mirror of
https://github.com/mirage/qubes-mirage-firewall.git
synced 2024-07-01 08:31:18 +00:00
35 lines
1.1 KiB
OCaml
35 lines
1.1 KiB
OCaml
(* Copyright (C) 2015, Thomas Leonard <thomas.leonard@unikernel.com>
|
|
See the README file for details. *)
|
|
|
|
(** Routing packets to the right network interface. *)
|
|
|
|
open Utils
|
|
|
|
type t = private {
|
|
client_eth : Client_eth.t;
|
|
nat : Nat_lookup.t;
|
|
default_gateway : interface;
|
|
my_uplink_ip : Ipaddr.t;
|
|
}
|
|
(** A routing table. *)
|
|
|
|
val create :
|
|
client_eth:Client_eth.t ->
|
|
default_gateway:interface ->
|
|
my_uplink_ip:Ipaddr.t ->
|
|
t
|
|
(** [create ~client_eth ~default_gateway ~my_uplink_ip] is a new routing table
|
|
that routes packets outside of [client_eth] to [default_gateway], changing their
|
|
source address to [my_uplink_ip] for NAT. *)
|
|
|
|
val target : t -> Cstruct.t -> interface option
|
|
(** [target t packet] is the interface to which [packet] (an IP packet) should be routed. *)
|
|
|
|
val add_client : t -> client_link -> unit
|
|
(** [add_client t iface] adds a rule for routing packets addressed to [iface].
|
|
The client's IP address must be within the [client_eth] passed to [create]. *)
|
|
|
|
val remove_client : t -> client_link -> unit
|
|
|
|
val classify : t -> Ipaddr.t -> Packet.host
|