componentized/sockets

A collection of utility components that remix wasi:sockets types and interfaces.

Socket gate access control.

Socket gate access control for wasi:sockets/ip-name-lookup.

Socket gate access control for tcp and udp sockets.

Socket latch that uses CIDR ranges to grant or deny traffic originating in either direction based on the remote address. Return traffic is not restricted.

Socket latch that uses CIDR ranges to grant or deny binding tcp/udp sockets to a local address and port.

Socket latch that uses CIDR ranges to grant or deny originating outbound tcp/udp traffic based on the remote address. Return traffic to peers that reached the guest first is not restricted.

Socket latch that uses CIDR ranges to grant or deny inbound tcp/udp traffic originating from remote peers based on the remote address. Return traffic from peers the guest reached first is not restricted. This is the complement of `latch-cidr-egress`.

Sockets latch that implicitly defers all decisions.

Sockets latch that wraps another latch, delegating only tcp socket operations to it. Udp socket and ip-name-lookup operations are deferred without consulting the wrapped latch, it neither authorizes nor observes them.

Sockets latch that wraps another latch, delegating only udp socket operations to it. Tcp socket and ip-name-lookup operations are deferred without consulting the wrapped latch, it neither authorizes nor observes them.

Sockets latch that implicitly denies all operations.

Sockets latch that implicitly denies explicitly binding tcp and udp sockets to a local address.

Sockets latch that implicitly denies all outbound connections.

Sockets latch that implicitly denies connecting to addresses, unless they were granted for wasi:sockets/ip-name-lookup.

Sockets latch that implicitly denies all ip-name lookups.

Internal config for latch-deny-ip-name-lookup.

Sockets latch that implicitly denies all IPv4 operations.

Sockets latch that implicitly denies all IPv6 operations.

Static config for `latch-cidr-egress` that denies originating outbound traffic to addresses that are not globally reachable, like private networks, loopback, link local and cloud metadata endpoints.

Sockets latch that randomly denies operations, to prove a component is resilient to failures.

Sockets latch that implicitly denies all TCP operations.

Sockets latch that implicitly denies all UDP operations.

Sockets latch that wraps another latch, logging the operations it would deny without denying them.

Socket latch that uses glob patterns to grant or deny ip-name lookups.

Sockets latch that aggregates two other sockets latches.

Sockets latch that aggregates three other sockets latches.

Sockets latch that aggregates four other sockets latches.

Sockets latch that aggregates five other sockets latches.

Sockets latch that wraps another latch, logging each decision it makes without changing it.

Trace wasi:sockets calls using a logger.

Trace wasi:sockets/ip-name-lookup calls using a logger.

Trace wasi:sockets/types calls using a logger.