Struct NetworkPolicy 

pub struct NetworkPolicy {
    pub isolation: IsolationMode,
    pub ingress: Vec<PolicyRule>,
    pub egress: Vec<PolicyRule>,
}

Network isolation policy.

Controls which boxes can communicate with each other on a network.

Fields

isolation: IsolationMode

Isolation mode (default: None — all boxes can communicate).

ingress: Vec<PolicyRule>

Ingress rules (who can receive traffic from whom). Only used when isolation is Custom.

egress: Vec<PolicyRule>

Egress rules (who can send traffic to whom). Only used when isolation is Custom.

Implementations

impl NetworkPolicy

pub fn validate(&self) -> Result<(), String>

Validate that the policy can be enforced at runtime.

Currently only IsolationMode::None is supported. Strict and Custom modes require iptables/nftables integration which is not yet implemented. Rejecting early prevents a false sense of security.

pub fn is_peer_allowed(&self, box_name: &str, peer_name: &str) -> bool

Check if a box is allowed to communicate with a peer.

pub fn allowed_peers<'a>( &self, box_name: &str, peers: &'a [(String, String)], ) -> Vec<&'a (String, String)>

Get the list of allowed peers for a box, given all peer names.

Trait Implementations

impl Clone for NetworkPolicy

fn clone(&self) -> NetworkPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for NetworkPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for NetworkPolicy

fn default() -> NetworkPolicy

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for NetworkPolicy

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for NetworkPolicy

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.