied"`
	DHCPDefaultRouteSuperseded int32 `json:"dhcp_default_route_superseded"`
	// MTURefused counts option-26 MTUs outside the applied range, which leave the link MTU unchanged (#702).
	MTURefused int32 `json:"mtu_refused"`
	// TombstonesConsumed counts CreateEndpoints that gave a recreated container its previous MAC and IP (#386).
	TombstonesConsumed int32 `json:"tombstones_consumed"`
	// LeaseChanged counts renewals where the server returned a different IP than last recorded (#100).
	LeaseChanged int32 `json:"lease_changed"`
	// AddressConflicts is the sum of AddressConflictsV4 and AddressConflictsV6 over the lease's life, RFC 5227
	// sections 2.1 and 2.4 (#524); Healthy-affecting.
	AddressConflicts int32 `json:"address_conflicts"`
	// ACDProbesSent, ACDAnnouncementsSent, ACDConflictsDetected and ACDARPSendFailures are the library's RFC 5227
	// counters, which show whether a zero AddressConflicts had any probe behind it (#524, #882).
	ACDProbesSent        int32 `json:"acd_probes_sent"`
	ACDAnnouncementsSent int32 `json:"acd_announcements_sent"`
	ACDConflictsDetected int32 `json:"acd_conflicts_detected"`
	ACDARPSendFailures   int32 `json:"acd_arp_send_failures"`
	// ACDResumedUnchecked counts endpoints resumed before their RFC 5227 section 2.1 check finished, re-run on the
	// INIT-REBOOT ACK (#882); a `warn` check.
	ACDResumedUnchecked int32 `json:"acd_resumed_unchecked"`

	// SandboxNetnsVisible is the sandbox netns entries visible at request time, -1 when the directory is unreadable
	// (a missing mount) and 0 with endpoints attached when it is mounted from the wrong place (#567).
	SandboxNetnsVisible int32 `json:"sandbox_netns_visible"`

	// SandboxNetnsPropagation is 1 when a later daemon mount under the sandbox netns directory reaches this process, 0
	// when the mount is private so attaches take the PID route, and -1 when mountinfo is unreadable (#417).
	SandboxNetnsPropagation int32 `json:"sandbox_netns_propagation"`

	// SandboxNetnsInitMounts is the sandbox netns mounts in PID 1's table: -2 shared namespace, -1 unreadable, else
	// the count, and under a nested engine PID 1 is that engine's init (#417).
	SandboxNetnsInitMounts int32 `json:"sandbox_netns_init_mounts"`

	// LeasesObtained and the wire counters below are the sums of their _v4 and _v6 halves, without `_total` (#730).
	LeasesObtained int32 `json:"leases_obtained"`
	LeasesRenewed  int32 `json:"leases_renewed"`
	// RenewalsUnanswered counts renewal requests that got no answer, first moving at the RFC 2131 section 4.4.5
	// retransmission (half the time to T2, floor 60 s), measured 4h30m after T1 on a 24 h lease (#940).
	RenewalsUnanswered int32 `json:"renewals_unanswered"`
	// DHCPServerTierFallbacks counts steps down the dhcp_servers ladder, one per silent preferred entry (#111, #731).
	DHCPServerTierFallbacks int32 `json:"dhcp_server_tier_fallbacks"`
	// DHCPServerPolicyExhausted counts acquisitions no dhcp_servers entry answered (#111); not Healthy-affecting.
	DHCPServerPolicyExhausted int32 `json:"dhcp_server_policy_exhausted"`
	// DHCPServerPolicyTimeouts counts the subset of dhcp_timeouts on dhcp_servers-restricted endpoints (#731).
	DHCPServerPolicyTimeouts int32 `json:"dhcp_server_policy_timeouts"`
	DHCPTimeouts             int32 `json:"dhcp_timeouts"`
	// ClientStopFailures counts renewal clients that did not stop cleanly, not a missing release (#800, #962).
	ClientStopFailures int32 `json:"client_stop_failures"`
	// ReleasesSent and ReleaseFailures are the sums of their per-family halves, ReleaseFailures a `warn` check (#962).
	ReleasesSent    int32 `json:"releases_sent"`
	ReleaseFailures int32 `json:"release_failures"`
	// ReleasesReclaimed counts on_remove addresses a running container reused inside the restart window, so the
	// record closed without a datagram (#984).
	ReleasesReclaimed int32 `json:"releases_reclaimed"`
	// NAKsReceived counts server NAKs on renewal or rebind, each widening the lease_changed divergence (#128).
	NAKsReceived int32 `json:"naks_received"`
	// DisplacedStops counts recovery-registered managers displaced by a Join for the same endpoint.
	DisplacedStops int32 `json:"displaced_stops"`
	// ParentLinkWaits and ParentLinkWaitTimeouts count operations queued on a shared parent NIC and those that gave up
	// after parentGateBudget, since a parent is a macvlan or an ipvlan port, never both (#486, #549).
	ParentLinkWaits        int32 `json:"parent_link_waits"`
	ParentLinkWaitTimeouts int32 `json:"parent_link_wait_timeouts"`
	// LedgerWriteFailures counts failed appends to the audit_log lease ledger (#109); not Healthy-affecting.
	LedgerWriteFailures int32 `json:"ledger_write_failures"`
	// IfnameUnsupported counts custom interface names on an engine that does not apply them (#125, #670).
	IfnameUnsupported int32 `json:"ifname_unsupported"`
	// StateFileChmodFailures counts state files the startup sweep could not tighten, plus an unreadable STATE_DIR
	// (#804).
	StateFileChmodFailures int32 `json:"state_file_chmod_failures"`

	// LeaseChangedV4 and the per-family counters below are stored, and the un-suffixed field is their sum, since a
	// total recovered by subtraction can decrease and reads as a reset to Prometheus (#212, #730).
	LeaseChangedV4   int32 `json:"lease_changed_v4"`
	LeasesObtainedV4 int32 `json:"leases_obtained_v4"`
	LeasesRenewedV4  int32 `json:"leases_renewed_v4"`
	// RenewalsUnansweredV4 is the IPv4 half of RenewalsUnanswered.
	RenewalsUnansweredV4 int32 `json:"renewals_unanswered_v4"`
	DHCPTimeoutsV4       int32 `json:"dhcp_timeouts_v4"`
	NAKsReceivedV4       int32 `json:"naks_received_v4"`
	// ClientStopFailuresV4 is the v4 half of ClientStopFailures.
	ClientStopFailuresV4 int32 `json:"client_stop_failures_v4"`
	// ReleasesSentV4 and ReleaseFailuresV4 are the IPv4 `release_lease` pair (#962).
	ReleasesSentV4    int32 `json:"releases_sent_v4"`
	ReleaseFailuresV4 int32 `json:"release_failures_v4"`
	// ReleasesReclaimedV4 is the IPv4 half of ReleasesReclaimed (#984).
	ReleasesReclaimedV4 int32 `json:"releases_reclaimed_v4"`
	// AddressConflictsV4 is the RFC 5227 half, the only one comparable with the ARP-based ACD counters.
	AddressConflictsV4 int32 `json:"address_conflicts_v4"`

	// LeaseChangedV6 and the v6 fields below are written by the DHCPv6 client, so a zero means it did not happen
	// (#911).
	LeaseChangedV6   int32 `json:"lease_changed_v6"`
	LeasesObtainedV6 int32 `json:"leases_obtained_v6"`
	LeasesRenewedV6  int32 `json:"leases_renewed_v6"`
	// RenewalsUnansweredV6 counts unanswered Renew and Rebind messages (RFC 9915 sections 18.2.4 and 18.2.5).
	RenewalsUnansweredV6 int32 `json:"renewals_unanswered_v6"`
	DHCPTimeoutsV6       int32 `json:"dhcp_timeouts_v6"`
	NAKsReceivedV6       int32 `json:"naks_received_v6"`
	// AddressConflictsV6 counts addresses the kernel's DAD (RFC 4862 section 5.4) found in use, declined under RFC 9915
	// section 18.2.8; Docker's record is not updated for the replacement, as for v4 (#104).
	AddressConflictsV6 int32 `json:"address_conflicts_v6"`
	// ClientStopFailuresV6 is the v6 share of ClientStopFailures, with any release counted apart (#608, #962).
	ClientStopFailuresV6 int32 `json:"client_stop_failures_v6"`
	// ReleasesSentV6 and ReleaseFailuresV6 count DHCPv6 Release messages (RFC 9915 section 18.2.7), read per family.
	ReleasesSentV6    int32 `json:"releases_sent_v6"`
	ReleaseFailuresV6 int32 `json:"release_failures_v6"`
	// ReleasesReclaimedV6 is the DHCPv6 half of ReleasesReclaimed, a second record with its own deadline (#984).
	ReleasesReclaimedV6 int32 `json:"releases_reclaimed_v6"`
	// DHCPv6ConfigOnly counts DHCPv6 information replies on a network with the RA "other config" flag (#815).
	DHCPv6ConfigOnly int32 `json:"dhcpv6_config_only"`
	// DHCPv6NotOffered counts endpoints with no DHCPv6 address because the RA advertised no managed DHCPv6, and with
	// autoconf=0 no SLAAC address either (#821, #868).
	DHCPv6NotOffered int32 `json:"dhcpv6_not_offered"`
	// DHCPv6NoRouterAdvert counts endpoints with no DHCPv6 address because no router advertisement arrived (#868).
	DHCPv6NoRouterAdvert int32 `json:"dhcpv6_no_router_advert"`
	// DHCPv6Refused counts endpoints failed by a server Status Code other than Success (RFC 9915 21.13, #816).
	DHCPv6Refused int32 `json:"dhcpv6_refused"`
	// DHCPv6NoServer counts endpoints failed because a managed segment's DHCPv6 server never answered (#816).
	DHCPv6NoServer int32 `json:"dhcpv6_no_server"`
	// DHCPv6SLAACNoPrefix counts SLAAC endpoints failed because no advertised prefix could form an address (RFC 4862
	// 5.5.3, #816, #817).
	DHCPv6SLAACNoPrefix int32 `json:"dhcpv6_slaac_no_prefix"`

	// DHCPv6SLAACNoAddress counts SLAAC endpoints where no address formed inside the acquisition budget (#818).
	DHCPv6SLAACNoAddress int32 `json:"dhcpv6_slaac_no_address"`

	// IPv6SLAACAddresses and IPv6AddressesWithdrawn count addresses installed and removed, not endpoints (#818, #819).
	IPv6SLAACAddresses     int32 `json:"ipv6_slaac_addresses"`
	IPv6AddressesWithdrawn int32 `json:"ipv6_addresses_withdrawn"`

	// IPv6SLAACPrefixesIgnored counts prefixes skipped under RFC 4862 section 5.5.3 or the eight-address cap.
	IPv6SLAACPrefixesIgnored int32 `json:"ipv6_slaac_prefixes_ignored"`

	// IPv6MainPrefixUnmatched counts endpoints where no address fell inside ipv6_main_prefix (#819).
	IPv6MainPrefixUnmatched int32 `json:"ipv6_main_prefix_unmatched"`
	// DHCPv6AutoFallbacks counts `ipv6_mode=auto` endpoints that formed a SLAAC address after DHCPv6 went silent
	// (#817).
	DHCPv6AutoFallbacks int32 `json:"dhcpv6_auto_fallbacks"`
	// DHCPv6AbsenceRemembered counts auto attaches that skipped the Solicit on a network remembered silent (#1038).
	DHCPv6AbsenceRemembered int32 `json:"dhcpv6_absence_remembered"`
	// IPv6LinkEnableFailures counts container links IPv6 could not be enabled on before the DHCPv6 client started.
	IPv6LinkEnableFailures int32 `json:"ipv6_link_enable_failures"`
	// RouterAdvertGuardFailures counts RA guard sysctl steps that failed or read back wrong on a container link (#875).
	RouterAdvertGuardFailures int32 `json:"router_advert_guard_failures"`
	// IPv6RouterWithdrawn counts container v6 default routes removed for a Router Lifetime of 0 (#821).
	IPv6RouterWithdrawn int32 `json:"ipv6_router_withdrawn"`
	// The delegated prefix aggregates added and removed, and endpoints whose prefix overlapped another's (#214).
	IPv6PrefixRoutesInstalled int32 `json:"ipv6_prefix_routes_installed"`
	IPv6PrefixRoutesWithdrawn int32 `json:"ipv6_prefix_routes_withdrawn"`
	IPv6PrefixOverlaps        int32 `json:"ipv6_prefix_overlaps"`

	// RouterSolicitsSent and the router counters below are the library's RFC 4861 counters folded across every
	// DHCPv6 manager, solicitations under section 6.3.7 (#814).
	RouterSolicitsSent int32 `json:"router_solicits_sent"`
	// RouterAdvertsSeen counts decoded advertisements and RouterAdvertsRefused undecodable ones (#814).
	RouterAdvertsSeen    int32 `json:"router_adverts_seen"`
	RouterAdvertsRefused int32 `json:"router_adverts_refused"`
	// RouterAdvertOptionsIgnored counts refused options, not frames, in otherwise read advertisements (#814).
	RouterAdvertOptionsIgnored int32 `json:"router_advert_options_ignored"`
	// RouterTableEntriesDropped and RouterTableEntriesEvicted count the router table caps in force (RFC 8106 6.2 (d)).
	RouterTableEntriesDropped int32 `json:"router_table_entries_dropped"`
	RouterTableEntriesEvicted int32 `json:"router_table_entries_evicted"`

	// The FORCERENEW and Reconfigure counters, folded across every DHCP client, persistent and one-shot (#1119). The
	// refused ones describe the server's messages, not a fault, and are not healthy-affecting.
	ForcerenewsRenewed         int32 `json:"forcerenews_renewed"`
	ForcerenewsAlreadyRenewing int32 `json:"forcerenews_already_renewing"`
	ForcerenewsRefused         int32 `json:"forcerenews_refused"`
	ForcerenewsAckRefused      int32 `json:"forcerenews_ack_refused"`
	ReconfiguresAccepted       int32 `json:"reconfigures_accepted"`
	ReconfiguresRefused        int32 `json:"reconfigures_refused"`

	// Checks is one single-element array per named check, as the health-check draft's section 4 asks.
	Checks map[string][]HealthCheck `json:"checks"`
	// Endpoints is one entry per registered manager, kept out of /metrics as a cardinality decision.
	Endpoints []EndpointHealth `json:"endpoints"`
}

type IPAMData struct {
	AddressSpace string
	Pool         string
	Gateway      string
	AuxAddresses map[string]interface{}
}

type InfoRequest struct {
	NetworkID  string
	EndpointID string
}

type InfoResponse struct {
	Value map[string]string
}

type InterfaceName struct {
	SrcName   string
	DstPrefix string
	DstName   string
}

type IpamAddressSpacesResponse struct {
	LocalDefaultAddressSpace  string
	GlobalDefaultAddressSpace string
}

type IpamCapabilitiesResponse struct {
	RequiresMACAddress    bool
	RequiresRequestReplay bool
}

type JoinRequest struct {
	NetworkID  string
	EndpointID string
	SandboxKey string
	Options    map[string]interface{}
}

type JoinResponse struct {
	InterfaceName         InterfaceName
	Gateway               string
	GatewayIPv6           string
	StaticRoutes          []*StaticRoute
	DisableGatewayService bool
}

type LeaveRequest struct {
	NetworkID  string
	EndpointID string
}

type Options struct {
	// AwaitTimeout caps the polling helpers (sandbox readiness, link rename, netns appearance).
	AwaitTimeout time.Duration

	// DHCPv6AbsenceMemory is how long an auto network remembers a silent DHCPv6 server; nil is the default, zero is
	// off (#1038).
	DHCPv6AbsenceMemory *time.Duration

	// RequestCaptureDir tees libnetwork request bodies into that directory for replay fixtures, test builds only
	// (#644).
	RequestCaptureDir string
}

type Plugin struct {
	// contains filtered or unexported fields
}

type ReleaseAddressRequest struct {
	PoolID  string
	Address string
}

type ReleasePoolRequest struct {
	PoolID string
}

type RequestAddressRequest struct {
	PoolID  string
	Address string
	Options map[string]string
}

type RequestAddressResponse struct {
	Address string
	Data    map[string]string
}

type RequestPoolRequest struct {
	AddressSpace string
	Pool         string
	SubPool      string
	Options      map[string]string
	V6           bool
}

type RequestPoolResponse struct {
	PoolID string
	Pool   string
	Data   map[string]string
}

type StaticRoute struct {
	Destination string
	RouteType   int
	NextHop     string
}