Record Class NetworkEgressPolicy

java.lang.Object
java.lang.Record
org.j7m.middleware.api.isolation.NetworkEgressPolicy
Record Components:
denyAllByDefault - whether unmatched destinations are denied
allowLoopback - whether loopback destinations are allowed
denyNonLoopback - whether non-loopback destinations are denied before rules
rules - ordered immutable rules
public record NetworkEgressPolicy(boolean denyAllByDefault, boolean allowLoopback, boolean denyNonLoopback, List<NetworkEgressRule> rules) extends Record
Deterministic network egress policy.

The policy evaluates host/port metadata before J7M-provided network capabilities are used. It is not a kernel firewall and does not intercept arbitrary socket creation by application code.

  • Constructor Details

    • NetworkEgressPolicy

      public NetworkEgressPolicy(boolean denyAllByDefault, boolean allowLoopback, boolean denyNonLoopback, List<NetworkEgressRule> rules)
      Creates a validated network policy.

  • Method Details

    • denyAll

      public static NetworkEgressPolicy denyAll()
      Creates a deny-all network policy.
      Returns:
      deny-all policy

    • toString

      public final String toString()
      Returns a string representation of this record class. The representation contains the name of the class, followed by the name and value of each of the record components.
      Specified by:
      toString in class Record
      Returns:
      a string representation of this object

    • hashCode

      public final int hashCode()
      Returns a hash code value for this object. The value is derived from the hash code of each of the record components.
      Specified by:
      hashCode in class Record
      Returns:
      a hash code value for this object

    • equals

      public final boolean equals(Object o)
      Indicates whether some other object is "equal to" this one. The objects are equal if the other object is of the same class and if all the record components are equal. Reference components are compared with Objects::equals(Object,Object); primitive components are compared with the compare method from their corresponding wrapper classes.
      Specified by:
      equals in class Record
      Parameters:
      o - the object with which to compare
      Returns:
      true if this object is the same as the o argument; false otherwise.

    • denyAllByDefault

      public boolean denyAllByDefault()
      Returns the value of the denyAllByDefault record component.
      Returns:
      the value of the denyAllByDefault record component

    • allowLoopback

      public boolean allowLoopback()
      Returns the value of the allowLoopback record component.
      Returns:
      the value of the allowLoopback record component

    • denyNonLoopback

      public boolean denyNonLoopback()
      Returns the value of the denyNonLoopback record component.
      Returns:
      the value of the denyNonLoopback record component

    • rules

      public List<NetworkEgressRule> rules()
      Returns the value of the rules record component.
      Returns:
      the value of the rules record component