Struct NetAllow 

pub struct NetAllow {
    pub protocol: Protocol,
    pub host: Option<String>,
    pub ports: Vec<u16>,
    pub all_ports: bool,
}

A network endpoint allow rule.

Each rule permits one protocol’s traffic to one host (or any IP, for the :port form) on a specific set of ports. Multiple rules are OR’d: traffic is permitted if any rule matches the protocol, the destination IP, and the destination port.

ICMP rules carry no port (ICMP has none); their ports is empty and all_ports is false.

Fields

protocol: Protocol

L4 protocol this rule applies to.

host: Option<String>

Hostname; None means “any IP” (the :port form, or icmp://*).

ports: Vec<u16>

Permitted ports. Must be non-empty unless all_ports is true, in which case it must be empty. Always empty for Protocol::Icmp.

all_ports: bool

“Any port” wildcard from the * token in port position. When true, ports is empty; the rule permits every TCP/UDP port to the host (or to any IP, when host is None).

Implementations

impl NetAllow

pub fn parse(s: &str) -> Result<Self, SandboxError>

Parse a rule spec. Forms:

• host:port[,port,...], :port, *:port, host:*, :*, *:* — TCP (the default scheme).
• tcp://... — explicit TCP, same suffix grammar as the bare form.
• udp://... — UDP, same suffix grammar as the bare form.
• icmp://host or icmp://* — ICMP echo (kernel ping socket). No port field; icmp://host:80 is rejected.

* in port position means “any port” (the all-ports wildcard). Mixing * with concrete ports (e.g. host:80,*) is rejected.

Trait Implementations

impl Clone for NetAllow

fn clone(&self) -> NetAllow

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for NetAllow

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for NetAllow

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for NetAllow

fn eq(&self, other: &NetAllow) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for NetAllow

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for NetAllow