Enum NetworkPolicy 

pub enum NetworkPolicy {
    Preset {
        preset: NetworkPreset,
    },
    AllowList {
        rules: Vec<HostPort>,
    },
}

Network policy for a microVM, controlling outbound traffic.

Variants

Preset

Use a built-in preset.

Fields

preset: NetworkPreset

AllowList

Explicit allowlist of host:port pairs.

Fields

rules: Vec<HostPort>

Implementations

impl NetworkPolicy

pub fn unrestricted() -> Self

pub fn deny_all() -> Self

pub fn preset(preset: NetworkPreset) -> Self

pub fn allow_list(rules: Vec<HostPort>) -> Self

pub fn is_unrestricted(&self) -> bool

Whether this policy allows all traffic (no filtering).

pub fn resolve_rules(&self) -> Option<Vec<HostPort>>

Resolve to the concrete list of allowed host:port pairs. Returns None if the policy is unrestricted (no filtering needed).

pub fn iptables_script( &self, bridge_dev: &str, guest_ip: &str, ) -> Option<String>

Generate the iptables shell script fragment for this policy. Returns None if unrestricted (no rules needed).

The script assumes it runs inside the Lima VM with sudo and that the bridge device and FORWARD chain are already set up.

pub fn iptables_cleanup_script( &self, bridge_dev: &str, guest_ip: &str, ) -> Option<String>

Generate the iptables cleanup script for this policy. Returns None if unrestricted (nothing to clean up).

Trait Implementations

impl Clone for NetworkPolicy

fn clone(&self) -> NetworkPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for NetworkPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for NetworkPolicy

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for NetworkPolicy

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for NetworkPolicy

fn eq(&self, other: &NetworkPolicy) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for NetworkPolicy

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for NetworkPolicy

impl StructuralPartialEq for NetworkPolicy