c1ce1e00ee
This had to be able to build on OS X before to make verify-typecheck pass, but now that that's fixed we can tag the code properly as being linux-only.
58 lines
1.4 KiB
Go
58 lines
1.4 KiB
Go
//go:build linux
|
|
// +build linux
|
|
|
|
/*
|
|
Copyright 2014 The Kubernetes Authors.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
package iptables
|
|
|
|
import (
|
|
"bytes"
|
|
"fmt"
|
|
|
|
"k8s.io/apimachinery/pkg/util/sets"
|
|
)
|
|
|
|
// MakeChainLine return an iptables-save/restore formatted chain line given a Chain
|
|
func MakeChainLine(chain Chain) string {
|
|
return fmt.Sprintf(":%s - [0:0]", chain)
|
|
}
|
|
|
|
// GetChainsFromTable parses iptables-save data to find the chains that are defined. It
|
|
// assumes that save contains a single table's data, and returns a set with keys for every
|
|
// chain defined in that table.
|
|
func GetChainsFromTable(save []byte) sets.Set[Chain] {
|
|
chainsSet := sets.New[Chain]()
|
|
|
|
for {
|
|
i := bytes.Index(save, []byte("\n:"))
|
|
if i == -1 {
|
|
break
|
|
}
|
|
start := i + 2
|
|
save = save[start:]
|
|
end := bytes.Index(save, []byte(" "))
|
|
if end == -1 {
|
|
// shouldn't happen, but...
|
|
break
|
|
}
|
|
chain := Chain(save[:end])
|
|
chainsSet.Insert(chain)
|
|
save = save[end:]
|
|
}
|
|
return chainsSet
|
|
}
|