dataplane

type Cache struct {
	// contains filtered or unexported fields
}

type Config struct {
	// OrderedLog is the source of truth for endpoint mutations.
	// Required.
	OrderedLog orderedlog.OrderedLog

	// Services lets the dataplane look up VIP + ports for a service
	// referenced by an endpoints update. Optional; service registration
	// is driven by Store watch when set.
	Services ServiceProvider

	// Store watches service rows and opens per-VIP listeners. Required
	// for production cluster networking on single-node runed.
	Store store.Store

	// VIPResolver supplies cluster VIPs when a service row is missing
	// discovery.vip (legacy drift). Typically the VIP allocator.
	VIPResolver VIPResolver

	// Node identifies this node for localityPreference. Required for
	// "prefer-local" / "local-only" semantics; in its absence those
	// modes degrade to "no preference".
	Node NodeIDProvider

	// Mode is "production" (default) or "dev". Dev disables nftables
	// and listens on 127.0.0.1 instead of the real VIP.
	Mode Mode

	// ReservedHostPorts are host ports the dataplane must NOT open VIP
	// listeners on. On an edge node the ingress owns :80/:443 with a
	// 0.0.0.0 wildcard bind; a <vip>:80 listener collides with it and
	// fails the whole ingress subsystem. Services exposed on these
	// ports are reached via the ingress, not the VIP.
	ReservedHostPorts []int

	// Logger; defaults to the global logger with component "dataplane".
	Logger log.Logger

	// StaleBudget is the time a watch disconnect can persist before
	// the proxy starts refusing new connections. Defaults to 30s.
	StaleBudget time.Duration

	// DrainTimeout is the connection-drain deadline applied when an
	// endpoint is removed or a listener is being closed. Defaults to 30s.
	DrainTimeout time.Duration
}

type FuncVIPResolver struct {
	Fn func(ctx context.Context, serviceID string) (net.IP, error)
}

type ListenerSummary struct {
	ServiceID string
	Port      int
	// TargetPort is the upstream container port this listener dials.
	// Defaults to Port when the service spec leaves TargetPort unset.
	TargetPort int
	Protocol   string
	Addr       string
	Active     int64
}

type Metrics struct {
	ConnectionsActive *prometheus.GaugeVec   // {service,protocol}
	ConnectionsTotal  *prometheus.CounterVec // {service,protocol,result}
	EndpointHealth    *prometheus.GaugeVec   // {service} = healthy count
	WatchLag          prometheus.Gauge       // seconds since last watch event
	NftablesRules     prometheus.Gauge       // current rule count (linux only)
	ListenersOpen     *prometheus.GaugeVec   // {service,protocol}
	PolicyDrops       *prometheus.CounterVec // {service,namespace,policy,reason}
	PolicyAllows      *prometheus.CounterVec // {service,namespace,policy}
	PolicyRules       *prometheus.GaugeVec   // {service,namespace} -> ingress+egress rule count
	PolicyLastSeq     *prometheus.GaugeVec   // {service,namespace} -> last refresh timestamp (unix seconds)
	LocalInstances    prometheus.Gauge       // size of LocalInstances table
}

type Mode int

type NodeIDProvider interface {
	NodeID() string
}

type ProxyManager struct {
	// contains filtered or unexported fields
}

type ServiceProvider interface {
	Lookup(serviceID string) (*types.Service, bool)
}

type ServiceSummary struct {
	ServiceID string
	Total     int
	Healthy   int
}

type Subsystem struct {
	// contains filtered or unexported fields
}

type VIPResolver interface {
	VIPForService(ctx context.Context, serviceID string) (net.IP, error)
}