xfrmnetlink 0.3.0

Manipulate Linux IPsec tunnels via netlink
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58

// SPDX-License-Identifier: MIT

use std::net::IpAddr;

use super::{
    StateAllocSpiRequest, StateDeleteRequest, StateFlushRequest, StateGetDumpRequest,
    StateGetRequest, StateGetSadInfoRequest, StateModifyRequest,
};
use crate::Handle;

#[non_exhaustive]
pub struct StateHandle(Handle);

impl StateHandle {
    pub fn new(handle: Handle) -> Self {
        StateHandle(handle)
    }

    /// Add xfrm state (equivalent to `ip xfrm state add`)
    pub fn add(&self, src_addr: IpAddr, dst_addr: IpAddr) -> StateModifyRequest {
        StateModifyRequest::new(self.0.clone(), false, src_addr, dst_addr)
    }

    /// Ask kernel to reserve a SPI for xfrm state (equivalent to `ip xfrm state allocspi`)
    pub fn alloc_spi(&self, src_addr: IpAddr, dst_addr: IpAddr) -> StateAllocSpiRequest {
        StateAllocSpiRequest::new(self.0.clone(), src_addr, dst_addr)
    }

    /// Delete xfrm state (equivalent to `ip xfrm state delete`)
    pub fn delete(&self, src_addr: IpAddr, dst_addr: IpAddr) -> StateDeleteRequest {
        StateDeleteRequest::new(self.0.clone(), src_addr, dst_addr)
    }

    /// Flush xfrm state (equivalent to `ip xfrm state flush`)
    pub fn flush(&self) -> StateFlushRequest {
        StateFlushRequest::new(self.0.clone())
    }

    /// Get xfrm state (equivalent to `ip xfrm state get`)
    pub fn get(&self, src_addr: IpAddr, dst_addr: IpAddr) -> StateGetRequest {
        StateGetRequest::new(self.0.clone(), src_addr, dst_addr)
    }

    /// Get (dump) all xfrm states (equivalent to `ip xfrm state list`)
    pub fn get_dump(&self) -> StateGetDumpRequest {
        StateGetDumpRequest::new(self.0.clone())
    }

    /// Get xfrm sad statistics (equivalent to `ip xfrm state count`)
    pub fn get_sadinfo(&self) -> StateGetSadInfoRequest {
        StateGetSadInfoRequest::new(self.0.clone())
    }

    /// Update xfrm state (equivalent to `ip xfrm state update`)
    pub fn update(&self, src_addr: IpAddr, dst_addr: IpAddr) -> StateModifyRequest {
        StateModifyRequest::new(self.0.clone(), true, src_addr, dst_addr)
    }
}