nftables

package
v2.6.1 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Nov 2, 2026 License: MIT Imports: 32 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

This section is empty.

Types

type FQDNCache 

type FQDNCache interface {
	GetSetsForRendering(fqdns []firewallv1.FQDNSelector) (result []dns.RenderIPSet)
	GetSetsForFQDN(fqdn firewallv1.FQDNSelector) (result []firewallv1.IPSet)
	IsInitialized() bool
	CacheAddr() string
}

type Nftables added in v2.6.0 

type Nftables struct {
	// contains filtered or unexported fields
}

Nftables assembles nftable rules based on k8s entities

func New added in v2.6.0 

func New(
	firewall *firewallv2.Firewall,
	cwnps *firewallv1.ClusterwideNetworkPolicyList,
	svcs *corev1.ServiceList,
	cache FQDNCache,
	log logr.Logger,
	recorder record.EventRecorder,
	allocation *apiv2.MachineAllocation,
) *Nftables

New creates a new nftables firewall object based on k8s entities

func (*Nftables) Apply added in v2.6.0 

func (f *Nftables) Apply() (updated bool, err error)

Apply applies the interface addresses through netlink and writes the /etc/nftables/firewall-controller.v4 rules file.

func (*Nftables) ApplyBaseRules added in v2.6.0 

func (f *Nftables) ApplyBaseRules(ctx context.Context) error

ApplyBaseRules applies the /etc/nftables/rules file (to enable or disable the DNS proxy).

func (*Nftables) Flush added in v2.6.0 

func (f *Nftables) Flush() error

Flush flushes the nftables rules that were deduced from a k8s resources after that the firewall is a "plain metal firewall" with default policy accept in the forward chain.

Source Files

View all Source files

Directories

Path Synopsis
mocks
pkg/nftables

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.