ripset 0.1.0

Pure Rust implementation of ipset/nftset operations via netlink
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159

//! Stub implementations for non-Linux platforms.
//!
//! All functions return `Err(IpSetError::UnsupportedPlatform)`.

use std::net::IpAddr;

use crate::{IpEntry, IpSetError, Result};

/// ipset type for hash:ip sets (stub for non-Linux)
#[derive(Clone, Copy, Debug, Default)]
pub enum IpSetType {
    /// hash:ip - stores IP addresses
    #[default]
    HashIp,
    /// hash:net - stores network addresses (CIDR)
    HashNet,
}

/// Address family for ipset (stub for non-Linux)
#[derive(Clone, Copy, Debug, Default)]
pub enum IpSetFamily {
    /// IPv4 addresses
    #[default]
    Inet,
    /// IPv6 addresses
    Inet6,
}

/// Options for creating an ipset (stub for non-Linux)
#[derive(Clone, Debug, Default)]
pub struct IpSetCreateOptions {
    pub set_type: IpSetType,
    pub family: IpSetFamily,
    pub hashsize: Option<u32>,
    pub maxelem: Option<u32>,
    pub timeout: Option<u32>,
}

/// Address type for nftables sets (stub for non-Linux)
#[derive(Clone, Copy, Debug, Default)]
pub enum NftSetType {
    /// IPv4 addresses
    #[default]
    Ipv4Addr,
    /// IPv6 addresses
    Ipv6Addr,
}

/// Options for creating an nftables set (stub for non-Linux)
#[derive(Clone, Debug, Default)]
pub struct NftSetCreateOptions {
    pub set_type: NftSetType,
    pub timeout: Option<u32>,
    pub flags: Option<u32>,
}

// ipset stub functions

/// Create an ipset (stub - returns UnsupportedPlatform error)
pub fn ipset_create(_setname: &str, _options: &IpSetCreateOptions) -> Result<()> {
    Err(IpSetError::UnsupportedPlatform)
}

/// Destroy an ipset (stub - returns UnsupportedPlatform error)
pub fn ipset_destroy(_setname: &str) -> Result<()> {
    Err(IpSetError::UnsupportedPlatform)
}

/// Flush an ipset (stub - returns UnsupportedPlatform error)
pub fn ipset_flush(_setname: &str) -> Result<()> {
    Err(IpSetError::UnsupportedPlatform)
}

/// Add an IP to an ipset (stub - returns UnsupportedPlatform error)
pub fn ipset_add<E: Into<IpEntry>>(_setname: &str, _entry: E) -> Result<()> {
    Err(IpSetError::UnsupportedPlatform)
}

/// Delete an IP from an ipset (stub - returns UnsupportedPlatform error)
pub fn ipset_del<E: Into<IpEntry>>(_setname: &str, _entry: E) -> Result<()> {
    Err(IpSetError::UnsupportedPlatform)
}

/// Test if an IP exists in an ipset (stub - returns UnsupportedPlatform error)
pub fn ipset_test<E: Into<IpEntry>>(_setname: &str, _entry: E) -> Result<bool> {
    Err(IpSetError::UnsupportedPlatform)
}

/// List all IPs in an ipset (stub - returns UnsupportedPlatform error)
pub fn ipset_list(_setname: &str) -> Result<Vec<IpAddr>> {
    Err(IpSetError::UnsupportedPlatform)
}

// nftset stub functions

/// Create an nftables table (stub - returns UnsupportedPlatform error)
pub fn nftset_create_table(_family: &str, _table: &str) -> Result<()> {
    Err(IpSetError::UnsupportedPlatform)
}

/// Delete an nftables table (stub - returns UnsupportedPlatform error)
pub fn nftset_delete_table(_family: &str, _table: &str) -> Result<()> {
    Err(IpSetError::UnsupportedPlatform)
}

/// Create an nftables set (stub - returns UnsupportedPlatform error)
pub fn nftset_create_set(
    _family: &str,
    _table: &str,
    _setname: &str,
    _options: &NftSetCreateOptions,
) -> Result<()> {
    Err(IpSetError::UnsupportedPlatform)
}

/// Delete an nftables set (stub - returns UnsupportedPlatform error)
pub fn nftset_delete_set(_family: &str, _table: &str, _setname: &str) -> Result<()> {
    Err(IpSetError::UnsupportedPlatform)
}

/// Add an IP to an nftables set (stub - returns UnsupportedPlatform error)
pub fn nftset_add<E: Into<IpEntry>>(
    _family: &str,
    _table: &str,
    _setname: &str,
    _entry: E,
) -> Result<()> {
    Err(IpSetError::UnsupportedPlatform)
}

/// Delete an IP from an nftables set (stub - returns UnsupportedPlatform error)
pub fn nftset_del<E: Into<IpEntry>>(
    _family: &str,
    _table: &str,
    _setname: &str,
    _entry: E,
) -> Result<()> {
    Err(IpSetError::UnsupportedPlatform)
}

/// Test if an IP exists in an nftables set (stub - returns UnsupportedPlatform error)
pub fn nftset_test<E: Into<IpEntry>>(
    _family: &str,
    _table: &str,
    _setname: &str,
    _entry: E,
) -> Result<bool> {
    Err(IpSetError::UnsupportedPlatform)
}

/// List all IPs in an nftables set (stub - returns UnsupportedPlatform error)
pub fn nftset_list(_family: &str, _table: &str, _setname: &str) -> Result<Vec<IpAddr>> {
    Err(IpSetError::UnsupportedPlatform)
}

/// List all tables in an nftables family (stub - returns UnsupportedPlatform error)
pub fn nftset_list_tables(_family: &str) -> Result<Vec<String>> {
    Err(IpSetError::UnsupportedPlatform)
}