Interface PacketFilter

client/iface/device/device_filter.go:15–33

PacketFilter interface for firewall abilities

// PacketFilter interface for firewall abilities
type PacketFilter interface {
	// FilterOutbound filter outgoing packets from host to external destinations
	FilterOutbound(packetData []byte, size int) bool

	// FilterInbound filter incoming packets from external sources to host
	FilterInbound(packetData []byte, size int) bool

	// SetUDPPacketHook registers a hook for outbound UDP packets matching the given IP and port.
	// Hook function returns true if the packet should be dropped.
	// Only one UDP hook is supported; calling again replaces the previous hook.
	// Pass nil hook to remove.
	SetUDPPacketHook(ip netip.Addr, dPort uint16, hook func(packet []byte) bool)

	// SetTCPPacketHook registers a hook for outbound TCP packets matching the given IP and port.
	// Hook function returns true if the packet should be dropped.
	// Only one TCP hook is supported; calling again replaces the previous hook.
	// Pass nil hook to remove.
	SetTCPPacketHook(ip netip.Addr, dPort uint16, hook func(packet []byte) bool)
}

// PacketCapture captures raw packets for debugging. Implementations must be
// safe for concurrent use and must not block.