Trait dfw::process::Process

pub trait Process<B: FirewallBackend> where
    DFW<B>: Process<B>, {
    fn process(
        &self, 
        ctx: &ProcessContext<'_, B>
    ) -> Result<Option<Vec<B::Rule>>>;
}

This trait allows a type to define its own processing rules. It is expected to return a list of rules that can be applied with nft.

Example

struct MyBackend;
impl FirewallBackend for MyBackend {
    type Rule = String;

    fn apply(rules: Vec<String>, ctx: &ProcessContext<Self>) -> Result<(), Error> {
        // Write code to apply the processed rules.
    }
}
struct MyType {
    rules: Vec<String>,
}

impl Process<MyBackend> for MyType {
    fn process(&self, ctx: &ProcessContext<MyBackend>) -> Result<Option<Vec<String>>, Error> {
        let mut rules = Vec::new();
        for rule in &self.rules {
            rules.push(format!("add rule {}", rule));
        }
        Ok(Some(rules))
    }
}

Required methods

fn process(&self, ctx: &ProcessContext<'_, B>) -> Result<Option<Vec<B::Rule>>>

Process the current type within the given ProcessContext, returning zero or more rules to apply with nft.

Loading content...

Implementations on Foreign Types

impl<B, T> Process<B> for Option<T> where
    B: FirewallBackend,
    DFW<B>: Process<B>,
    T: Process<B>, 

fn process(&self, ctx: &ProcessContext<'_, B>) -> Result<Option<Vec<B::Rule>>>

impl<B, T> Process<B> for Vec<T> where
    B: FirewallBackend,
    DFW<B>: Process<B>,
    T: Process<B>, 

fn process(&self, ctx: &ProcessContext<'_, B>) -> Result<Option<Vec<B::Rule>>>

Loading content...

Implementors

impl Process<Iptables> for <Iptables as FirewallBackend>::Defaults

fn process(
    &self,
    ctx: &ProcessContext<'_, Iptables>
) -> Result<Option<Vec<IptablesRule>>>

impl Process<Iptables> for ContainerDNAT

fn process(
    &self,
    ctx: &ProcessContext<'_, Iptables>
) -> Result<Option<Vec<IptablesRule>>>

impl Process<Iptables> for ContainerDNATRule

fn process(
    &self,
    ctx: &ProcessContext<'_, Iptables>
) -> Result<Option<Vec<IptablesRule>>>

impl Process<Iptables> for ContainerToContainer

fn process(
    &self,
    ctx: &ProcessContext<'_, Iptables>
) -> Result<Option<Vec<IptablesRule>>>

impl Process<Iptables> for ContainerToContainerRule

fn process(
    &self,
    ctx: &ProcessContext<'_, Iptables>
) -> Result<Option<Vec<IptablesRule>>>

impl Process<Iptables> for ContainerToHost

fn process(
    &self,
    ctx: &ProcessContext<'_, Iptables>
) -> Result<Option<Vec<IptablesRule>>>

impl Process<Iptables> for ContainerToHostRule

fn process(
    &self,
    ctx: &ProcessContext<'_, Iptables>
) -> Result<Option<Vec<IptablesRule>>>

impl Process<Iptables> for ContainerToWiderWorld

fn process(
    &self,
    ctx: &ProcessContext<'_, Iptables>
) -> Result<Option<Vec<IptablesRule>>>

impl Process<Iptables> for ContainerToWiderWorldRule

fn process(
    &self,
    ctx: &ProcessContext<'_, Iptables>
) -> Result<Option<Vec<IptablesRule>>>

impl Process<Iptables> for DFW<Iptables>

fn process(
    &self,
    ctx: &ProcessContext<'_, Iptables>
) -> Result<Option<Vec<IptablesRule>>>

impl Process<Iptables> for GlobalDefaults

fn process(
    &self,
    ctx: &ProcessContext<'_, Iptables>
) -> Result<Option<Vec<IptablesRule>>>

impl Process<Iptables> for WiderWorldToContainer

fn process(
    &self,
    ctx: &ProcessContext<'_, Iptables>
) -> Result<Option<Vec<IptablesRule>>>

impl Process<Iptables> for WiderWorldToContainerRule

fn process(
    &self,
    ctx: &ProcessContext<'_, Iptables>
) -> Result<Option<Vec<IptablesRule>>>

impl Process<Nftables> for <Nftables as FirewallBackend>::Defaults

fn process(
    &self,
    ctx: &ProcessContext<'_, Nftables>
) -> Result<Option<Vec<String>>>

impl Process<Nftables> for ContainerDNAT

fn process(
    &self,
    ctx: &ProcessContext<'_, Nftables>
) -> Result<Option<Vec<String>>>

impl Process<Nftables> for ContainerDNATRule

fn process(
    &self,
    ctx: &ProcessContext<'_, Nftables>
) -> Result<Option<Vec<String>>>

impl Process<Nftables> for ContainerToContainer

fn process(
    &self,
    ctx: &ProcessContext<'_, Nftables>
) -> Result<Option<Vec<String>>>

impl Process<Nftables> for ContainerToContainerRule

fn process(
    &self,
    ctx: &ProcessContext<'_, Nftables>
) -> Result<Option<Vec<String>>>

impl Process<Nftables> for ContainerToHost

fn process(
    &self,
    ctx: &ProcessContext<'_, Nftables>
) -> Result<Option<Vec<String>>>

impl Process<Nftables> for ContainerToHostRule

fn process(
    &self,
    ctx: &ProcessContext<'_, Nftables>
) -> Result<Option<Vec<String>>>

impl Process<Nftables> for ContainerToWiderWorld

fn process(
    &self,
    ctx: &ProcessContext<'_, Nftables>
) -> Result<Option<Vec<String>>>

impl Process<Nftables> for ContainerToWiderWorldRule

fn process(
    &self,
    ctx: &ProcessContext<'_, Nftables>
) -> Result<Option<Vec<String>>>

impl Process<Nftables> for DFW<Nftables>

fn process(
    &self,
    ctx: &ProcessContext<'_, Nftables>
) -> Result<Option<Vec<String>>>

impl Process<Nftables> for GlobalDefaults

fn process(
    &self,
    ctx: &ProcessContext<'_, Nftables>
) -> Result<Option<Vec<String>>>

impl Process<Nftables> for WiderWorldToContainer

fn process(
    &self,
    ctx: &ProcessContext<'_, Nftables>
) -> Result<Option<Vec<String>>>

impl Process<Nftables> for WiderWorldToContainerRule

fn process(
    &self,
    ctx: &ProcessContext<'_, Nftables>
) -> Result<Option<Vec<String>>>

Loading content...