firewall

package
v0.2.2 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Jan 17, 2024 License: MIT Imports: 2 Imported by: 0

Documentation

Index

Constants

View Source 
const (
	LogLevelIn_EMERG   LogLevelIn = "emerg"
	LogLevelIn_ALERT   LogLevelIn = "alert"
	LogLevelIn_CRIT    LogLevelIn = "crit"
	LogLevelIn_ERR     LogLevelIn = "err"
	LogLevelIn_WARNING LogLevelIn = "warning"
	LogLevelIn_NOTICE  LogLevelIn = "notice"
	LogLevelIn_INFO    LogLevelIn = "info"
	LogLevelIn_DEBUG   LogLevelIn = "debug"
	LogLevelIn_NOLOG   LogLevelIn = "nolog"

	LogLevelOut_EMERG   LogLevelOut = "emerg"
	LogLevelOut_ALERT   LogLevelOut = "alert"
	LogLevelOut_CRIT    LogLevelOut = "crit"
	LogLevelOut_ERR     LogLevelOut = "err"
	LogLevelOut_WARNING LogLevelOut = "warning"
	LogLevelOut_NOTICE  LogLevelOut = "notice"
	LogLevelOut_INFO    LogLevelOut = "info"
	LogLevelOut_DEBUG   LogLevelOut = "debug"
	LogLevelOut_NOLOG   LogLevelOut = "nolog"

	SmurfLogLevel_EMERG   SmurfLogLevel = "emerg"
	SmurfLogLevel_ALERT   SmurfLogLevel = "alert"
	SmurfLogLevel_CRIT    SmurfLogLevel = "crit"
	SmurfLogLevel_ERR     SmurfLogLevel = "err"
	SmurfLogLevel_WARNING SmurfLogLevel = "warning"
	SmurfLogLevel_NOTICE  SmurfLogLevel = "notice"
	SmurfLogLevel_INFO    SmurfLogLevel = "info"
	SmurfLogLevel_DEBUG   SmurfLogLevel = "debug"
	SmurfLogLevel_NOLOG   SmurfLogLevel = "nolog"

	TcpFlagsLogLevel_EMERG   TcpFlagsLogLevel = "emerg"
	TcpFlagsLogLevel_ALERT   TcpFlagsLogLevel = "alert"
	TcpFlagsLogLevel_CRIT    TcpFlagsLogLevel = "crit"
	TcpFlagsLogLevel_ERR     TcpFlagsLogLevel = "err"
	TcpFlagsLogLevel_WARNING TcpFlagsLogLevel = "warning"
	TcpFlagsLogLevel_NOTICE  TcpFlagsLogLevel = "notice"
	TcpFlagsLogLevel_INFO    TcpFlagsLogLevel = "info"
	TcpFlagsLogLevel_DEBUG   TcpFlagsLogLevel = "debug"
	TcpFlagsLogLevel_NOLOG   TcpFlagsLogLevel = "nolog"
)

Variables

This section is empty.

Functions

This section is empty.

Types

type Client 

type Client struct {
	// contains filtered or unexported fields
}

func New 

func New(c HTTPClient) *Client

func (*Client) GetOptions 

func (c *Client) GetOptions(ctx context.Context, req GetOptionsRequest) (GetOptionsResponse, error)

GetOptions Get host firewall options.

func (*Client) Index 

func (c *Client) Index(ctx context.Context, req IndexRequest) ([]map[string]interface{}, error)

Index Directory index.

func (*Client) Log 

func (c *Client) Log(ctx context.Context, req LogRequest) ([]LogResponse, error)

Log Read firewall log

func (*Client) SetOptions 

func (c *Client) SetOptions(ctx context.Context, req SetOptionsRequest) error

SetOptions Set Firewall options.

type GetOptionsRequest 

type GetOptionsRequest struct {
	Node string `url:"node" json:"node"` // The cluster node name.

}

type GetOptionsResponse 

type GetOptionsResponse struct {

	// The following parameters are optional
	Enable                           *util.PVEBool     `url:"enable,omitempty" json:"enable,omitempty"`                                                             // Enable host firewall rules.
	LogLevelIn                       *LogLevelIn       `url:"log_level_in,omitempty" json:"log_level_in,omitempty"`                                                 // Log level for incoming traffic.
	LogLevelOut                      *LogLevelOut      `url:"log_level_out,omitempty" json:"log_level_out,omitempty"`                                               // Log level for outgoing traffic.
	LogNfConntrack                   *util.PVEBool     `url:"log_nf_conntrack,omitempty" json:"log_nf_conntrack,omitempty"`                                         // Enable logging of conntrack information.
	Ndp                              *util.PVEBool     `url:"ndp,omitempty" json:"ndp,omitempty"`                                                                   // Enable NDP (Neighbor Discovery Protocol).
	NfConntrackAllowInvalid          *util.PVEBool     `url:"nf_conntrack_allow_invalid,omitempty" json:"nf_conntrack_allow_invalid,omitempty"`                     // Allow invalid packets on connection tracking.
	NfConntrackHelpers               *string           `url:"nf_conntrack_helpers,omitempty" json:"nf_conntrack_helpers,omitempty"`                                 // Enable conntrack helpers for specific protocols. Supported protocols: amanda, ftp, irc, netbios-ns, pptp, sane, sip, snmp, tftp
	NfConntrackMax                   *int              `url:"nf_conntrack_max,omitempty" json:"nf_conntrack_max,omitempty"`                                         // Maximum number of tracked connections.
	NfConntrackTcpTimeoutEstablished *int              `url:"nf_conntrack_tcp_timeout_established,omitempty" json:"nf_conntrack_tcp_timeout_established,omitempty"` // Conntrack established timeout.
	NfConntrackTcpTimeoutSynRecv     *int              `url:"nf_conntrack_tcp_timeout_syn_recv,omitempty" json:"nf_conntrack_tcp_timeout_syn_recv,omitempty"`       // Conntrack syn recv timeout.
	Nosmurfs                         *util.PVEBool     `url:"nosmurfs,omitempty" json:"nosmurfs,omitempty"`                                                         // Enable SMURFS filter.
	ProtectionSynflood               *util.PVEBool     `url:"protection_synflood,omitempty" json:"protection_synflood,omitempty"`                                   // Enable synflood protection
	ProtectionSynfloodBurst          *int              `url:"protection_synflood_burst,omitempty" json:"protection_synflood_burst,omitempty"`                       // Synflood protection rate burst by ip src.
	ProtectionSynfloodRate           *int              `url:"protection_synflood_rate,omitempty" json:"protection_synflood_rate,omitempty"`                         // Synflood protection rate syn/sec by ip src.
	SmurfLogLevel                    *SmurfLogLevel    `url:"smurf_log_level,omitempty" json:"smurf_log_level,omitempty"`                                           // Log level for SMURFS filter.
	TcpFlagsLogLevel                 *TcpFlagsLogLevel `url:"tcp_flags_log_level,omitempty" json:"tcp_flags_log_level,omitempty"`                                   // Log level for illegal tcp flags filter.
	Tcpflags                         *util.PVEBool     `url:"tcpflags,omitempty" json:"tcpflags,omitempty"`                                                         // Filter illegal combinations of TCP flags.
}

type HTTPClient 

type HTTPClient interface {
	Do(context.Context, string, string, interface{}, interface{}) error
}

type IndexRequest 

type IndexRequest struct {
	Node string `url:"node" json:"node"` // The cluster node name.

}

type LogLevelIn added in v0.0.15 

type LogLevelIn string

func PtrLogLevelIn added in v0.0.15 

func PtrLogLevelIn(i LogLevelIn) *LogLevelIn

type LogLevelOut added in v0.0.15 

type LogLevelOut string

func PtrLogLevelOut added in v0.0.15 

func PtrLogLevelOut(i LogLevelOut) *LogLevelOut

type LogRequest 

type LogRequest struct {
	Node string `url:"node" json:"node"` // The cluster node name.

	// The following parameters are optional
	Limit *int `url:"limit,omitempty" json:"limit,omitempty"`
	Since *int `url:"since,omitempty" json:"since,omitempty"` // Display log since this UNIX epoch.
	Start *int `url:"start,omitempty" json:"start,omitempty"`
	Until *int `url:"until,omitempty" json:"until,omitempty"` // Display log until this UNIX epoch.
}

type LogResponse 

type LogResponse struct {
	N int    `url:"n" json:"n"` // Line number
	T string `url:"t" json:"t"` // Line text

}

type SetOptionsRequest 

type SetOptionsRequest struct {
	Node string `url:"node" json:"node"` // The cluster node name.

	// The following parameters are optional
	Delete                           *string           `url:"delete,omitempty" json:"delete,omitempty"`                                                             // A list of settings you want to delete.
	Digest                           *string           `url:"digest,omitempty" json:"digest,omitempty"`                                                             // Prevent changes if current configuration file has different SHA1 digest. This can be used to prevent concurrent modifications.
	Enable                           *util.PVEBool     `url:"enable,omitempty" json:"enable,omitempty"`                                                             // Enable host firewall rules.
	LogLevelIn                       *LogLevelIn       `url:"log_level_in,omitempty" json:"log_level_in,omitempty"`                                                 // Log level for incoming traffic.
	LogLevelOut                      *LogLevelOut      `url:"log_level_out,omitempty" json:"log_level_out,omitempty"`                                               // Log level for outgoing traffic.
	LogNfConntrack                   *util.PVEBool     `url:"log_nf_conntrack,omitempty" json:"log_nf_conntrack,omitempty"`                                         // Enable logging of conntrack information.
	Ndp                              *util.PVEBool     `url:"ndp,omitempty" json:"ndp,omitempty"`                                                                   // Enable NDP (Neighbor Discovery Protocol).
	NfConntrackAllowInvalid          *util.PVEBool     `url:"nf_conntrack_allow_invalid,omitempty" json:"nf_conntrack_allow_invalid,omitempty"`                     // Allow invalid packets on connection tracking.
	NfConntrackHelpers               *string           `url:"nf_conntrack_helpers,omitempty" json:"nf_conntrack_helpers,omitempty"`                                 // Enable conntrack helpers for specific protocols. Supported protocols: amanda, ftp, irc, netbios-ns, pptp, sane, sip, snmp, tftp
	NfConntrackMax                   *int              `url:"nf_conntrack_max,omitempty" json:"nf_conntrack_max,omitempty"`                                         // Maximum number of tracked connections.
	NfConntrackTcpTimeoutEstablished *int              `url:"nf_conntrack_tcp_timeout_established,omitempty" json:"nf_conntrack_tcp_timeout_established,omitempty"` // Conntrack established timeout.
	NfConntrackTcpTimeoutSynRecv     *int              `url:"nf_conntrack_tcp_timeout_syn_recv,omitempty" json:"nf_conntrack_tcp_timeout_syn_recv,omitempty"`       // Conntrack syn recv timeout.
	Nosmurfs                         *util.PVEBool     `url:"nosmurfs,omitempty" json:"nosmurfs,omitempty"`                                                         // Enable SMURFS filter.
	ProtectionSynflood               *util.PVEBool     `url:"protection_synflood,omitempty" json:"protection_synflood,omitempty"`                                   // Enable synflood protection
	ProtectionSynfloodBurst          *int              `url:"protection_synflood_burst,omitempty" json:"protection_synflood_burst,omitempty"`                       // Synflood protection rate burst by ip src.
	ProtectionSynfloodRate           *int              `url:"protection_synflood_rate,omitempty" json:"protection_synflood_rate,omitempty"`                         // Synflood protection rate syn/sec by ip src.
	SmurfLogLevel                    *SmurfLogLevel    `url:"smurf_log_level,omitempty" json:"smurf_log_level,omitempty"`                                           // Log level for SMURFS filter.
	TcpFlagsLogLevel                 *TcpFlagsLogLevel `url:"tcp_flags_log_level,omitempty" json:"tcp_flags_log_level,omitempty"`                                   // Log level for illegal tcp flags filter.
	Tcpflags                         *util.PVEBool     `url:"tcpflags,omitempty" json:"tcpflags,omitempty"`                                                         // Filter illegal combinations of TCP flags.
}

type SmurfLogLevel added in v0.0.15 

type SmurfLogLevel string

func PtrSmurfLogLevel added in v0.0.15 

func PtrSmurfLogLevel(i SmurfLogLevel) *SmurfLogLevel

type TcpFlagsLogLevel added in v0.0.15 

type TcpFlagsLogLevel string

func PtrTcpFlagsLogLevel added in v0.0.15 

func PtrTcpFlagsLogLevel(i TcpFlagsLogLevel) *TcpFlagsLogLevel

Source Files

View all Source files

Directories

Path Synopsis

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.