![]() |
%!s(int64=8) %!d(string=hai) anos | |
---|---|---|
.. | ||
iptables | %!s(int64=8) %!d(string=hai) anos | |
.travis.yml | %!s(int64=8) %!d(string=hai) anos | |
LICENSE | %!s(int64=8) %!d(string=hai) anos | |
README.md | %!s(int64=8) %!d(string=hai) anos | |
build | %!s(int64=8) %!d(string=hai) anos | |
test | %!s(int64=8) %!d(string=hai) anos |
Go bindings for iptables utility.
In-kernel netfilter does not have a good userspace API. The tables are manipulated via setsockopt that sets/replaces the entire table. Changes to existing table need to be resolved by userspace code which is difficult and error-prone. Netfilter developers heavily advocate using iptables utlity for programmatic manipulation.
go-iptables wraps invokation of iptables utility with functions to append and delete rules; create, clear and delete chains.