Struct KillSwitch 

pub struct KillSwitch { /* private fields */ }

Egress kill-switch: everything is dropped except loopback, the tunnel interface, and the tunnel’s own UDP to the C2 endpoint on the underlay. Rules match interface names, so deleting the tunnel interface (VPN down) leaves traffic dropped instead of rerouted.

Implementations

impl KillSwitch

pub const TABLE: &'static str = "hatchery_killswitch"

pub fn new(interface: &str, endpoint: &str) -> Result<Self, KillSwitchError>

pub fn interface(&self) -> &str

pub fn endpoint(&self) -> SocketAddr

pub fn nft_ruleset(&self) -> String

nftables ruleset (nft -f -). The final counter drop rules make leaks measurable.

pub fn iptables_restore(&self) -> Option<String>

The same policy for hosts that only have iptables (iptables-restore, IPv4 endpoint only).

Trait Implementations

impl Clone for KillSwitch

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for KillSwitch

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for KillSwitch

impl PartialEq for KillSwitch

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for KillSwitch