How to use libraries to implement operations on Linux iptables in Golang?

Go language implements Linux iptables rule operations

iptables is a powerful firewall tool in Linux systems, and it is very practical to automatically manage it through programming languages. This article will introduce how to use go-iptables and iptables-go libraries in Go language to manipulate iptables rules.

First, let's look at the go-iptables library. It provides a simple API to facilitate the addition, deletion, modification and search of iptables rules. Here is an example of inserting rules using go-iptables :

 package main

import (
    "fmt"
    "github.com/coreos/go-iptables/iptables"
)

func main() {
    ipt, err := iptables.New()
    if err != nil {
        panic(err)
    }
    err = ipt.Insert("filter", "INPUT", 1, "-p", "tcp", "-m", "tcp", "--dport", "80", "-j", "ACCEPT")
    if err != nil {
        panic(err)
    }
    fmt.Println("Rules have been inserted successfully")
}

This code inserts a rule that allows TCP 80 port traffic to pass through at the first location of INPUT chain of filter table.

Next, we introduce iptables-go library. It provides a more advanced API that allows more flexibility in manipulating tables, chains and rules of iptables. Here is an example of inserting rules with iptables-go :

 package main

import (
    "fmt"
    "github.com/corestone/iptables-go"
)

func main() {
    ipt := iptables.New()
    err := ipt.Append("filter", "INPUT", []string{"-p", "tcp", "-m", "tcp", "--dport", "80", "-j", "ACCEPT"})
    if err != nil {
        panic(err)
    }
    fmt.Println("The rule has been successfully appended")
}

This code appends the rule to the end of INPUT chain of filter table.

Both libraries provide powerful features that meet the needs of most iptables operations. Which library to choose depends on your specific needs and preferences. Remember to install the corresponding library before use: go get github.com/coreos/go-iptables/iptables or go get github.com/corestone/iptables-go . And you need to have the corresponding system permissions to operate iptables.

The above is the detailed content of How to use libraries to implement operations on Linux iptables in Golang?. For more information, please follow other related articles on the PHP Chinese website!