types

type AccountSettingsInfo struct {
	PeerLoginExpirationEnabled      bool
	PeerLoginExpiration             time.Duration
	PeerInactivityExpirationEnabled bool
	PeerInactivityExpiration        time.Duration
}

type FirewallRule struct {
	// PolicyID is the ID of the policy this rule is derived from
	PolicyID string

	// PeerIP of the peer
	PeerIP string

	// Direction of the traffic
	Direction int

	// Action of the traffic
	Action string

	// Protocol of the traffic
	Protocol string

	// Port of the traffic
	Port string

	// PortRange represents the range of ports for a firewall rule
	PortRange RulePortRange
}

type FirewallRuleContext struct {
	Direction   int
	DirStr      string
	ProtocolStr string
	ActionStr   string
	PortsJoined string
}

type ForwardingRule struct {
	RuleProtocol      string
	DestinationPorts  RulePortRange
	TranslatedAddress net.IP
	TranslatedPorts   RulePortRange
}

type GroupCompact struct {
	Name        string
	PeerIndexes []int
}

type LookupMap map[string]struct{}

type NetworkMap struct {
	Peers               []*nmdata.Peer
	Network             *nmdata.Network
	Routes              []*nmdata.Route
	DNSConfig           nbdns.Config
	OfflinePeers        []*nmdata.Peer
	FirewallRules       []*FirewallRule
	RoutesFirewallRules []*RouteFirewallRule
	ForwardingRules     []*ForwardingRule
	AuthorizedUsers     map[string]map[string]struct{}
	EnableSSH           bool
	// ForceRoutingPeerDNSResolution forces the peer to run/use routing-peer DNS
	// resolution regardless of the account-global setting, for reverse-proxy
	// domain targets.
	ForceRoutingPeerDNSResolution bool
}

type NetworkMapComponents struct {
	PeerID string

	Network          *nmdata.Network
	AccountSettings  *nmdata.AccountSettingsInfo
	DNSSettings      *nmdata.DNSSettings
	CustomZoneDomain string

	Peers               map[string]*nmdata.Peer
	Groups              map[string]*nmdata.Group
	Policies            []*nmdata.Policy
	Routes              []*nmdata.Route
	NameServerGroups    []*nmdata.NameServerGroup
	AllDNSRecords       []nmdata.SimpleRecord
	AccountZones        []nmdata.CustomZone
	ResourcePoliciesMap map[string][]*nmdata.Policy
	RoutersMap          map[string]map[string]*nmdata.NetworkRouter
	NetworkResources    []*nmdata.NetworkResource

	GroupIDToUserIDs   map[string][]string
	AllowedUserIDs     map[string]struct{}
	PostureFailedPeers map[string]map[string]struct{}

	RouterPeers map[string]*nmdata.Peer

	// NetworkXIDToPublicID maps Network.ID (xid) → PublicID.
	// Consumed by the envelope encoder to
	// translate RoutersMap keys and NetworkResource.NetworkID references
	// to compact uint32 ids. Legacy Calculate() doesn't consult it.
	NetworkXIDToPublicID map[string]string

	// PostureCheckXIDToPublicID maps posture.Checks.ID (xid) → PublicID.
	// Same role as NetworkXIDToPublicID, used for PostureFailedPeers keys and
	// policy SourcePostureChecks references.
	PostureCheckXIDToPublicID map[string]string

	// ForceRoutingPeerDNSResolution forces the peer to run/use routing-peer DNS
	// resolution regardless of the account-global setting, for reverse-proxy
	// domain targets.
	ForceRoutingPeerDNSResolution bool
	// contains filtered or unexported fields
}

type NetworkMapComponentsCompact struct {
	PeerID string

	Network          *nmdata.Network
	AccountSettings  *nmdata.AccountSettingsInfo
	DNSSettings      *nmdata.DNSSettings
	CustomZoneDomain string

	AllPeers          []*nmdata.Peer
	PeerIndexes       []int
	RouterPeerIndexes []int

	Groups              map[string]*GroupCompact
	AllPolicies         []*nmdata.Policy
	PolicyIndexes       []int
	ResourcePoliciesMap map[string][]int
	Routes              []*nmdata.Route
	NameServerGroups    []*nmdata.NameServerGroup
	AllDNSRecords       []nmdata.SimpleRecord
	AccountZones        []nmdata.CustomZone

	RoutersMap       map[string]map[string]*nmdata.NetworkRouter
	NetworkResources []*nmdata.NetworkResource

	GroupIDToUserIDs   map[string][]string
	AllowedUserIDs     map[string]struct{}
	PostureFailedPeers map[string]map[string]struct{}
}

type PolicyRuleProtocolType string

type PolicyTrafficActionType string

type ResourceType string

type RouteFirewallRule struct {
	// PolicyID is the ID of the policy this rule is derived from
	PolicyID string

	// RouteID is the ID of the route this rule belongs to.
	RouteID route.ID

	// SourceRanges IP ranges of the routing peers.
	SourceRanges []string

	// Action of the traffic when the rule is applicable
	Action string

	// Destination a network prefix for the routed traffic
	Destination string

	// Protocol of the traffic
	Protocol string

	// Port of the traffic
	Port uint16

	// PortRange represents the range of ports for a firewall rule
	PortRange RulePortRange

	// Domains list of network domains for the routed traffic
	Domains domain.List

	// isDynamic indicates whether the rule is for DNS routing
	IsDynamic bool
}

type RulePortRange struct {
	Start uint16
	End   uint16
}