Struct IpAccessControl 

pub struct IpAccessControl { /* private fields */ }

IP-based access control.

This struct manages allowed and blocked IP ranges for connection filtering. Rules are evaluated in the following order:

1. Check if IP is in blocked list → Deny
2. If allowed list is non-empty, check if IP is in allowed list → Allow/Deny
3. Use default policy (Allow if no allowed list specified)

Implementations

impl IpAccessControl

pub fn new() -> Self

Create a new access control with default allow policy.

pub fn from_config( allowed_ips: &[String], blocked_ips: &[String], ) -> Result<Self>

Create access control from allowed and blocked IP lists.

Arguments

• allowed_ips - List of allowed IP ranges in CIDR notation
• blocked_ips - List of blocked IP ranges in CIDR notation

Returns

Returns an error if any CIDR string is invalid.

pub fn check(&self, ip: &IpAddr) -> AccessPolicy

Check if an IP address is allowed to connect.

Arguments

• ip - The IP address to check

Returns

Returns AccessPolicy::Allow if the IP is allowed, AccessPolicy::Deny otherwise.

pub fn allow_cidr(&mut self, cidr: &str) -> Result<()>

Add an allowed CIDR range.

Arguments

• cidr - CIDR notation string (e.g., “192.168.0.0/16”)

pub fn allow(&mut self, network: IpNetwork)

Add an allowed network.

pub fn block_cidr(&mut self, cidr: &str) -> Result<()>

Add a blocked CIDR range.

Arguments

• cidr - CIDR notation string (e.g., “10.10.10.10/32”)

pub fn block(&mut self, network: IpNetwork)

Add a blocked network.

pub fn block_ip(&mut self, ip: IpAddr)

Block a single IP address.

This creates a /32 (IPv4) or /128 (IPv6) rule.

pub fn unblock_ip(&mut self, ip: IpAddr)

Unblock a single IP address.

Removes the /32 (IPv4) or /128 (IPv6) rule for this IP.

pub fn remove_allowed(&mut self, network: &IpNetwork)

Remove an allowed network.

pub fn remove_blocked(&mut self, network: &IpNetwork)

Remove a blocked network.

pub fn reload( &mut self, allowed_ips: &[String], blocked_ips: &[String], ) -> Result<()>

Reload configuration from allowed and blocked IP lists.

pub fn allowed_count(&self) -> usize

Get the number of allowed networks.

pub fn blocked_count(&self) -> usize

Get the number of blocked networks.

pub fn default_policy(&self) -> AccessPolicy

Get the default policy.

pub fn is_whitelist_mode(&self) -> bool

Check if the access control is in whitelist mode.

Returns true if there are allowed networks configured, meaning only those networks are allowed.

pub fn allowed_networks(&self) -> Vec<IpNetwork>

Get a copy of the allowed networks.

pub fn blocked_networks(&self) -> Vec<IpNetwork>

Get a copy of the blocked networks.

Trait Implementations

impl Clone for IpAccessControl

fn clone(&self) -> IpAccessControl

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for IpAccessControl

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for IpAccessControl

fn default() -> Self

Returns the “default value” for a type.