reaction/tests/test-conf/test-ipset.jsonnet

{
  patterns: {
    ip: {
      type: 'ip',
    },
    all: {
      regex: @".*",
    },
  },

  plugins: {
    ipset: {
      path: './target/debug/reaction-plugin-ipset',
      check_root: false,
      systemd_options: {
        CapabilityBoundingSet: ['~CAP_NET_ADMIN', '~CAP_PERFMON'],
      },
    },
  },

  streams: {
    s0: {
      cmd: ['bash', '-c', 'sleep 1; for i in $(seq 4); do echo 192.0.2.$i; echo 2001:db8:$i:a31b::$i; sleep 0.1; done; sleep 3'],
      filters: {
        f0: {
          regex: ['^<ip>$'],
          actions: {
            a0: {
              type: 'ipset',
              options: {
                set: 'reactiontest',
                // pattern: 'ip',
                // version: 'ip',
                // chains: ['INPUT', 'FORWARD'],
                // target: 'DROP',
                // action: 'add',
              },
            },
            a1: {
              after: '2s',
              type: 'ipset',
              options: {
                set: 'reactiontest',
                action: 'del',
              },
            },
          },
        },
      },
    },
  },
}