Struct NetworkPolicyChecker 

pub struct NetworkPolicyChecker { /* private fields */ }

Checks incoming requests against network access policies.

When a request arrives, the checker:

1. Finds all networks whose CIDRs contain the source IP.
2. If no networks match, access is allowed (default open).
3. If any matching network has a deny rule for the target, access is denied.
4. If any matching network has an allow rule for the target, access is allowed.
5. If the source belongs to a network but no rules match, access is denied (having a network policy implies explicit access control).

Implementations

impl NetworkPolicyChecker

pub fn new(policies: Arc<RwLock<Vec<NetworkPolicySpec>>>) -> Self

Create a new checker backed by the given shared policy list.

pub async fn check_access( &self, source_ip: IpAddr, service: &str, deployment: &str, port: u16, ) -> bool

Check if source_ip is allowed to access a target service on the given port.

Returns true if access is allowed, false if denied.

The deployment parameter exists for forward compatibility with per-deployment rules; pass "*" when the deployment is unknown.

Trait Implementations

impl Clone for NetworkPolicyChecker

fn clone(&self) -> NetworkPolicyChecker

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.