| 1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980 |
- // Copyright 2019 the Kilo authors
- //
- // Licensed under the Apache License, Version 2.0 (the "License");
- // you may not use this file except in compliance with the License.
- // You may obtain a copy of the License at
- //
- // http://www.apache.org/licenses/LICENSE-2.0
- //
- // Unless required by applicable law or agreed to in writing, software
- // distributed under the License is distributed on an "AS IS" BASIS,
- // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- // See the License for the specific language governing permissions and
- // limitations under the License.
- package encapsulation
- import (
- "fmt"
- "net"
- "github.com/squat/kilo/pkg/iproute"
- "github.com/squat/kilo/pkg/iptables"
- )
- type ipip struct {
- iface int
- strategy Strategy
- }
- // NewIPIP returns an encapsulator that uses IPIP.
- func NewIPIP(strategy Strategy) Encapsulator {
- return &ipip{strategy: strategy}
- }
- // CleanUp will remove any created IPIP devices.
- func (i *ipip) CleanUp() error {
- if err := iproute.DeleteAddresses(i.iface); err != nil {
- return nil
- }
- return iproute.RemoveInterface(i.iface)
- }
- // Gw returns the correct gateway IP associated with the given node.
- func (i *ipip) Gw(_, internal net.IP, _ *net.IPNet) net.IP {
- return internal
- }
- // Index returns the index of the IPIP interface.
- func (i *ipip) Index() int {
- return i.iface
- }
- // Init initializes the IPIP interface.
- func (i *ipip) Init(base int) error {
- iface, err := iproute.NewIPIP(base)
- if err != nil {
- return fmt.Errorf("failed to create tunnel interface: %v", err)
- }
- if err := iproute.Set(iface, true); err != nil {
- return fmt.Errorf("failed to set tunnel interface up: %v", err)
- }
- i.iface = iface
- return nil
- }
- // Rules returns a set of iptables rules that are necessary
- // when traffic between nodes must be encapsulated.
- func (i *ipip) Rules(nodes []*net.IPNet) []iptables.Rule {
- return iptables.IPIPRules(nodes)
- }
- // Set sets the IP address of the IPIP interface.
- func (i *ipip) Set(cidr *net.IPNet) error {
- return iproute.SetAddress(i.iface, cidr)
- }
- // Strategy returns the configured strategy for encapsulation.
- func (i *ipip) Strategy() Strategy {
- return i.strategy
- }
|