mirror of
https://github.com/mirage/qubes-mirage-firewall.git
synced 2024-12-28 08:39:34 -05:00
36 lines
996 B
OCaml
36 lines
996 B
OCaml
(* Copyright (C) 2015, Thomas Leonard <thomas.leonard@unikernel.com>
|
|
See the README file for details. *)
|
|
|
|
open Fw_utils
|
|
|
|
(* The routing table *)
|
|
|
|
type t = {
|
|
config : Dao.network_config;
|
|
clients : Client_eth.t;
|
|
nat : My_nat.t;
|
|
uplink : interface;
|
|
}
|
|
|
|
let create ~config ~clients ~uplink ~nat =
|
|
{ config; clients; nat; uplink }
|
|
|
|
let target t buf =
|
|
let dst_ip = buf.Ipv4_packet.dst in
|
|
match Client_eth.lookup t.clients dst_ip with
|
|
| Some client_link -> Some (client_link :> interface)
|
|
| None -> Some t.uplink
|
|
|
|
let add_client t = Client_eth.add_client t.clients
|
|
let remove_client t = Client_eth.remove_client t.clients
|
|
|
|
let classify t ip =
|
|
if ip = Ipaddr.V4 t.config.our_ip then `Firewall
|
|
else if ip = Ipaddr.V4 t.config.netvm_ip then `NetVM
|
|
else (Client_eth.classify t.clients ip :> Packet.host)
|
|
|
|
let resolve t = function
|
|
| `Firewall -> Ipaddr.V4 t.config.our_ip
|
|
| `NetVM -> Ipaddr.V4 t.config.netvm_ip
|
|
| #Client_eth.host as host -> Client_eth.resolve t.clients host
|