All of lore.kernel.org
 help / color / mirror / Atom feed
From: Pablo Neira Ayuso <pablo@netfilter.org>
To: Ansis Atteka <aatteka@nicira.com>
Cc: netfilter-devel@vger.kernel.org
Subject: Re: [PATCHv3] conntrackd: make conntrackd namespace aware
Date: Thu, 11 Oct 2012 00:35:56 +0200	[thread overview]
Message-ID: <20121010223556.GA6160@1984> (raw)
In-Reply-To: <1349315351-6689-1-git-send-email-aatteka@nicira.com>

Hi Ansis,

On Wed, Oct 03, 2012 at 06:49:10PM -0700, Ansis Atteka wrote:
> This patch allows conntrackd to open CT Netlink sockets into a given
> network namespace. Channel sockets (e.g. UDP) would still be opened into
> the same namespace where conntrackd was started.
> 
> The only binary this patch affects is conntrackd. All other binaries (e.g.
> conntrack, nfct) would still operate in the same namespace where they were
> started.
> 
> To make use of this patch:
> 1. create a network namespace: "ip netns add the_ns"
> 2. add "NetlinkNamespace /var/run/netns/the_ns" line to the conntrackd.conf
> file inside General {...} section.

I want to apply this, but user-space helpers got broken with this:

[Thu Oct 11 00:31:13 2012] (pid=12400) [ERROR] could not switch to namespace: Invalid argument

You can use conntrack-tools/doc/helper/conntrackd.conf as example.

You also need to use a Linux kernel 3.6 to test this user-space helper
feature, see: http://conntrack-tools.netfilter.org/manual.html#helpers

  reply	other threads:[~2012-10-10 22:36 UTC|newest]

Thread overview: 4+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2012-10-04  1:49 [PATCHv3] conntrackd: make conntrackd namespace aware Ansis Atteka
2012-10-10 22:35 ` Pablo Neira Ayuso [this message]
2012-10-13  2:02   ` Ansis Atteka
2012-10-14 21:48     ` Pablo Neira Ayuso

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20121010223556.GA6160@1984 \
    --to=pablo@netfilter.org \
    --cc=aatteka@nicira.com \
    --cc=netfilter-devel@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.