blocknode

type BlockNodeHandler ¶ added in v0.22.1

type BlockNodeHandler struct {
	// contains filtered or unexported fields
}

BlockNodeHandler implements daemonkit.ComponentHandler for all block-node HTTP routes under the /block_node/ prefix.

To add a new monitor for the block-node component:

1. Add a field for the monitor and its state func to this struct.
2. Register the new route(s) in RegisterRoutes.
3. Implement the handler method(s) on *BlockNodeHandler.

func NewBlockNodeHandler(mon *TrafficShaperMonitor, trafficShaperStateFn func() daemonkit.MonitorState) *BlockNodeHandler

func (h *BlockNodeHandler) RegisterRoutes(mux *http.ServeMux)

GET /block_node/traffic_shaper/status — traffic-shaper monitor health

type ComponentConfig ¶

type ComponentConfig struct {
	TrafficShaperEnabled bool

	// KubeconfigPath is the path to the BN-scoped kubeconfig. Required when
	// TrafficShaperEnabled is true (used to exec into BN pods to resolve veths).
	KubeconfigPath string

	// Namespace is the Kubernetes namespace (orbit) where BN pods run.
	// Required when TrafficShaperEnabled is true.
	Namespace string
}

ComponentConfig holds inputs needed to build the block-node component.

type ComponentResult ¶

type ComponentResult struct {
	// Monitors is the ordered slice of monitors to run under the supervisor.
	Monitors []daemonkit.MonitorRunner

	// TrafficShaperMonitor is non-nil when the traffic-shaper monitor is enabled.
	// daemon.go uses this to construct BlockNodeHandler with the correct
	// trafficShaperStateFn closure after the component's StatusTracker is created.
	TrafficShaperMonitor *TrafficShaperMonitor
}

ComponentResult contains the monitors built by NewComponent and a reference to the TrafficShaperMonitor (when enabled) so daemon.go can wire the HTTP handler with the per-component StatusTracker closure after the component is assembled.

func NewComponent(cfg ComponentConfig) (ComponentResult, error)

type Endpoint ¶ added in v0.23.0

type Endpoint struct {
	Address string `json:"address"`
	Port    string `json:"port"`
}

Endpoint is one side (local or remote) of a NetworkConnection. Port is a string because the BN reports "*" (any port) alongside numeric ports, and Address may be a single IP or a CIDR (e.g. "10.10.1.0/24").

type NetworkConnection ¶ added in v0.23.0

type NetworkConnection struct {
	Local       Endpoint `json:"local"`
	Remote      Endpoint `json:"remote"`
	Category    string   `json:"category"`
	TLSRequired bool     `json:"tls_required"`
}

NetworkConnection is one active endpoint reported by a statusz endpoint. Category is left as the raw BN string here — mapping categories to policy names and nft sets is a separate concern from reading the endpoint.

type NetworkData ¶ added in v0.23.0

type NetworkData struct {
	ActiveEndpoints []NetworkConnection `json:"active_endpoints"`
}

NetworkData is the decoded payload of a statusz endpoint: the set of active endpoints the BN currently reports.

type StatuszClient ¶ added in v0.23.0

type StatuszClient struct {
	// contains filtered or unexported fields
}

StatuszClient reads a Block Node's statusz REST/JSON endpoints.

func NewStatuszClient(baseURL string) *StatuszClient

func (c *StatuszClient) InboundClients(ctx context.Context) (NetworkData, error)

func (c *StatuszClient) OutboundClients(ctx context.Context) (NetworkData, error)

type TrafficShaperMonitor ¶ added in v0.22.1

type TrafficShaperMonitor struct {
	// contains filtered or unexported fields
}

TrafficShaperMonitor is the daemonkit.MonitorRunner for the block-node traffic-shaper workflow. It owns two long-lived responsibilities that run concurrently under Run:

• the pod-lifecycle watcher (resolves host-side veths and installs/rebinds ingress HTB qdiscs — implemented in #748/#749), and
• the statusz poll loop (diffs statusz membership against live nft sets and applies deltas — implemented in #751/#752/#754/#755).

Each responsibility is independently retried with exponential back-off so a fault in one cannot stop the other or crash the daemon.

func NewTrafficShaperMonitor(resolver *VethResolver) *TrafficShaperMonitor

func (m *TrafficShaperMonitor) Name() string

func (m *TrafficShaperMonitor) Run(ctx context.Context) error

type TrafficShaperStatusResponse ¶ added in v0.22.1

type TrafficShaperStatusResponse struct {
	Monitor daemonkit.MonitorState `json:"monitor"`
}

TrafficShaperStatusResponse is the view returned by GET /block_node/traffic_shaper/status. For #746 it carries only the supervisor-level health of the monitor goroutine (running/backoff/stopped). Per-subsystem and degraded-state reporting is added by #750.

type VethResolver ¶ added in v0.22.1

type VethResolver struct {
	// contains filtered or unexported fields
}

VethResolver resolves the host-side veth peer of a BN pod by matching the pod's eth0 iflink against the host's /sys/class/net/*/ifindex entries.

Algorithm (v4 design §8.1.1):

1. Exec "cat /sys/class/net/eth0/iflink" inside the pod → the host-side veth's ifindex.
2. Scan /sys/class/net/*/ifindex on the host for the matching interface.

func NewVethResolver(cfg VethResolverConfig) (*VethResolver, error)

func (r *VethResolver) Resolve(ctx context.Context, pod *corev1.Pod) (string, error)

type VethResolverConfig ¶ added in v0.22.1

type VethResolverConfig struct {
	// KubeconfigPath is the path to the BN-scoped kubeconfig used to exec
	// into the BN pod to read its eth0 iflink.
	KubeconfigPath string

	// SysClassNet is the host-side /sys/class/net path to scan for ifindex
	// files. Defaults to /sys/class/net when empty; override in tests.
	SysClassNet string
}

VethResolverConfig holds inputs for NewVethResolver.