Struct dfw::types::WiderWorldToContainerRule

pub struct WiderWorldToContainerRule {
    pub network: String,
    pub dst_container: String,
    pub expose_port: Vec<ExposePort>,
    pub external_network_interface: Option<String>,
    pub expose_via_ipv6: bool,
    pub source_cidr_v4: Option<Vec<String>>,
    pub source_cidr_v6: Option<Vec<String>>,
}

Definition for a rule to be used in the wider-world-to-container section.

Fields

network: String

Network of the destination container to apply the rule to.

dst_container: String

Destination container to apply the rule to.

expose_port: Vec<ExposePort>

Ports to apply the rule to.

Defined as:

• a single integer

• a single string

• a single struct

• a list of integers

• a list of strings

• a list of structs

Example

All of the following are legal TOML fragments:

expose_port = 80
expose_port = [80, 443]
expose_port = "53/udp"
expose_port = ["80/tcp", "53/udp"]

# The following four all result in the same definition
expose_port = { host_port = 8080 }
expose_port = { host_port = 8080, container_port = 8080 }
expose_port = { host_port = 8080, family = "tcp" }
expose_port = { host_port = 8080, container_port = 8080, family = "tcp" }

expose_port = [
    { host_port = 80 },
    { host_port = 53, family = "udp" },
    { host_port = 443, container_port = 8443 },
]

external_network_interface: Option<String>

Specific external network interface to target.

expose_via_ipv6: bool

Configure if the container should be exposed via IPv6, too. (Default: true).

Example

expose_via_ipv6 = false

expose_via_ipv6 = false

source_cidr_v4: Option<Vec<String>>

Source CIDRs (IPv4) to which incoming traffic should be restricted.

This can be:

• a single string

• a list of strings

There is no validation whether the provided CIDRs are actually valid.

Example

All of the following are legal TOML fragments:

source_cidr_v4 = "127.0.0.0/8"

source_cidr_v4 = ["127.0.0.0/8", "192.0.2.1/32"]

source_cidr_v6: Option<Vec<String>>

Source CIDRs (IPv6) to which incoming traffic should be restricted.

This can be:

• a single string

• a list of strings

There is no validation whether the provided CIDRs are actually valid.

Example

All of the following are legal TOML fragments:

source_cidr_v6 = "fe80::/10"

source_cidr_v6 = ["fe80::/10", "2001:db8::/32"]

Trait Implementations

impl Clone for WiderWorldToContainerRule

fn clone(&self) -> WiderWorldToContainerRule

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for WiderWorldToContainerRule

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for WiderWorldToContainerRule

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error> where
    __D: Deserializer<'de>, 

Deserialize this value from the given Serde deserializer.

impl Eq for WiderWorldToContainerRule

impl Hash for WiderWorldToContainerRule

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H) where
    H: Hasher, 

Feeds a slice of this type into the given Hasher.

impl PartialEq<WiderWorldToContainerRule> for WiderWorldToContainerRule

fn eq(&self, other: &WiderWorldToContainerRule) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &WiderWorldToContainerRule) -> bool

This method tests for !=.

impl Process<Iptables> for WiderWorldToContainerRule

fn process(
    &self,
    ctx: &ProcessContext<'_, Iptables>
) -> Result<Option<Vec<IptablesRule>>>

Process the current type within the given ProcessContext, returning zero or more rules to apply with nft.

impl Process<Nftables> for WiderWorldToContainerRule

fn process(
    &self,
    ctx: &ProcessContext<'_, Nftables>
) -> Result<Option<Vec<String>>>

Process the current type within the given ProcessContext, returning zero or more rules to apply with nft.

impl StructuralEq for WiderWorldToContainerRule

impl StructuralPartialEq for WiderWorldToContainerRule