types

type AccountSettingsInfo struct {
	PeerLoginExpirationEnabled      bool
	PeerLoginExpiration             time.Duration
	PeerInactivityExpirationEnabled bool
	PeerInactivityExpiration        time.Duration
}

type ComponentGroup struct {
	ID       string
	PublicID string
	Name     string
	Peers    []string
}

type ComponentPeer struct {
	ID                     string
	Key                    string
	IP                     netip.Addr
	IPv6                   netip.Addr
	DNSLabel               string
	SSHKey                 string
	SSHEnabled             bool
	ServerSSHAllowed       bool
	AgentVersion           string
	SupportsSourcePrefixes bool
	SupportsIPv6           bool
	LoginExpirationEnabled bool
	AddedWithSSOLogin      bool
	LastLogin              time.Time
}

type ComponentResource struct {
	ID          string
	PublicID    string
	NetworkID   string
	AccountID   string
	Name        string
	Description string
	Type        ComponentResourceType
	Address     string
	Domain      string
	Prefix      netip.Prefix
	Enabled     bool
}

type ComponentResourceType string

type ComponentRouter struct {
	NetworkID  string
	PublicID   string
	Peer       string
	PeerGroups []string
	Masquerade bool
	Metric     int
	Enabled    bool
}

type DNSSettings struct {
	// DisabledManagementGroups groups whose DNS management is disabled
	DisabledManagementGroups []string `gorm:"serializer:json"`
}

type FirewallRule struct {
	// PolicyID is the ID of the policy this rule is derived from
	PolicyID string

	// PeerIP of the peer
	PeerIP string

	// Direction of the traffic
	Direction int

	// Action of the traffic
	Action string

	// Protocol of the traffic
	Protocol string

	// Port of the traffic
	Port string

	// PortRange represents the range of ports for a firewall rule
	PortRange RulePortRange
}

type FirewallRuleContext struct {
	Direction   int
	DirStr      string
	ProtocolStr string
	ActionStr   string
	PortsJoined string
}

type ForwardingRule struct {
	RuleProtocol      string
	DestinationPorts  RulePortRange
	TranslatedAddress net.IP
	TranslatedPorts   RulePortRange
}

type GroupCompact struct {
	Name        string
	PeerIndexes []int
}

type LookupMap map[string]struct{}

type Network struct {
	Identifier string    `json:"id"`
	Net        net.IPNet `gorm:"serializer:json"`
	// NetV6 is the IPv6 ULA subnet for this account's overlay. Empty if not yet allocated.
	NetV6 net.IPNet `gorm:"serializer:json"`
	Dns   string
	// Serial is an ID that increments by 1 when any change to the network happened (e.g. new peer has been added).
	// Used to synchronize state to the client apps.
	Serial uint64

	Mu sync.Mutex `json:"-" gorm:"-"`
}

type NetworkMap struct {
	Peers               []*ComponentPeer
	Network             *Network
	Routes              []*route.Route
	DNSConfig           nbdns.Config
	OfflinePeers        []*ComponentPeer
	FirewallRules       []*FirewallRule
	RoutesFirewallRules []*RouteFirewallRule
	ForwardingRules     []*ForwardingRule
	AuthorizedUsers     map[string]map[string]struct{}
	EnableSSH           bool
}

type NetworkMapComponents struct {
	PeerID string

	Network          *Network
	AccountSettings  *AccountSettingsInfo
	DNSSettings      *DNSSettings
	CustomZoneDomain string

	Peers               map[string]*ComponentPeer
	Groups              map[string]*ComponentGroup
	Policies            []*Policy
	Routes              []*route.Route
	NameServerGroups    []*nbdns.NameServerGroup
	AllDNSRecords       []nbdns.SimpleRecord
	AccountZones        []nbdns.CustomZone
	ResourcePoliciesMap map[string][]*Policy
	RoutersMap          map[string]map[string]*ComponentRouter
	NetworkResources    []*ComponentResource

	GroupIDToUserIDs   map[string][]string
	AllowedUserIDs     map[string]struct{}
	PostureFailedPeers map[string]map[string]struct{}

	RouterPeers map[string]*ComponentPeer

	// NetworkXIDToPublicID maps Network.ID (xid) → PublicID.
	// Consumed by the envelope encoder to
	// translate RoutersMap keys and NetworkResource.NetworkID references
	// to compact uint32 ids. Legacy Calculate() doesn't consult it.
	NetworkXIDToPublicID map[string]string

	// PostureCheckXIDToPublicID maps posture.Checks.ID (xid) → PublicID.
	// Same role as NetworkXIDToPublicID, used for PostureFailedPeers keys and
	// policy SourcePostureChecks references.
	PostureCheckXIDToPublicID map[string]string
	// contains filtered or unexported fields
}

type NetworkMapComponentsCompact struct {
	PeerID string

	Network          *Network
	AccountSettings  *AccountSettingsInfo
	DNSSettings      *DNSSettings
	CustomZoneDomain string

	AllPeers          []*ComponentPeer
	PeerIndexes       []int
	RouterPeerIndexes []int

	Groups              map[string]*GroupCompact
	AllPolicies         []*Policy
	PolicyIndexes       []int
	ResourcePoliciesMap map[string][]int
	Routes              []*route.Route
	NameServerGroups    []*nbdns.NameServerGroup
	AllDNSRecords       []nbdns.SimpleRecord
	AccountZones        []nbdns.CustomZone

	RoutersMap       map[string]map[string]*ComponentRouter
	NetworkResources []*ComponentResource

	GroupIDToUserIDs   map[string][]string
	AllowedUserIDs     map[string]struct{}
	PostureFailedPeers map[string]map[string]struct{}
}

type Policy struct {
	// ID of the policy'
	ID string `gorm:"primaryKey"`

	PublicID string `json:"-"`

	// AccountID is a reference to Account that this object belongs
	AccountID string `json:"-" gorm:"index"`

	// Name of the Policy
	Name string

	// Description of the policy visible in the UI
	Description string

	// Enabled status of the policy
	Enabled bool

	// Rules of the policy
	Rules []*PolicyRule `gorm:"foreignKey:PolicyID;references:id;constraint:OnDelete:CASCADE;"`

	// SourcePostureChecks are ID references to Posture checks for policy source groups
	SourcePostureChecks []string `gorm:"serializer:json"`
}

type PolicyRule struct {
	// ID of the policy rule
	ID string `gorm:"primaryKey"`

	// PolicyID is a reference to Policy that this object belongs
	PolicyID string `json:"-" gorm:"index"`

	// Name of the rule visible in the UI
	Name string

	// Description of the rule visible in the UI
	Description string

	// Enabled status of rule in the system
	Enabled bool

	// Action policy accept or drops packets
	Action PolicyTrafficActionType

	// Destinations policy destination groups
	Destinations []string `gorm:"serializer:json"`

	// DestinationResource policy destination resource that the rule is applied to
	DestinationResource Resource `gorm:"serializer:json"`

	// Sources policy source groups
	Sources []string `gorm:"serializer:json"`

	// SourceResource policy source resource that the rule is applied to
	SourceResource Resource `gorm:"serializer:json"`

	// Bidirectional define if the rule is applicable in both directions, sources, and destinations
	Bidirectional bool

	// Protocol type of the traffic
	Protocol PolicyRuleProtocolType

	// Ports or it ranges list
	Ports []string `gorm:"serializer:json"`

	// PortRanges a list of port ranges.
	PortRanges []RulePortRange `gorm:"serializer:json"`

	// AuthorizedGroups is a map of groupIDs and their respective access to local users via ssh
	AuthorizedGroups map[string][]string `gorm:"serializer:json"`

	// AuthorizedUser is a list of userIDs that are authorized to access local resources via ssh
	AuthorizedUser string
}

type PolicyRuleDirection string

type PolicyRuleProtocolType string

type PolicyTrafficActionType string

type PolicyUpdateOperation struct {
	Type   PolicyUpdateOperationType
	Values []string
}

type PolicyUpdateOperationType int

type Resource struct {
	ID   string
	Type ResourceType
}

type ResourceType string

type RouteFirewallRule struct {
	// PolicyID is the ID of the policy this rule is derived from
	PolicyID string

	// RouteID is the ID of the route this rule belongs to.
	RouteID route.ID

	// SourceRanges IP ranges of the routing peers.
	SourceRanges []string

	// Action of the traffic when the rule is applicable
	Action string

	// Destination a network prefix for the routed traffic
	Destination string

	// Protocol of the traffic
	Protocol string

	// Port of the traffic
	Port uint16

	// PortRange represents the range of ports for a firewall rule
	PortRange RulePortRange

	// Domains list of network domains for the routed traffic
	Domains domain.List

	// isDynamic indicates whether the rule is for DNS routing
	IsDynamic bool
}

type RulePortRange struct {
	Start uint16
	End   uint16
}