package IPsec provides primitives for establishing IPsec in the fastdp mode.

AddChainWithRules creates a chain and appends given rules to it.

For a specific address, we only care if it is actually *inside* an existing route, because weave-local traffic never hits IP routing.

A network is considered free if it does not overlap any existing routes on this host.

configureARP is a helper for the Docker plugin which doesn't set the addresses itself.

ConfigureIPTables idempotently configures all the iptables!.

ConnectedToBridgeVethPeerIds returns peer indexes of veth links connected to the given bridge.

create and attach a veth to the Weave bridge.

Wait for an interface to come up.

Wait for an interface to come up and have a route added to the multicast subnet.

Disable TX checksum offload on specified interface.

Expose makes the network accessible from a host by assigning a given IP address to the weave bridge.

Get the weave bridge interface.

GetSystemPeerName returns an ID derived from concatenated machine-id (either systemd or dbus), the system (aka bios) UUID and the hypervisor UUID.

Lookup the weave interface of a container.

MonitorForIptablesFlush periodically checks for a canary chain in iptables.

PollImmediateUntil tries a condition func until it returns true, an error or stopCh is closed.

ResetIPTables resets IPTables in case they're in a strange state from a previous run.

linux/ethtool.h.

linux/ethtool.h.

linux/if.h.

linux/sockios.h.

name inside container namespace.

linux/ethtool.h 'struct ethtool_value'.

linux/if.h 'struct ifreq'.