Struct FirewallRule 

pub struct FirewallRule {
    pub role: Role,
    pub protocol: Protocol,
    pub port: u16,
    pub destination: Option<String>,
    pub sources: Vec<String>,
    pub reason: String,
}

One inbound admission the mesh needs on this host: a protocol and a port, the group it is addressed to when it is multicast, the networks it may come from, and the sentence that says why. A rule is derived, never written by hand; FirewallRule::label is how a verdict names it.

use majordomus_cli::mesh::firewall::{FirewallRule, Protocol, Role};

let rule = FirewallRule {
    role: Role::Hub,
    protocol: Protocol::Tcp,
    port: 8791,
    destination: None,
    sources: vec!["192.168.7.0/24".into()],
    reason: "this machine is a declared rendezvous hub".into(),
};
assert_eq!(rule.label(), "tcp/8791 from 192.168.7.0/24");

Fields

role: Role

Why.

protocol: Protocol

The transport protocol.

port: u16

The destination port.

destination: Option<String>

The destination address when it is a multicast group; None for this host’s own.

sources: Vec<String>

The networks the traffic may come from, as CIDR; empty admits any source, which is only ever the case for the multicast group, whose TTL keeps it on the segment.

reason: String

The sentence a person reads beside the rule.

Implementations

impl FirewallRule

pub fn label(&self) -> String

tcp/8791 from 192.168.7.0/24, 100.64.0.0/10 — one line for a verdict: the protocol and port, the group when there is one, and the sources or any.

use majordomus_cli::mesh::firewall::{FirewallRule, Protocol, Role};

let group = FirewallRule {
    role: Role::Multicast,
    protocol: Protocol::Udp,
    port: 7741,
    destination: Some("239.255.77.77".into()),
    sources: vec![],
    reason: String::new(),
};
assert_eq!(group.label(), "udp/7741 to 239.255.77.77 from any");

Trait Implementations

impl Clone for FirewallRule

fn clone(&self) -> FirewallRule

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for FirewallRule

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for FirewallRule

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for FirewallRule

impl JsonSchema for FirewallRule

fn schema_name() -> Cow<'static, str>

The name of the generated JSON Schema.

fn schema_id() -> Cow<'static, str>

Returns a string that uniquely identifies the schema produced by this type.

fn json_schema(generator: &mut SchemaGenerator) -> Schema

Generates a JSON Schema for this type.

fn inline_schema() -> bool

Whether JSON Schemas generated for this type should be included directly in parent schemas, rather than being re-used where possible using the $ref keyword.

impl PartialEq for FirewallRule

fn eq(&self, other: &FirewallRule) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for FirewallRule

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for FirewallRule