Casey Callendrello 04669a0474 Merge pull request #126 from coreosbot-releng/repo-templates | 1 月之前 | |
---|---|---|
.github | 1 月之前 | |
iptables | 4 月之前 | |
.gitignore | 5 年之前 | |
DCO | 7 年之前 | |
LICENSE | 9 年之前 | |
NOTICE | 7 年之前 | |
README.md | 2 年之前 | |
build | 1 年之前 | |
code-of-conduct.md | 7 年之前 | |
go.mod | 3 年之前 | |
test | 1 年之前 |
Go bindings for iptables utility.
In-kernel netfilter does not have a good userspace API. The tables are manipulated via setsockopt that sets/replaces the entire table. Changes to existing table need to be resolved by userspace code which is difficult and error-prone. Netfilter developers heavily advocate using iptables utlity for programmatic manipulation.
go-iptables wraps invocation of iptables utility with functions to append and delete rules; create, clear and delete chains.