AddressSet validates the addresses in the slice using the "isValid" function.

AppendPortIfNeeded appends the given port to IP address unless it is already in "ipv4:port" or "[ipv6]:port" format.

EnsureSysctl sets a kernel sysctl to a given numeric value.

GetClusterIPByFamily returns a service clusterip by family.

GetIPFamilyFromIP Returns the IP family of ipStr, or IPFamilyUnknown if ipStr can't be parsed as an IP.

IPPart returns just the IP part of an IP or IP:port or endpoint string.

IsZeroCIDR checks whether the input CIDR string is either the IPv4 or IPv6 zero CIDR.

MapCIDRsByIPFamily maps a slice of CIDRs to their respective IP families (v4 or v6).

MapIPsByIPFamily maps a slice of IPs to their respective IP families (v4 or v6).

NewDetectLocalByBridgeInterface returns a LocalTrafficDetector that considers traffic from interfaceName to be from a local pod, and traffic from other interfaces to be non-local.

NewDetectLocalByCIDR returns a LocalTrafficDetector that considers traffic from the provided cidr to be from a local pod, and other traffic to be non-local.

NewDetectLocalByInterfaceNamePrefix returns a LocalTrafficDetector that considers traffic from interfaces starting with interfacePrefix to be from a local pod, and traffic from other interfaces to be non-local.

NewDiscardLineBuffer returns a dummy LineBuffer that counts the number of writes but throws away the data.

NewLineBuffer returns a new "real" LineBuffer.

NewNodePortAddresses takes an IP family and the `--nodeport-addresses` value (which is assumed to contain only valid CIDRs, potentially of both IP families) and returns a NodePortAddresses object for the given family.

NewNoOpLocalDetector returns a no-op implementation of LocalTrafficDetector.

OtherIPFamily returns the other ip family.

ShouldSkipService checks if a given service should skip proxying.

FullSyncPeriod is iptables and nftables proxier full sync period.

IPv4ZeroCIDR is the CIDR block for the whole IPv4 address space.

IPv6ZeroCIDR is the CIDR block for the whole IPv6 address space.

NodePortAddresses is used to handle the --nodeport-addresses flag.

RealNetwork implements the NetworkInterfacer interface for production code, just wrapping the underlying net library function calls.

LineBuffer is an interface for writing lines of input to a bytes.Buffer.

LocalTrafficDetector generates iptables or nftables rules to detect traffic from local pods.

NetworkInterfacer defines an interface for several net library functions.