package iptables

import "github.com/docker/docker/pkg/iptables"

Index ¶

• Constants
• Variables
• func Exists(args ...string) bool
• func Raw(args ...string) ([]byte, error)
• func RemoveExistingChain(name string, table Table) error
• type Action
• type Chain
• func NewChain(name, bridge string, table Table) (*Chain, error)
• func (c *Chain) Forward(action Action, ip net.IP, port int, proto, destAddr string, destPort int) error
• func (c *Chain) Link(action Action, ip1, ip2 net.IP, port int, proto string) error
• func (c *Chain) Output(action Action, args ...string) error
• func (c *Chain) Prerouting(action Action, args ...string) error
• func (c *Chain) Remove() error
• type ChainError
• func (e *ChainError) Error() string
• type Table

Constants ¶

const (
	Append Action = "-A"
	Delete Action = "-D"
	Insert Action = "-I"
	Nat    Table  = "nat"
	Filter Table  = "filter"
)

Variables ¶

var (
	ErrIptablesNotFound = errors.New("Iptables not found")
)

Functions ¶

func Exists ¶

func Exists(args ...string) bool

Check if a rule exists

func Raw ¶

func Raw(args ...string) ([]byte, error)

Call 'iptables' system command, passing supplied arguments

func RemoveExistingChain ¶

func RemoveExistingChain(name string, table Table) error

Types ¶

type Action ¶

type Action string

type Chain ¶

type Chain struct {
	Name   string
	Bridge string
	Table  Table
}

func NewChain ¶

func NewChain(name, bridge string, table Table) (*Chain, error)

func (*Chain) Forward ¶

func (c *Chain) Forward(action Action, ip net.IP, port int, proto, destAddr string, destPort int) error

Add forwarding rule to 'filter' table and corresponding nat rule to 'nat' table

func (*Chain) Link ¶

func (c *Chain) Link(action Action, ip1, ip2 net.IP, port int, proto string) error

Add reciprocal ACCEPT rule for two supplied IP addresses. Traffic is allowed from ip1 to ip2 and vice-versa

func (*Chain) Output ¶

func (c *Chain) Output(action Action, args ...string) error

Add linking rule to an OUTPUT chain

func (*Chain) Prerouting ¶

func (c *Chain) Prerouting(action Action, args ...string) error

Add linking rule to nat/PREROUTING chain.

func (*Chain) Remove ¶

func (c *Chain) Remove() error

type ChainError ¶

type ChainError struct {
	Chain  string
	Output []byte
}

func (*ChainError) Error ¶

func (e *ChainError) Error() string

type Table ¶

type Table string

Source Files ¶

iptables.go