Struct dfw::types::ContainerToWiderWorldRule

pub struct ContainerToWiderWorldRule {
    pub network: Option<String>,
    pub src_container: Option<String>,
    pub matches: Option<String>,
    pub verdict: RuleVerdict,
    pub external_network_interface: Option<String>,
}

Definition for a rule to be used in the container-to-wider-world section.

Fields

network: Option<String>

Network of the source container to apply the rule to.

src_container: Option<String>

Source container to apply the rule to.

matches: Option<String>

Additional match-string, which will be added to the nftables command.

verdict: RuleVerdict

Verdict for rule (accept, drop or reject).

external_network_interface: Option<String>

Specific external network interface to target.

Trait Implementations

impl Clone for ContainerToWiderWorldRule

fn clone(&self) -> ContainerToWiderWorldRule

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ContainerToWiderWorldRule

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ContainerToWiderWorldRule

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error> where
    __D: Deserializer<'de>, 

Deserialize this value from the given Serde deserializer.

impl Eq for ContainerToWiderWorldRule

impl Hash for ContainerToWiderWorldRule

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H) where
    H: Hasher, 

Feeds a slice of this type into the given Hasher.

impl PartialEq<ContainerToWiderWorldRule> for ContainerToWiderWorldRule

fn eq(&self, other: &ContainerToWiderWorldRule) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &ContainerToWiderWorldRule) -> bool

This method tests for !=.

impl Process<Iptables> for ContainerToWiderWorldRule

fn process(
    &self,
    ctx: &ProcessContext<'_, Iptables>
) -> Result<Option<Vec<IptablesRule>>>

Process the current type within the given ProcessContext, returning zero or more rules to apply with nft.

impl Process<Nftables> for ContainerToWiderWorldRule

fn process(
    &self,
    ctx: &ProcessContext<'_, Nftables>
) -> Result<Option<Vec<String>>>

Process the current type within the given ProcessContext, returning zero or more rules to apply with nft.

impl StructuralEq for ContainerToWiderWorldRule

impl StructuralPartialEq for ContainerToWiderWorldRule