Casey Callendrello
8d5539c5ca
Merge pull request #62 from mccv1r0/nf-tables
|
5 éve | |
|---|---|---|
| iptables | 5 éve | |
| .gitignore | 6 éve | |
| .travis.yml | 7 éve | |
| DCO | 7 éve | |
| LICENSE | 10 éve | |
| NOTICE | 7 éve | |
| README.md | 7 éve | |
| build | 9 éve | |
| code-of-conduct.md | 7 éve | |
| test | 6 éve |
README.md
go-iptables
Go bindings for iptables utility.
In-kernel netfilter does not have a good userspace API. The tables are manipulated via setsockopt that sets/replaces the entire table. Changes to existing table need to be resolved by userspace code which is difficult and error-prone. Netfilter developers heavily advocate using iptables utlity for programmatic manipulation.
go-iptables wraps invocation of iptables utility with functions to append and delete rules; create, clear and delete chains.