Program</th>	Description</th></tr></thead>
`block_private_ipv4</code></td>`	Blocks private IPv4 addresses subnets allowing only SSH access on port 22</td></tr>
`block_ip</code></td>`	Drops packets with destination equal to the input IPv4 address</td></tr>
`block_port</code></td>`	Drops packets with the destination port equal to the input port number</td></tr>
`nop</code></td>`	A simple program that does nothing</td></tr> </tbody></table> Build§</a> </h2> To compile traffico from source you either provide your `vmlinux.h</code> in the vmlinux/</code> directory (default option) or you configure the project to generate one from your current Linux kernel:</p>` `xmake</span> f</span> --generate-vmlinux=y</span></span></code></pre> Now you will be able to build traffico from source by running:</p>` `xmake</span></span></code></pre> In case you only want to compile the BPF programs you can do this:</p>xmake</span> -b</span> bpf</span></span></code></pre>Test§</a> </h2> To run the test suite you can do this:</p> xmake</span> -b</span> test</span></span> xmake</span> run test</span></span></code></pre>`

traffico

2022-05-24T00:00:00+00:00

traffico is a collection of tools to shape traffic on a network using traffic control tc(8)</code>. It can be used via a CLI tool (traffico</code>) or as a CNI plugin (traffico-cni</code>). For a list of the available programs and what they do see the Built-in programs</a> section.</p>

The built-in programs are very opinionated and made for the needs of the authors but the framework is flexible enough to be used for other purposes. You can add programs to the bpf/</code> directory to extend it to other use cases.</p>

Contact§</a>
</h2>
If you have problems, questions, ideas or suggestions, please contact us by
posting to https://github.com/leodido/traffico/issues.</p>
Download§</a>
</h2>
To download the very latest source do this:</p>
git</span> clone https://github.com/leodido/traffico.git</span></span></code></pre>Authors§</a>
</h2>

Leonardo Di Donato</li>
Lorenzo Fontana</li>
</ul>
Usage§</a>
</h2>
Traffico can be either used standalone or as a CNI plugin.</p>
traffico§</a>
</h3>
traffico</code> is a CLI tool that can be used to load and unload the programs.
You can choose an interface and choose whether the program will be loaded in
INGRESS</code> or EGRESS</code>.</p>
Example usage:</p>
traffico</span> --ifname=eth0 --at=INGRESS</span> block_private_ipv4</span></span></code></pre>traffico-cni§</a>
</h3>
traffico-cni</code> is a meta CNI plugin that allows the traffico programs to be used in CNI.</p>
Meta means that traffico-cni</code> does not create any interface for you,
it is intended to be used as a chained CNI plugin.</p>
The plugin block to use traffico-cni</code> is very similar to how traffico</code> is
used as a CLI tool.</p>
{</span></span>
    "type"</span>:</span> "traffico-cni"</span>,</span></span>
    "program"</span>:</span> "block_private_ipv4"</span>,</span></span>
    "attachPoint"</span>:</span> "ingress"</span></span>
}</span></span></code></pre>
Here's an example CNI config file featuring traffico-cni</code>.</p>
{</span></span>
    "name"</span>:</span> "mynetwork"</span>,</span></span>
    "cniVersion"</span>:</span> "0.4.0"</span>,</span></span>
    "plugins"</span>: [</span></span>
        {</span></span>
            "type"</span>:</span> "ptp"</span>,</span></span>
            "ipMasq"</span>:</span> true</span>,</span></span>
            "ipam"</span>: {</span></span>
                "type"</span>:</span> "host-local"</span>,</span></span>
                "subnet"</span>:</span> "10.10.10.0/24"</span>,</span></span>
                "resolvConf"</span>:</span> "/etc/resolv.conf"</span>,</span></span>
                "routes"</span>: [</span></span>
                    {</span> "dst"</span>:</span> "0.0.0.0/0"</span> }</span></span>
                ]</span></span>
            },</span></span>
            "dns"</span>: {</span></span>
                "nameservers"</span>: [</span>"1.1.1.1"</span>,</span> "1.0.0.1"</span>]</span></span>
            }</span></span>
        },</span></span>
        {</span></span>
            "type"</span>:</span> "firewall"</span></span>
        },</span></span>
        {</span></span>
            "type"</span>:</span> "traffico-cni"</span>,</span></span>
            "program"</span>:</span> "block_private_ipv4"</span>,</span></span>
            "attachPoint"</span>:</span> "ingress"</span></span>
        },</span></span>
        {</span></span>
            "type"</span>:</span> "tc-redirect-tap"</span></span>
        }</span></span>
    ]</span></span>
}</span></span></code></pre>Built-in programs§</a>
</h2>
Program</th> Description</th></tr></thead>

block_private_ipv4</code></td> Blocks private IPv4 addresses subnets allowing only SSH access on port 22</td></tr>
block_ip</code></td> Drops packets with destination equal to the input IPv4 address</td></tr>
block_port</code></td> Drops packets with the destination port equal to the input port number</td></tr>
nop</code></td> A simple program that does nothing</td></tr>
</tbody></table>
Build§</a>
</h2>
To compile traffico from source you either provide your vmlinux.h</code> in the
vmlinux/</code> directory (default option) or you configure the project to
generate one from your current Linux kernel:</p>
xmake</span> f</span> --generate-vmlinux=y</span></span></code></pre>
Now you will be able to build traffico from source by running:</p>
xmake</span></span></code></pre>
In case you only want to compile the BPF programs you can do this:</p>
xmake</span> -b</span> bpf</span></span></code></pre>Test§</a>
</h2>
To run the test suite you can do this:</p>
xmake</span> -b</span> test</span></span>
xmake</span> run test</span></span></code></pre>

Test §</a> </h2>
To run the test suite you can do this:</p>
`xmake</span> -b</span> test</span></span> xmake</span> run test</span></span></code></pre>`

leodido.dev - CNI

traffico

leodido.dev - CNI

traffico

Download§</a> </h2> To download the very latest source do this:</p> git</span> clone https://github.com/leodido/traffico.git</span></span></code></pre>Authors§</a> </h2> Leonardo Di Donato</li>

Authors§</a> </h2> Leonardo Di Donato</li>

Test§</a> </h2> To run the test suite you can do this:</p> xmake</span> -b</span> test</span></span> xmake</span> run test</span></span></code></pre>

Test §</a> </h2>
To run the test suite you can do this:</p>
`xmake</span> -b</span> test</span></span> xmake</span> run test</span></span></code></pre>`