Documentation
¶
Overview ¶
wgpeers.go holds the pure (no syscall, OS-agnostic) bits of the pod-spec → wgtransport translation so they're unit-testable on any host. The kernel bring-up itself lives in wireguard_linux.go.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func ApplyFirewall ¶
ApplyFirewall is unavailable off Linux — the agent only filters packets inside a Linux micro-VM. The stub is present so the agent binary still builds on the host-side dev machine (darwin) for cross- platform tests.
func ReadFirewallStatus ¶
func ReadFirewallStatus() pod.FirewallStatus
ReadFirewallStatus on non-Linux returns a stub "no kernel here" status so the emitter goroutine still ticks (useful for host- side dev where the agent binary is built but never sees an nftables-aware kernel). PublishedAtUnix left zero — the emitter stamps it.
Types ¶
This section is empty.
Source Files
Click to show internal directories.
Click to hide internal directories.