firewall

package
v0.68.2 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Apr 13, 2026 License: BSD-3-Clause Imports: 16 Imported by: 0

Documentation

Index

Constants

View Source 
const EnvForceUserspaceFirewall = "NB_FORCE_USERSPACE_FIREWALL"

EnvForceUserspaceFirewall forces the use of the userspace packet filter even when native iptables/nftables is available. This only applies when the WireGuard interface runs in userspace mode. When set, peer ACLs are handled by USPFilter instead of kernel netfilter rules.

View Source 
const SKIP_NFTABLES_ENV = "NB_SKIP_NFTABLES_CHECK"

SKIP_NFTABLES_ENV is the environment variable to skip nftables check

Variables

This section is empty.

Functions

func NewFirewall added in v0.24.4 

func NewFirewall(iface IFaceMapper, stateManager *statemanager.Manager, flowLogger nftypes.FlowLogger, disableServerRoutes bool, mtu uint16) (firewall.Manager, error)

Types

type FWType added in v0.24.4 

type FWType int

FWType is the type for the firewall type 

const (
	// UNKNOWN is the default value for the firewall type for unknown firewall type
	UNKNOWN FWType = iota
	// IPTABLES is the value for the iptables firewall type
	IPTABLES
	// NFTABLES is the value for the nftables firewall type
	NFTABLES
)

type IFaceMapper added in v0.24.4 

type IFaceMapper interface {
	Name() string
	Address() wgaddr.Address
	IsUserspaceBind() bool
	SetFilter(device.PacketFilter) error
	GetDevice() *device.FilteredDevice
	GetWGDevice() *wgdevice.Device
}

IFaceMapper defines subset methods of interface required for manager

Source Files

View all Source files

Directories

Path Synopsis
common
conntrack
forwarder
log
Package log provides a high-performance, non-blocking logger for userspace networking
 Package log provides a high-performance, non-blocking logger for userspace networking

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.