Module com.aoindustries.aoserv.daemon

Package com.aoindustries.aoserv.daemon.iptables

Class Ipset

java.lang.Object

com.aoindustries.aoserv.daemon.iptables.Ipset

public final class Ipset
extends Object

Handles access to ipset.

Author:

AO Industries, Inc.

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static enum	Ipset.NamespacePrefix	ipset has a global namespace.
static enum	Ipset.SetType

Field Summary

Fields

Modifier and Type	Field	Description
static final short	HOST_NETWORK_PREFIX
static final int	MAX_IPSET_SIZE

Method Summary

Modifier and Type	Method	Description
static void	add(String setName, int entry)	Calls ipset -A.
static void	create(String setName, Ipset.SetType setType, String... options)	Calls ipset -N.
static void	delete(String setName, int entry)	Calls ipset -D.
static void	parse(String save, Set<Integer> entries)	Parses an ipset save file, returning the mutable set of IP addresses in order dumped.
static String	save(String setName, boolean missingAsNull)	Calls ipset -S, skipping any comment lines.
static void	synchronize(Set<Integer> entries, short networkPrefix, String setName, PosixFile setDir)	Synchronizes a single set to the expected entries, both in-kernel and on-disk versions.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

MAX_IPSET_SIZE

public static final int MAX_IPSET_SIZE

See Also:

• Constant Field Values

HOST_NETWORK_PREFIX

public static final short HOST_NETWORK_PREFIX

See Also:

• Constant Field Values

Method Details

save

public static String save(String setName,
 boolean missingAsNull)
                   throws IOException

Calls ipset -S, skipping any comment lines.

Parameters:

setName - the name of the set

missingAsNull - when true, a missing set will be returned as null, otherwise will throw an exception

Throws:

IOException

create

public static void create(String setName,
 Ipset.SetType setType,
 String... options)
                   throws IOException

Calls ipset -N.

Throws:

IOException

delete

public static void delete(String setName,
 int entry)
                   throws IOException

Calls ipset -D.

Throws:

IOException

add

public static void add(String setName,
 int entry)
                throws IOException

Calls ipset -A.

Throws:

IOException

parse

public static void parse(String save,
 Set<Integer> entries)
                  throws IOException

Parses an ipset save file, returning the mutable set of IP addresses in order dumped.

Throws:

IOException

synchronize

public static void synchronize(Set<Integer> entries,
 short networkPrefix,
 String setName,
 PosixFile setDir)
                        throws IOException

Synchronizes a single set to the expected entries, both in-kernel and on-disk versions. Creates set in kernel if missing. Adds/removes any necessary changes. Updates on-disk only if missing or set modified.

Parameters:

entries - the ip or network entries, only the first MAX_IPSET_SIZE entries will be used

networkPrefix - the network prefix or HOST_NETWORK_PREFIX for individual hosts

setName - the set name used both in-kernel and on-disk

setDir - the directory that stores the on-disk version

Throws:

IOException