gvisor/pkg/sentry/socket/netstack
Kevin Krakauer 8cc1c35bbd Write simple ACCEPT rules to the filter table.
This gets us closer to passing the iptables tests and opens up iptables
so it can be worked on by multiple people.

A few restrictions are enforced for security (i.e. we don't want to let
users write a bunch of iptables rules and then just not enforce them):

- Only the filter table is writable.
- Only ACCEPT rules with no matching criteria can be added.
2020-01-08 10:08:14 -08:00
..
BUILD Reorder BUILD license and load functions in gvisor. 2019-10-16 16:40:30 -07:00
device.go Rename epsocket to netstack. 2019-10-07 13:57:59 -07:00
netstack.go Write simple ACCEPT rules to the filter table. 2020-01-08 10:08:14 -08:00
provider.go AF_PACKET support for netstack (aka epsocket). 2019-10-21 13:23:18 -07:00
save_restore.go Rename epsocket to netstack. 2019-10-07 13:57:59 -07:00
stack.go Add endpoint tracking to the stack. 2019-10-29 16:14:51 -07:00