Modules

Modules

• libbpfilter
  • bf_ruleset_get()
  • bf_ruleset_set()
  • bf_ruleset_flush()
  • bf_chain_set()
  • bf_chain_get()
  • bf_chain_prog_fd()
  • bf_chain_logs_fd()
  • bf_chain_load()
  • bf_chain_attach()
  • bf_chain_update()
  • bf_chain_flush()
  • bf_ipt_replace()
  • bf_ipt_add_counters()
  • bf_ipt_get_info()
  • bf_ipt_get_entries()
  • bf_nft_send()
  • bf_nft_sendrecv()
  • Namespaces
  • Pack
  • Rule
• bpfilter
  • bf_ctx_setup()
  • bf_ctx_teardown()
  • bf_ctx_dump()
  • bf_ctx_save()
  • bf_ctx_load()
  • bf_ctx_flush()
  • bf_ctx_is_empty()
  • bf_ctx_get_cgen()
  • bf_ctx_get_cgens_for_front()
  • bf_ctx_set_cgen()
  • bf_ctx_delete_cgen()
  • bf_ctx_get_ns()
  • bf_ctx_token()
  • bf_ctx_get_pindir_fd()
  • bf_ctx_rm_pindir()
  • bf_ctx_get_elfstub()
  • xlate

bpfilter is composed of multiple modules depending on each other. Splitting the project in different modules allows for the source code to be efficiently reused, be it for bfcli, bpfilter’s daemon, or libbpfilter:

• core: core definitions used by the daemon, bfcli, and libbpfilter.

• bpfilter: daemon logic, including translation of the front-end (client) data into bpfilter’s internal format, and the BPF bytecode generation logic.

• bfcli: generic client to communicate with the daemon.

• libbpfilter: static and shared library to communicate with the daemon.

• external: non-bpfilter code, imported into the project to provide consistent external definitions.