Struct NetStack 

pub struct NetStack { /* private fields */ }

A frozen network-stack configuration, ready to attach to sandboxes.

Built by NetStackBuilder; the default configuration is valid and matches the builder’s defaults. One NetStack may be attached to any number of sandboxes — attach borrows it and every attachment is independent.

use ferroday_cage::NetStack;

let stack = NetStack::default();
let pending = cage.spawn_pending()?;
let handle = stack.attach(&pending)?;
let mut running = pending.proceed()?;
let status = running.wait()?;
handle.stop()?;

Implementations

impl NetStack

pub fn builder() -> NetStackBuilder

Returns a builder holding the default configuration.

pub fn attach( &self, pending: &Pending<'_>, ) -> Result<NetStackHandle, NetStackError>

Attaches the stack to a pending sandbox launch.

A forked helper process joins the sandbox’s user and network namespaces through /proc/<pid>/ns, creates the tap device, assigns the guest addresses and default routes, brings the interface up, and exits. The tap’s descriptor comes back to a pump thread in the caller’s process, owned by the returned handle. On return the sandbox’s interface is fully configured, so the caller proceeds immediately:

let pending = cage.spawn_pending()?;
let handle = stack.attach(&pending)?;
let mut running = pending.proceed()?;
let status = running.wait()?;
handle.stop()?;

The sandbox must have a private network namespace — Network::Isolated (the default) or Network::None. A sandbox sharing the host’s namespace (Network::Host) is refused with NetStackError::SharedNamespace.

When the configuration enables IPv6, the guest address is usable immediately where the stack could disable duplicate address detection (it tries, through the sandbox’s net.ipv6.conf sysctls); where it could not, the kernel holds the address tentative for about a second after launch, and the guest’s first IPv6 connection may stall that long. IPv4 is never delayed.

Trait Implementations

impl Clone for NetStack

fn clone(&self) -> NetStack

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for NetStack

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for NetStack

fn default() -> Self

Returns the “default value” for a type.