Casey Callendrello 04669a0474 Merge pull request #126 from coreosbot-releng/repo-templates | hace 1 mes | |
---|---|---|
.github | hace 1 mes | |
iptables | hace 4 meses | |
.gitignore | hace 5 años | |
DCO | hace 7 años | |
LICENSE | hace 9 años | |
NOTICE | hace 7 años | |
README.md | hace 2 años | |
build | hace 1 año | |
code-of-conduct.md | hace 7 años | |
go.mod | hace 3 años | |
test | hace 1 año |
Go bindings for iptables utility.
In-kernel netfilter does not have a good userspace API. The tables are manipulated via setsockopt that sets/replaces the entire table. Changes to existing table need to be resolved by userspace code which is difficult and error-prone. Netfilter developers heavily advocate using iptables utlity for programmatic manipulation.
go-iptables wraps invocation of iptables utility with functions to append and delete rules; create, clear and delete chains.