Method AddElement

internal/firewalls/nftables/set.go:66–126

(key []byte, options *ElementOptions, overwrite bool)

}

func (this *Set) AddElement(key []byte, options *ElementOptions, overwrite bool) error {
	// check if already exists
	if this.expiration != nil && !overwrite && this.expiration.Contains(key) {
		return nil
	}

	var expiresTime = time.Time{}
	var rawElement = nft.SetElement{
		Key: key,
	}
	if options != nil {
		rawElement.Timeout = options.Timeout

		if options.Timeout > 0 {
			expiresTime = time.UnixMilli(time.Now().UnixMilli() + options.Timeout.Milliseconds())
		}
	}
	err := this.conn.Raw().SetAddElements(this.rawSet, []nft.SetElement{
		rawElement,
	})
	if err != nil {
		return err
	}

	err = this.conn.Commit()
	if err == nil {
		if this.expiration != nil {
			this.expiration.Add(key, expiresTime)
		}
	} else {
		var isFileExistsErr = strings.Contains(err.Error(), "file exists")
		if !overwrite && isFileExistsErr {
			// ignore file exists error
			return nil
		}

		// retry if exists
		if overwrite && isFileExistsErr {
			deleteErr := this.conn.Raw().SetDeleteElements(this.rawSet, []nft.SetElement{
				{
					Key: key,
				},
			})
			if deleteErr == nil {
				err = this.conn.Raw().SetAddElements(this.rawSet, []nft.SetElement{
					rawElement,
				})
				if err == nil {
					err = this.conn.Commit()
					if err == nil {
						if this.expiration != nil {
							this.expiration.Add(key, expiresTime)
						}
					}
				}
			}
		}
	}