xfrmnetlink 0.3.0

Manipulate Linux IPsec tunnels via netlink
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44

// SPDX-License-Identifier: MIT

use futures::Stream;

use crate::{Error, PolicyHandle, StateHandle};
use netlink_packet_core::NetlinkMessage;
use netlink_packet_xfrm::XfrmMessage;
use netlink_proto::{sys::SocketAddr, ConnectionHandle};

#[derive(Clone, Debug)]
#[non_exhaustive]
pub struct Handle(ConnectionHandle<XfrmMessage>);

impl Handle {
    pub(crate) fn new(conn: ConnectionHandle<XfrmMessage>) -> Self {
        Handle(conn)
    }

    pub fn request(
        &mut self,
        message: NetlinkMessage<XfrmMessage>,
    ) -> Result<impl Stream<Item = NetlinkMessage<XfrmMessage>>, Error> {
        self.0
            .request(message, SocketAddr::new(0, 0))
            .map_err(|_| Error::RequestFailed)
    }

    pub fn notify(&mut self, msg: NetlinkMessage<XfrmMessage>) -> Result<(), Error> {
        self.0
            .notify(msg, SocketAddr::new(0, 0))
            .map_err(|_| Error::RequestFailed)?;
        Ok(())
    }

    /// Create a new handle, specifically for policy requests (equivalent to `ip xfrm policy` commands)
    pub fn policy(&self) -> PolicyHandle {
        PolicyHandle::new(self.clone())
    }

    /// Create a new handle, specifically for state requests (equivalent to `ip xfrm state` commands)
    pub fn state(&self) -> StateHandle {
        StateHandle::new(self.clone())
    }
}