Input: IP or IP range + port or port range
Output: which ports are open on which IPs
$ ./PortDiscovery ipaddr ports
The service discovery's goal is to map a given host address and port to the following resolution:
- Session layer protocol: TLS, SSH or none
- Presentation layer protocol: HTTP, gRPC or else
- Application layer protocol: MySQL, ElasticSearch, K8s API server, etc.
A given host and port can be identified as "TLS, HTTP, Kubelet", or "TCP, MySQL" as an example.
Since there are a lot of protocols which are dependent on the underlying session layer, the discovery API contains abstractions (interfaces) so there is no need for example to write different code that discovers "Kubernetes API server" in the case of HTTP or HTTPS.
See interface definitions in types.go of:
SessionLayerProtocolDiscovery- this interface is implemented per protocol (TLS, SSH)iSessionLayerDiscoveryResult- this is the corresponding result object interfaceiSessionHandler- session handler interface, it must have an implementation per protocol to enable presentation layer/application layer to work whit this layer
Example implementation in sl_tls.go which shows how it is implemented for TLS.
See interface definitions in types.go of:
TransportLayerProtocolDiscovery- this interface is implemented per protocol (HTTP, gRPC)iTransportLayerDiscoveryResult- this is the corresponding result object interface
Example implementation for HTTP discovery is in pl_http_discovery.go
Input: IP + Port
Output: Service type
Also checks for anonymous access for etcd server
$ ./ServiceDiscovery ipaddr Port
