Struct State

pub struct State<I: IpExt, A, BT: FilterBindingsTypes> {
    pub installed_routines: ValidRoutines<I, BT::DeviceClass>,
    pub conntrack: Table<I, NatConfig<I, A>, BT>,
    pub nat_installed: OneWayBoolean,
    /* private fields */
}

IP version-specific filtering state.

Fields

installed_routines: ValidRoutines<I, BT::DeviceClass>

Routines used for filtering packets that are installed on hooks.

conntrack: Table<I, NatConfig<I, A>, BT>

Connection tracking state.

nat_installed: OneWayBoolean

One-way boolean toggle indicating whether any rules have ever been added to an installed NAT routine. If not, performing NAT can safely be skipped.

This is useful because if any NAT is being performed, we have to check whether it’s necessary to perform implicit NAT for all traffic – even if it doesn’t match any NAT rules – to avoid conflicting tracked connections. If we know that no NAT is being performed at all, this extra work can be avoided.

Note that this value will only ever go from false to true; it does not indicate whether any NAT rules are currently installed. This avoids a race condition where NAT rules are removed but connections are still being NATed based on those rules, and therefore must be considered when creating new connection tracking entries.

Implementations

impl<I: IpExt, A, BC: FilterBindingsContext> State<I, A, BC>

pub fn new<CC: CoreTimerContext<FilterTimerId<I>, BC>>( bindings_ctx: &mut BC, ) -> Self

Create a new State.

Trait Implementations

impl<I: IpExt, A: InspectableValue, BT: FilterBindingsTypes> Inspectable for State<I, A, BT>

fn record<Inspector: Inspector>(&self, inspector: &mut Inspector)

Records this value into inspector.