This project has retired. For details please refer to its Attic page.

org.apache.whirr.service
Class FirewallManager

java.lang.Object
  org.apache.whirr.service.FirewallManager

public class FirewallManager
extends Object

Nested Class Summary

static class	FirewallManager.Rule
static class	FirewallManager.StoredRule

Constructor Summary

FirewallManager(org.jclouds.compute.ComputeServiceContext computeServiceContext, ClusterSpec clusterSpec, Cluster cluster)

Method Summary

void	addRule(FirewallManager.Rule rule) Rules are additive.
void	addRules(FirewallManager.Rule... rules)
void	addRules(Set<FirewallManager.Rule> rules)
void	authorizeAllRules() Authorizes all rules via jclouds security groups interface.
static void	authorizeIngress(org.jclouds.compute.ComputeServiceContext computeServiceContext, Set<Cluster.Instance> instances, ClusterSpec clusterSpec, List<String> cidrs, int... ports)
List<org.jclouds.scriptbuilder.domain.Statement>	getRulesAsStatements() Returns a list of Statements for executing iptables for the stored rules.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

FirewallManager

public FirewallManager(org.jclouds.compute.ComputeServiceContext computeServiceContext,
                       ClusterSpec clusterSpec,
                       Cluster cluster)

Method Detail

addRules

public void addRules(FirewallManager.Rule... rules)
              throws IOException

Throws:

IOException

addRules

public void addRules(Set<FirewallManager.Rule> rules)
              throws IOException

Throws:

IOException

addRule

public void addRule(FirewallManager.Rule rule)
             throws IOException

Rules are additive. If no source is set then it will default to ClusterSpec.getClientCidrs(), or, if that is not set, to the client's originating IP. If no destinations or ports are set then the rule has not effect.

Parameters:

rule - The rule to add to the firewall.

Throws:

IOException

authorizeAllRules

public void authorizeAllRules()

Authorizes all rules via jclouds security groups interface.

getRulesAsStatements

public List<org.jclouds.scriptbuilder.domain.Statement> getRulesAsStatements()

Returns a list of Statements for executing iptables for the stored rules.

Returns:

List of iptables Statements.

authorizeIngress

public static void authorizeIngress(org.jclouds.compute.ComputeServiceContext computeServiceContext,
                                    Set<Cluster.Instance> instances,
                                    ClusterSpec clusterSpec,
                                    List<String> cidrs,
                                    int... ports)