firewall

Mar 2, 2026

Changes in this version

+ type UserLookup func(username string) (*user.User, error) — linux/amd64

Feb 26, 2026

Changes in this version

+ const MonitAccessLogPrefix

+ const MonitChainName

+ const MonitJobsChainName

+ const MonitPort

+ const NATSChainName

+ const TableName

+ var ErrBoshTableNotFound = fmt.Errorf("%s table not found", TableName)

+ var ErrMonitJobsChainNotFound = fmt.Errorf("%s chain not found", MonitJobsChainName)

+ func EnableMonitAccess(logger boshlog.Logger, command string)

+ type DNSResolver interface — linux/amd64

+ LookupIP func(host string) ([]net.IP, error)

+ type Manager interface

+ Cleanup func() error

+ EnableMonitAccess func() error

+ SetupMonitFirewall func() error

+ SetupNATSFirewall func(mbusURL string) error

+ func NewNftablesFirewall(logger boshlog.Logger) (Manager, error)

+ func NewNftablesFirewallWithDeps(conn NftablesConn, resolver DNSResolver, logger boshlog.Logger) Manager

+ type NatsFirewallHook interface

+ BeforeConnect func(mbusURL string) error

+ type NftablesConn interface — linux/amd64

+ AddChain func(c *nftables.Chain) *nftables.Chain

+ AddRule func(r *nftables.Rule) *nftables.Rule

+ AddTable func(t *nftables.Table) *nftables.Table

+ CloseLasting func() error

+ DelRule func(r *nftables.Rule) error

+ Flush func() error

+ FlushChain func(c *nftables.Chain)

+ GetRules func(t *nftables.Table, c *nftables.Chain) ([]*nftables.Rule, error)

+ ListChains func() ([]*nftables.Chain, error)

+ ListTables func() ([]*nftables.Table, error)

+ type NftablesFirewall struct — linux/amd64

+ func (f *NftablesFirewall) BeforeConnect(mbusURL string) error

+ func (f *NftablesFirewall) Cleanup() error

+ func (f *NftablesFirewall) EnableMonitAccess() error

+ func (f *NftablesFirewall) SetupMonitFirewall() error

+ func (f *NftablesFirewall) SetupNATSFirewall(mbusURL string) error