mirror of
https://github.com/k3s-io/k3s.git
synced 2024-06-07 19:41:36 +00:00
|
…
|
||
|---|---|---|
| .. | ||
| iptables | ||
| .travis.yml | ||
| build | ||
| code-of-conduct.md | ||
| DCO | ||
| LICENSE | ||
| NOTICE | ||
| README.md | ||
| test | ||
go-iptables
Go bindings for iptables utility.
In-kernel netfilter does not have a good userspace API. The tables are manipulated via setsockopt that sets/replaces the entire table. Changes to existing table need to be resolved by userspace code which is difficult and error-prone. Netfilter developers heavily advocate using iptables utlity for programmatic manipulation.
go-iptables wraps invocation of iptables utility with functions to append and delete rules; create, clear and delete chains.