Struct NetworkState 

pub struct NetworkState {
    pub network_policy: NetworkPolicy,
    pub port_map: PortMap,
    pub pid_ip_overrides: Arc<RwLock<HashMap<u32, HashSet<IpAddr>>>>,
    pub http_acl_addr: Option<SocketAddr>,
    pub http_acl_ports: HashSet<u16>,
    pub http_acl_orig_dest: Option<Arc<RwLock<HashMap<SocketAddr, IpAddr>>>>,
}

Network policy and port-remapping state.

Fields

network_policy: NetworkPolicy

Global network policy: unrestricted or limited to a set of IPs.

port_map: PortMap

Port binding and remapping tracker.

pid_ip_overrides: Arc<RwLock<HashMap<u32, HashSet<IpAddr>>>>

Per-PID network overrides from policy_fn.

http_acl_addr: Option<SocketAddr>

HTTP ACL proxy address (None if HTTP ACL not active).

http_acl_ports: HashSet<u16>

TCP ports to intercept and redirect to the HTTP ACL proxy.

http_acl_orig_dest: Option<Arc<RwLock<HashMap<SocketAddr, IpAddr>>>>

Shared map for recording original destination IPs on proxy redirect.

Implementations

impl NetworkState

pub fn new() -> Self

pub fn effective_network_policy( &self, pid: u32, live_policy: Option<&Arc<RwLock<LivePolicy>>>, ) -> NetworkPolicy

Get the effective network policy for a PID.

Priority: per-PID override > live policy (from PolicyFnState) > global network_policy. The live_policy parameter allows checking the live policy without needing to lock the PolicyFnState mutex.